pkgsrc-Changes archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

CVS commit: pkgsrc/www/wordpress



Module Name:    pkgsrc
Committed By:   morr
Date:           Thu Feb 10 10:25:50 UTC 2011

Modified Files:
        pkgsrc/www/wordpress: Makefile distinfo

Log Message:
Security update to 3.0.5. Changes:

* Fix XSS bug: Properly encode title used in Quick/Bulk Edit, and offer 
additional sanitization to various fields. Affects users of the Author or 
Contributor role.
* Fix XSS bug: Preserve tag escaping in the tags meta box. Affects users of the 
Author or Contributor role.
* Fix potential information disclosure of posts through the media uploader. 
Affects users of the Author role.
* Enhancement: Force HTML filtering on comment text in the admin
* Enhancement: Harden check_admin_referer() when called without arguments, 
which plugins should avoid.
* Update the license to GPLv2 (or later) and update copyright information for 
the KSES library.


To generate a diff of this commit:
cvs rdiff -u -r1.14 -r1.15 pkgsrc/www/wordpress/Makefile
cvs rdiff -u -r1.10 -r1.11 pkgsrc/www/wordpress/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.



Home | Main Index | Thread Index | Old Index