CVS commit: [pkgsrc-2011Q1] pkgsrc/www/wordpress

["Matthias Scheler" <tron%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   tron
Date:           Mon Apr 11 14:20:17 UTC 2011

Modified Files:
        pkgsrc/www/wordpress [pkgsrc-2011Q1]: Makefile distinfo

Log Message:
Pullup ticket #3408 - requested by morr
www/wordpress security update

Revisions pulled up:
- www/wordpress/Makefile                                        1.17
- www/wordpress/distinfo                                        1.13

---
   Module Name: pkgsrc
   Committed By:        morr
   Date:                Sat Apr  9 00:57:43 UTC 2011

   Modified Files:
        pkgsrc/www/wordpress: Makefile distinfo

   Log Message:
   Update to wordpress 3.1.1.

   This maintenance and security release fixes almost thirty issues in 3.1,
   including:

   * Some security hardening to media uploads
   * Performance improvements
   * Fixes for IIS6 support
   * Fixes for taxonomy and PATHINFO (/index.php/) permalinks
   * Fixes for various query and taxonomy edge cases that caused some plugin
   compatibility issues

   Version 3.1.1 also addresses three security issues discovered by
   WordPress core developers Jon Cave and Peter Westwood, of wordpress's 
security
   team. The first hardens CSRF prevention in the media uploader. The
   second avoids a PHP crash in certain environments when handling
   devilishly devised links in comments, and the third addresses an XSS
   flaw.


To generate a diff of this commit:
cvs rdiff -u -r1.16 -r1.16.2.1 pkgsrc/www/wordpress/Makefile
cvs rdiff -u -r1.12 -r1.12.2.1 pkgsrc/www/wordpress/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.