pkgsrc-Changes-HG archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

[pkgsrc/trunk]: pkgsrc/www/wordpress Security update to version 4.8.3.



details:   https://anonhg.NetBSD.org/pkgsrc/rev/5c71a7219315
branches:  trunk
changeset: 371086:5c71a7219315
user:      morr <morr%pkgsrc.org@localhost>
date:      Fri Nov 03 09:49:13 2017 +0000

description:
Security update to version 4.8.3.

WordPress versions 4.8.2 and earlier are affected by an issue where
$wpdb->prepare() can create unexpected and unsafe queries leading to potential
SQL injection (SQLi). WordPress core is not directly vulnerable to this issue,
but we?ve added hardening to prevent plugins and themes from accidentally
causing a vulnerability. Reported by Anthony Ferrara.

diffstat:

 www/wordpress/Makefile |   4 ++--
 www/wordpress/PLIST    |   3 ++-
 www/wordpress/distinfo |  10 +++++-----
 3 files changed, 9 insertions(+), 8 deletions(-)

diffs (45 lines):

diff -r 1103e282c627 -r 5c71a7219315 www/wordpress/Makefile
--- a/www/wordpress/Makefile    Fri Nov 03 09:40:37 2017 +0000
+++ b/www/wordpress/Makefile    Fri Nov 03 09:49:13 2017 +0000
@@ -1,7 +1,7 @@
-# $NetBSD: Makefile,v 1.72 2017/09/21 19:24:46 morr Exp $
+# $NetBSD: Makefile,v 1.73 2017/11/03 09:49:13 morr Exp $
 
 DISTNAME=              wordpress-${VERSION}
-VERSION=               4.8.2
+VERSION=               4.8.3
 CATEGORIES=            www
 MASTER_SITES=          https://wordpress.org/
 
diff -r 1103e282c627 -r 5c71a7219315 www/wordpress/PLIST
--- a/www/wordpress/PLIST       Fri Nov 03 09:40:37 2017 +0000
+++ b/www/wordpress/PLIST       Fri Nov 03 09:49:13 2017 +0000
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.34 2017/06/18 18:01:42 morr Exp $
+@comment $NetBSD: PLIST,v 1.35 2017/11/03 09:49:13 morr Exp $
 share/doc/wordpress/license.txt
 share/doc/wordpress/readme.html
 share/examples/wordpress/wordpress.conf
@@ -536,6 +536,7 @@
 share/wordpress/wp-content/plugins/akismet/akismet.php
 share/wordpress/wp-content/plugins/akismet/class.akismet-admin.php
 share/wordpress/wp-content/plugins/akismet/class.akismet-cli.php
+share/wordpress/wp-content/plugins/akismet/class.akismet-rest-api.php
 share/wordpress/wp-content/plugins/akismet/class.akismet-widget.php
 share/wordpress/wp-content/plugins/akismet/class.akismet.php
 share/wordpress/wp-content/plugins/akismet/index.php
diff -r 1103e282c627 -r 5c71a7219315 www/wordpress/distinfo
--- a/www/wordpress/distinfo    Fri Nov 03 09:40:37 2017 +0000
+++ b/www/wordpress/distinfo    Fri Nov 03 09:49:13 2017 +0000
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.57 2017/09/21 19:24:46 morr Exp $
+$NetBSD: distinfo,v 1.58 2017/11/03 09:49:13 morr Exp $
 
-SHA1 (wordpress-4.8.2.tar.gz) = a99115b3b6d6d7a1eb6c5617d4e8e704ed50f450
-RMD160 (wordpress-4.8.2.tar.gz) = 7098a1c7f353238d40f4d56934351c867226636f
-SHA512 (wordpress-4.8.2.tar.gz) = e6b9dd7a3f9b510b1c85b0f9963d9303c9111f1d6ad471c5be076c5b9cf44ade5d1c761c336f44276ab88f69d6c842e6f33d637c7d76532ab88f12f49c385ca6
-Size (wordpress-4.8.2.tar.gz) = 8183815 bytes
+SHA1 (wordpress-4.8.3.tar.gz) = 8efc0b9f6146e143ed419b5419d7bb8400a696fc
+RMD160 (wordpress-4.8.3.tar.gz) = 264d1e87fc1d732627f021e81d3fbe754f5cfa0e
+SHA512 (wordpress-4.8.3.tar.gz) = 696be1c24dec869d896e22b408b17009e8c482545237156f17d4b5f2d726876a17c3cc5c3de632126229747589d74f7b188c06d2a79878efc800bd6db273d709
+Size (wordpress-4.8.3.tar.gz) = 8184961 bytes



Home | Main Index | Thread Index | Old Index