pkgsrc-Changes archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
CVS commit: pkgsrc/www/wordpress
Module Name: pkgsrc
Committed By: morr
Date: Thu Feb 10 10:25:50 UTC 2011
Modified Files:
pkgsrc/www/wordpress: Makefile distinfo
Log Message:
Security update to 3.0.5. Changes:
* Fix XSS bug: Properly encode title used in Quick/Bulk Edit, and offer
additional sanitization to various fields. Affects users of the Author or
Contributor role.
* Fix XSS bug: Preserve tag escaping in the tags meta box. Affects users of the
Author or Contributor role.
* Fix potential information disclosure of posts through the media uploader.
Affects users of the Author role.
* Enhancement: Force HTML filtering on comment text in the admin
* Enhancement: Harden check_admin_referer() when called without arguments,
which plugins should avoid.
* Update the license to GPLv2 (or later) and update copyright information for
the KSES library.
To generate a diff of this commit:
cvs rdiff -u -r1.14 -r1.15 pkgsrc/www/wordpress/Makefile
cvs rdiff -u -r1.10 -r1.11 pkgsrc/www/wordpress/distinfo
Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.
Home |
Main Index |
Thread Index |
Old Index