pkgsrc-Changes archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

CVS commit: [pkgsrc-2010Q4] pkgsrc/www/wordpress



Module Name:    pkgsrc
Committed By:   sbd
Date:           Fri Feb 11 04:31:47 UTC 2011

Modified Files:
        pkgsrc/www/wordpress [pkgsrc-2010Q4]: Makefile distinfo

Log Message:
Pullup ticket #3349 - requested by morr
www/wordpress update

Revisions pulled up:
- pkgsrc/www/wordpress/Makefile         1.15
- pkgsrc/www/wordpress/distinfo         1.11

-------------------------------------------------------------------------
   Module Name: pkgsrc
   Committed By:        morr
   Date:                Thu Feb 10 10:25:50 UTC 2011

   Modified Files:
        pkgsrc/www/wordpress: Makefile distinfo

   Log Message:
   Security update to 3.0.5. Changes:

   * Fix XSS bug: Properly encode title used in Quick/Bulk Edit, and offer
     additional sanitization to various fields. Affects users of the
     Author or Contributor role.
   * Fix XSS bug: Preserve tag escaping in the tags meta box. Affects
     users of the Author or Contributor role.
   * Fix potential information disclosure of posts through the media
     uploader. Affects users of the Author role.
   * Enhancement: Force HTML filtering on comment text in the admin
   * Enhancement: Harden check_admin_referer() when called without
     arguments, which plugins should avoid.
   * Update the license to GPLv2 (or later) and update copyright
     information for the KSES library.


To generate a diff of this commit:
cvs rdiff -u -r1.14 -r1.14.2.1 pkgsrc/www/wordpress/Makefile
cvs rdiff -u -r1.10 -r1.10.2.1 pkgsrc/www/wordpress/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.



Home | Main Index | Thread Index | Old Index