CVS commit: [pkgsrc-2009Q3] pkgsrc/www/wordpress

[Matthias Scheler <tron%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   tron
Date:           Fri Nov 13 11:07:27 UTC 2009

Modified Files:
        pkgsrc/www/wordpress [pkgsrc-2009Q3]: Makefile PLIST distinfo

Log Message:
Pullup ticket #2933 - requested by adrianp
wordpress: security update

Revisions pulled up:
- www/wordpress/Makefile                        1.6
- www/wordpress/PLIST                           1.4
- www/wordpress/distinfo                        1.5
---
Module Name:    pkgsrc
Committed By:   adrianp
Date:           Thu Nov 12 22:05:55 UTC 2009

Modified Files:
        pkgsrc/www/wordpress: Makefile PLIST distinfo

Log Message:
Update to 2.8.6

- 2.8.5
* Fix for trackback DOS
* Removal of permalink_structure eval
* Remove some create_function() calls
* Disallow unfiltered uploads by default, even for admins. Enable it again with
define('ALLOW_UNFILTERED_UPLOADS', true); in wp-config.php
* Add extra escapes here and there for some backside coverage
* Retire two old importers
* A few small bug fixes

- 2.8.6
* Fixed an XSS vulnerability in Press This
* Fixed issue with sanitizing uploaded file names that can be exploited in
certain Apache configurations


To generate a diff of this commit:
cvs rdiff -u -r1.5 -r1.5.2.1 pkgsrc/www/wordpress/Makefile
cvs rdiff -u -r1.3 -r1.3.2.1 pkgsrc/www/wordpress/PLIST
cvs rdiff -u -r1.4 -r1.4.2.1 pkgsrc/www/wordpress/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.