Pullup ticket #5659 - requested by bsiegert

www/wordpress: security update

Revisions pulled up:
- www/wordpress/Makefile                                        1.74
- www/wordpress/PLIST                                           1.36
- www/wordpress/distinfo                                        1.59

-------------------------------------------------------------------
   Module Name:	pkgsrc
   Committed By:	morr
   Date:		Sun Dec  3 17:06:37 UTC 2017

   Modified Files:
    	pkgsrc/www/wordpress: Makefile PLIST distinfo

   Log Message:
   Update to newest version, 4.9.1

   This version fixes 4 security bugs from earlier versions.

   For details, head to https://codex.wordpress.org/Version_4.9.1
   For 4.9 changes, head to https://codex.wordpress.org/Version_4.9


   To generate a diff of this commit:
   cvs rdiff -u -r1.73 -r1.74 pkgsrc/www/wordpress/Makefile
   cvs rdiff -u -r1.35 -r1.36 pkgsrc/www/wordpress/PLIST
   cvs rdiff -u -r1.58 -r1.59 pkgsrc/www/wordpress/distinfo

3 files changed, 94 insertions, 40 deletions

diff --git a/www/wordpress/Makefile b/www/wordpress/Makefile
index 0412e8b5649..a34b5c0bb75 100644
--- a/www/wordpress/Makefile
+++ b/www/wordpress/Makefile
@@ -1,7 +1,7 @@
-# $NetBSD: Makefile,v 1.72.4.1 2017/11/06 19:41:32 bsiegert Exp $
+# $NetBSD: Makefile,v 1.72.4.2 2017/12/20 18:38:37 spz Exp $
 
 DISTNAME=		wordpress-${VERSION}
-VERSION=		4.8.3
+VERSION=		4.9.1
 CATEGORIES=		www
 MASTER_SITES=		https://wordpress.org/
 
diff --git a/www/wordpress/PLIST b/www/wordpress/PLIST
index f6cf4ebde02..6e490a4152d 100644
--- a/www/wordpress/PLIST
+++ b/www/wordpress/PLIST
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.34.6.1 2017/11/06 19:41:32 bsiegert Exp $
+@comment $NetBSD: PLIST,v 1.34.6.2 2017/12/20 18:38:37 spz Exp $
 share/doc/wordpress/license.txt
 share/doc/wordpress/readme.html
 share/examples/wordpress/wordpress.conf
@@ -22,6 +22,10 @@ share/wordpress/wp-admin/css/admin-menu-rtl.css
 share/wordpress/wp-admin/css/admin-menu-rtl.min.css
 share/wordpress/wp-admin/css/admin-menu.css
 share/wordpress/wp-admin/css/admin-menu.min.css
+share/wordpress/wp-admin/css/code-editor-rtl.css
+share/wordpress/wp-admin/css/code-editor-rtl.min.css
+share/wordpress/wp-admin/css/code-editor.css
+share/wordpress/wp-admin/css/code-editor.min.css
 share/wordpress/wp-admin/css/color-picker-rtl.css
 share/wordpress/wp-admin/css/color-picker-rtl.min.css
 share/wordpress/wp-admin/css/color-picker.css
@@ -128,14 +132,6 @@ share/wordpress/wp-admin/css/nav-menus-rtl.css
 share/wordpress/wp-admin/css/nav-menus-rtl.min.css
 share/wordpress/wp-admin/css/nav-menus.css
 share/wordpress/wp-admin/css/nav-menus.min.css
-share/wordpress/wp-admin/css/press-this-editor-rtl.css
-share/wordpress/wp-admin/css/press-this-editor-rtl.min.css
-share/wordpress/wp-admin/css/press-this-editor.css
-share/wordpress/wp-admin/css/press-this-editor.min.css
-share/wordpress/wp-admin/css/press-this-rtl.css
-share/wordpress/wp-admin/css/press-this-rtl.min.css
-share/wordpress/wp-admin/css/press-this.css
-share/wordpress/wp-admin/css/press-this.min.css
 share/wordpress/wp-admin/css/revisions-rtl.css
 share/wordpress/wp-admin/css/revisions-rtl.min.css
 share/wordpress/wp-admin/css/revisions.css
@@ -283,7 +279,6 @@ share/wordpress/wp-admin/includes/class-wp-plugin-install-list-table.php
 share/wordpress/wp-admin/includes/class-wp-plugins-list-table.php
 share/wordpress/wp-admin/includes/class-wp-post-comments-list-table.php
 share/wordpress/wp-admin/includes/class-wp-posts-list-table.php
-share/wordpress/wp-admin/includes/class-wp-press-this.php
 share/wordpress/wp-admin/includes/class-wp-screen.php
 share/wordpress/wp-admin/includes/class-wp-site-icon.php
 share/wordpress/wp-admin/includes/class-wp-terms-list-table.php
@@ -337,8 +332,8 @@ share/wordpress/wp-admin/install-helper.php
 share/wordpress/wp-admin/install.php
 share/wordpress/wp-admin/js/accordion.js
 share/wordpress/wp-admin/js/accordion.min.js
-share/wordpress/wp-admin/js/bookmarklet.js
-share/wordpress/wp-admin/js/bookmarklet.min.js
+share/wordpress/wp-admin/js/code-editor.js
+share/wordpress/wp-admin/js/code-editor.min.js
 share/wordpress/wp-admin/js/color-picker.js
 share/wordpress/wp-admin/js/color-picker.min.js
 share/wordpress/wp-admin/js/comment.js
@@ -392,8 +387,6 @@ share/wordpress/wp-admin/js/post.js
 share/wordpress/wp-admin/js/post.min.js
 share/wordpress/wp-admin/js/postbox.js
 share/wordpress/wp-admin/js/postbox.min.js
-share/wordpress/wp-admin/js/press-this.js
-share/wordpress/wp-admin/js/press-this.min.js
 share/wordpress/wp-admin/js/revisions.js
 share/wordpress/wp-admin/js/revisions.min.js
 share/wordpress/wp-admin/js/set-post-thumbnail.js
@@ -406,6 +399,8 @@ share/wordpress/wp-admin/js/tags-suggest.js
 share/wordpress/wp-admin/js/tags-suggest.min.js
 share/wordpress/wp-admin/js/tags.js
 share/wordpress/wp-admin/js/tags.min.js
+share/wordpress/wp-admin/js/theme-plugin-editor.js
+share/wordpress/wp-admin/js/theme-plugin-editor.min.js
 share/wordpress/wp-admin/js/theme.js
 share/wordpress/wp-admin/js/theme.min.js
 share/wordpress/wp-admin/js/updates.js
@@ -416,8 +411,12 @@ share/wordpress/wp-admin/js/user-suggest.js
 share/wordpress/wp-admin/js/user-suggest.min.js
 share/wordpress/wp-admin/js/widgets.js
 share/wordpress/wp-admin/js/widgets.min.js
+share/wordpress/wp-admin/js/widgets/custom-html-widgets.js
+share/wordpress/wp-admin/js/widgets/custom-html-widgets.min.js
 share/wordpress/wp-admin/js/widgets/media-audio-widget.js
 share/wordpress/wp-admin/js/widgets/media-audio-widget.min.js
+share/wordpress/wp-admin/js/widgets/media-gallery-widget.js
+share/wordpress/wp-admin/js/widgets/media-gallery-widget.min.js
 share/wordpress/wp-admin/js/widgets/media-image-widget.js
 share/wordpress/wp-admin/js/widgets/media-image-widget.min.js
 share/wordpress/wp-admin/js/widgets/media-video-widget.js
@@ -466,6 +465,7 @@ share/wordpress/wp-admin/network/menu.php
 share/wordpress/wp-admin/network/plugin-editor.php
 share/wordpress/wp-admin/network/plugin-install.php
 share/wordpress/wp-admin/network/plugins.php
+share/wordpress/wp-admin/network/privacy.php
 share/wordpress/wp-admin/network/profile.php
 share/wordpress/wp-admin/network/settings.php
 share/wordpress/wp-admin/network/setup.php
@@ -498,6 +498,7 @@ share/wordpress/wp-admin/plugins.php
 share/wordpress/wp-admin/post-new.php
 share/wordpress/wp-admin/post.php
 share/wordpress/wp-admin/press-this.php
+share/wordpress/wp-admin/privacy.php
 share/wordpress/wp-admin/profile.php
 share/wordpress/wp-admin/revision.php
 share/wordpress/wp-admin/setup-config.php
@@ -519,6 +520,7 @@ share/wordpress/wp-admin/user/credits.php
 share/wordpress/wp-admin/user/freedoms.php
 share/wordpress/wp-admin/user/index.php
 share/wordpress/wp-admin/user/menu.php
+share/wordpress/wp-admin/user/privacy.php
 share/wordpress/wp-admin/user/profile.php
 share/wordpress/wp-admin/user/user-edit.php
 share/wordpress/wp-admin/users.php
@@ -962,9 +964,11 @@ share/wordpress/wp-includes/css/wp-pointer.min.css
 share/wordpress/wp-includes/customize/class-wp-customize-background-image-control.php
 share/wordpress/wp-includes/customize/class-wp-customize-background-image-setting.php
 share/wordpress/wp-includes/customize/class-wp-customize-background-position-control.php
+share/wordpress/wp-includes/customize/class-wp-customize-code-editor-control.php
 share/wordpress/wp-includes/customize/class-wp-customize-color-control.php
 share/wordpress/wp-includes/customize/class-wp-customize-cropped-image-control.php
 share/wordpress/wp-includes/customize/class-wp-customize-custom-css-setting.php
+share/wordpress/wp-includes/customize/class-wp-customize-date-time-control.php
 share/wordpress/wp-includes/customize/class-wp-customize-filter-setting.php
 share/wordpress/wp-includes/customize/class-wp-customize-header-image-control.php
 share/wordpress/wp-includes/customize/class-wp-customize-header-image-setting.php
@@ -975,6 +979,7 @@ share/wordpress/wp-includes/customize/class-wp-customize-nav-menu-control.php
 share/wordpress/wp-includes/customize/class-wp-customize-nav-menu-item-control.php
 share/wordpress/wp-includes/customize/class-wp-customize-nav-menu-item-setting.php
 share/wordpress/wp-includes/customize/class-wp-customize-nav-menu-location-control.php
+share/wordpress/wp-includes/customize/class-wp-customize-nav-menu-locations-control.php
 share/wordpress/wp-includes/customize/class-wp-customize-nav-menu-name-control.php
 share/wordpress/wp-includes/customize/class-wp-customize-nav-menu-section.php
 share/wordpress/wp-includes/customize/class-wp-customize-nav-menu-setting.php
@@ -986,6 +991,7 @@ share/wordpress/wp-includes/customize/class-wp-customize-selective-refresh.php
 share/wordpress/wp-includes/customize/class-wp-customize-sidebar-section.php
 share/wordpress/wp-includes/customize/class-wp-customize-site-icon-control.php
 share/wordpress/wp-includes/customize/class-wp-customize-theme-control.php
+share/wordpress/wp-includes/customize/class-wp-customize-themes-panel.php
 share/wordpress/wp-includes/customize/class-wp-customize-themes-section.php
 share/wordpress/wp-includes/customize/class-wp-customize-upload-control.php
 share/wordpress/wp-includes/customize/class-wp-widget-area-customize-control.php
@@ -1088,9 +1094,18 @@ share/wordpress/wp-includes/images/xit-2x.gif
 share/wordpress/wp-includes/images/xit.gif
 share/wordpress/wp-includes/js/admin-bar.js
 share/wordpress/wp-includes/js/admin-bar.min.js
+share/wordpress/wp-includes/js/api-request.js
+share/wordpress/wp-includes/js/api-request.min.js
 share/wordpress/wp-includes/js/autosave.js
 share/wordpress/wp-includes/js/autosave.min.js
 share/wordpress/wp-includes/js/backbone.min.js
+share/wordpress/wp-includes/js/codemirror/codemirror.min.css
+share/wordpress/wp-includes/js/codemirror/codemirror.min.js
+share/wordpress/wp-includes/js/codemirror/csslint.js
+share/wordpress/wp-includes/js/codemirror/htmlhint-kses.js
+share/wordpress/wp-includes/js/codemirror/htmlhint.js
+share/wordpress/wp-includes/js/codemirror/jshint.js
+share/wordpress/wp-includes/js/codemirror/jsonlint.js
 share/wordpress/wp-includes/js/colorpicker.js
 share/wordpress/wp-includes/js/colorpicker.min.js
 share/wordpress/wp-includes/js/comment-reply.js
@@ -1197,19 +1212,54 @@ share/wordpress/wp-includes/js/media-models.js
 share/wordpress/wp-includes/js/media-models.min.js
 share/wordpress/wp-includes/js/media-views.js
 share/wordpress/wp-includes/js/media-views.min.js
-share/wordpress/wp-includes/js/mediaelement/background.png
-share/wordpress/wp-includes/js/mediaelement/bigplay.png
-share/wordpress/wp-includes/js/mediaelement/bigplay.svg
-share/wordpress/wp-includes/js/mediaelement/controls.png
-share/wordpress/wp-includes/js/mediaelement/controls.svg
-share/wordpress/wp-includes/js/mediaelement/flashmediaelement.swf
-share/wordpress/wp-includes/js/mediaelement/froogaloop.min.js
-share/wordpress/wp-includes/js/mediaelement/jumpforward.png
-share/wordpress/wp-includes/js/mediaelement/loading.gif
+share/wordpress/wp-includes/js/mediaelement/lang/ca.js
+share/wordpress/wp-includes/js/mediaelement/lang/cs.js
+share/wordpress/wp-includes/js/mediaelement/lang/de.js
+share/wordpress/wp-includes/js/mediaelement/lang/es.js
+share/wordpress/wp-includes/js/mediaelement/lang/fa.js
+share/wordpress/wp-includes/js/mediaelement/lang/fr.js
+share/wordpress/wp-includes/js/mediaelement/lang/hr.js
+share/wordpress/wp-includes/js/mediaelement/lang/hu.js
+share/wordpress/wp-includes/js/mediaelement/lang/it.js
+share/wordpress/wp-includes/js/mediaelement/lang/ja.js
+share/wordpress/wp-includes/js/mediaelement/lang/ko.js
+share/wordpress/wp-includes/js/mediaelement/lang/nl.js
+share/wordpress/wp-includes/js/mediaelement/lang/pl.js
+share/wordpress/wp-includes/js/mediaelement/lang/pt.js
+share/wordpress/wp-includes/js/mediaelement/lang/ro.js
+share/wordpress/wp-includes/js/mediaelement/lang/ru.js
+share/wordpress/wp-includes/js/mediaelement/lang/sk.js
+share/wordpress/wp-includes/js/mediaelement/lang/sv.js
+share/wordpress/wp-includes/js/mediaelement/lang/uk.js
+share/wordpress/wp-includes/js/mediaelement/lang/zh-cn.js
+share/wordpress/wp-includes/js/mediaelement/lang/zh.js
+share/wordpress/wp-includes/js/mediaelement/mediaelement-and-player.js
 share/wordpress/wp-includes/js/mediaelement/mediaelement-and-player.min.js
+share/wordpress/wp-includes/js/mediaelement/mediaelement-flash-audio-ogg.swf
+share/wordpress/wp-includes/js/mediaelement/mediaelement-flash-audio.swf
+share/wordpress/wp-includes/js/mediaelement/mediaelement-flash-video-hls.swf
+share/wordpress/wp-includes/js/mediaelement/mediaelement-flash-video-mdash.swf
+share/wordpress/wp-includes/js/mediaelement/mediaelement-flash-video.swf
+share/wordpress/wp-includes/js/mediaelement/mediaelement-migrate.js
+share/wordpress/wp-includes/js/mediaelement/mediaelement-migrate.min.js
+share/wordpress/wp-includes/js/mediaelement/mediaelement.js
+share/wordpress/wp-includes/js/mediaelement/mediaelement.min.js
+share/wordpress/wp-includes/js/mediaelement/mediaelementplayer-legacy.css
+share/wordpress/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css
+share/wordpress/wp-includes/js/mediaelement/mediaelementplayer.css
 share/wordpress/wp-includes/js/mediaelement/mediaelementplayer.min.css
-share/wordpress/wp-includes/js/mediaelement/silverlightmediaelement.xap
-share/wordpress/wp-includes/js/mediaelement/skipback.png
+share/wordpress/wp-includes/js/mediaelement/mejs-controls.png
+share/wordpress/wp-includes/js/mediaelement/mejs-controls.svg
+share/wordpress/wp-includes/js/mediaelement/renderers/dailymotion.js
+share/wordpress/wp-includes/js/mediaelement/renderers/dailymotion.min.js
+share/wordpress/wp-includes/js/mediaelement/renderers/facebook.js
+share/wordpress/wp-includes/js/mediaelement/renderers/facebook.min.js
+share/wordpress/wp-includes/js/mediaelement/renderers/soundcloud.js
+share/wordpress/wp-includes/js/mediaelement/renderers/soundcloud.min.js
+share/wordpress/wp-includes/js/mediaelement/renderers/twitch.js
+share/wordpress/wp-includes/js/mediaelement/renderers/twitch.min.js
+share/wordpress/wp-includes/js/mediaelement/renderers/vimeo.js
+share/wordpress/wp-includes/js/mediaelement/renderers/vimeo.min.js
 share/wordpress/wp-includes/js/mediaelement/wp-mediaelement.css
 share/wordpress/wp-includes/js/mediaelement/wp-mediaelement.js
 share/wordpress/wp-includes/js/mediaelement/wp-mediaelement.min.css
@@ -1219,9 +1269,10 @@ share/wordpress/wp-includes/js/mediaelement/wp-playlist.min.js
 share/wordpress/wp-includes/js/plupload/handlers.js
 share/wordpress/wp-includes/js/plupload/handlers.min.js
 share/wordpress/wp-includes/js/plupload/license.txt
-share/wordpress/wp-includes/js/plupload/plupload.flash.swf
-share/wordpress/wp-includes/js/plupload/plupload.full.min.js
-share/wordpress/wp-includes/js/plupload/plupload.silverlight.xap
+share/wordpress/wp-includes/js/plupload/moxie.js
+share/wordpress/wp-includes/js/plupload/moxie.min.js
+share/wordpress/wp-includes/js/plupload/plupload.js
+share/wordpress/wp-includes/js/plupload/plupload.min.js
 share/wordpress/wp-includes/js/plupload/wp-plupload.js
 share/wordpress/wp-includes/js/plupload/wp-plupload.min.js
 share/wordpress/wp-includes/js/quicktags.js
@@ -1232,12 +1283,7 @@ share/wordpress/wp-includes/js/swfobject.js
 share/wordpress/wp-includes/js/swfupload/handlers.js
 share/wordpress/wp-includes/js/swfupload/handlers.min.js
 share/wordpress/wp-includes/js/swfupload/license.txt
-share/wordpress/wp-includes/js/swfupload/plugins/swfupload.cookies.js
-share/wordpress/wp-includes/js/swfupload/plugins/swfupload.queue.js
-share/wordpress/wp-includes/js/swfupload/plugins/swfupload.speed.js
-share/wordpress/wp-includes/js/swfupload/plugins/swfupload.swfobject.js
 share/wordpress/wp-includes/js/swfupload/swfupload.js
-share/wordpress/wp-includes/js/swfupload/swfupload.swf
 share/wordpress/wp-includes/js/thickbox/loadingAnimation.gif
 share/wordpress/wp-includes/js/thickbox/macFFBgHack.png
 share/wordpress/wp-includes/js/thickbox/thickbox.css
@@ -1259,6 +1305,8 @@ share/wordpress/wp-includes/js/tinymce/plugins/hr/plugin.js
 share/wordpress/wp-includes/js/tinymce/plugins/hr/plugin.min.js
 share/wordpress/wp-includes/js/tinymce/plugins/image/plugin.js
 share/wordpress/wp-includes/js/tinymce/plugins/image/plugin.min.js
+share/wordpress/wp-includes/js/tinymce/plugins/link/plugin.js
+share/wordpress/wp-includes/js/tinymce/plugins/link/plugin.min.js
 share/wordpress/wp-includes/js/tinymce/plugins/lists/plugin.js
 share/wordpress/wp-includes/js/tinymce/plugins/lists/plugin.min.js
 share/wordpress/wp-includes/js/tinymce/plugins/media/plugin.js
@@ -1362,6 +1410,8 @@ share/wordpress/wp-includes/js/wp-lists.js
 share/wordpress/wp-includes/js/wp-lists.min.js
 share/wordpress/wp-includes/js/wp-pointer.js
 share/wordpress/wp-includes/js/wp-pointer.min.js
+share/wordpress/wp-includes/js/wp-sanitize.js
+share/wordpress/wp-includes/js/wp-sanitize.min.js
 share/wordpress/wp-includes/js/wp-util.js
 share/wordpress/wp-includes/js/wp-util.min.js
 share/wordpress/wp-includes/js/wpdialog.js
@@ -1395,6 +1445,7 @@ share/wordpress/wp-includes/pluggable.php
 share/wordpress/wp-includes/plugin.php
 share/wordpress/wp-includes/pomo/entry.php
 share/wordpress/wp-includes/pomo/mo.php
+share/wordpress/wp-includes/pomo/plural-forms.php
 share/wordpress/wp-includes/pomo/po.php
 share/wordpress/wp-includes/pomo/streams.php
 share/wordpress/wp-includes/pomo/translations.php
@@ -1443,6 +1494,7 @@ share/wordpress/wp-includes/rss.php
 share/wordpress/wp-includes/script-loader.php
 share/wordpress/wp-includes/session.php
 share/wordpress/wp-includes/shortcodes.php
+share/wordpress/wp-includes/spl-autoload-compat.php
 share/wordpress/wp-includes/taxonomy.php
 share/wordpress/wp-includes/template-loader.php
 share/wordpress/wp-includes/template.php
@@ -1465,8 +1517,10 @@ share/wordpress/wp-includes/widgets/class-wp-nav-menu-widget.php
 share/wordpress/wp-includes/widgets/class-wp-widget-archives.php
 share/wordpress/wp-includes/widgets/class-wp-widget-calendar.php
 share/wordpress/wp-includes/widgets/class-wp-widget-categories.php
+share/wordpress/wp-includes/widgets/class-wp-widget-custom-html.php
 share/wordpress/wp-includes/widgets/class-wp-widget-links.php
 share/wordpress/wp-includes/widgets/class-wp-widget-media-audio.php
+share/wordpress/wp-includes/widgets/class-wp-widget-media-gallery.php
 share/wordpress/wp-includes/widgets/class-wp-widget-media-image.php
 share/wordpress/wp-includes/widgets/class-wp-widget-media-video.php
 share/wordpress/wp-includes/widgets/class-wp-widget-media.php
diff --git a/www/wordpress/distinfo b/www/wordpress/distinfo
index 593f838d263..7f659e6e31c 100644
--- a/www/wordpress/distinfo
+++ b/www/wordpress/distinfo
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.57.4.1 2017/11/06 19:41:32 bsiegert Exp $
+$NetBSD: distinfo,v 1.57.4.2 2017/12/20 18:38:37 spz Exp $
 
-SHA1 (wordpress-4.8.3.tar.gz) = 8efc0b9f6146e143ed419b5419d7bb8400a696fc
-RMD160 (wordpress-4.8.3.tar.gz) = 264d1e87fc1d732627f021e81d3fbe754f5cfa0e
-SHA512 (wordpress-4.8.3.tar.gz) = 696be1c24dec869d896e22b408b17009e8c482545237156f17d4b5f2d726876a17c3cc5c3de632126229747589d74f7b188c06d2a79878efc800bd6db273d709
-Size (wordpress-4.8.3.tar.gz) = 8184961 bytes
+SHA1 (wordpress-4.9.1.tar.gz) = 892d2c23b9d458ec3d44de59b753adb41012e903
+RMD160 (wordpress-4.9.1.tar.gz) = fa6856f69afc9dc02f5e2c613268d04d6fd41333
+SHA512 (wordpress-4.9.1.tar.gz) = 1835d8fd0df9931487489d2e67285e7c73ec1783df39621cfbfe52aa8a0b3cba05fd3b842c7fd67ab2b76009f33337dae650f22dd6a3c4aa71eae100541b8a58
+Size (wordpress-4.9.1.tar.gz) = 9638827 bytes