diff options
| author | tron <tron> | 2014-11-25 15:04:11 +0000 |
|---|---|---|
| committer | tron <tron> | 2014-11-25 15:04:11 +0000 |
| commit | 25588350d38ce4f38035d8d779ebac5bc36d484f (patch) | |
| tree | 4e4867f11a7c93f073cc84d217084addc835ffdf | |
| parent | 518d0508780c2b9473edabf8687c44c26f80b21e (diff) | |
| download | pkgsrc-25588350d38ce4f38035d8d779ebac5bc36d484f.tar.gz | |
Pullup ticket #4559 - requested by morr
www/wordpress: security update
Revisions pulled up:
- www/wordpress/Makefile 1.43
- www/wordpress/distinfo 1.35
---
Module Name: pkgsrc
Committed By: morr
Date: Mon Nov 24 19:08:53 UTC 2014
Modified Files:
pkgsrc/www/wordpress: Makefile distinfo
Log Message:
Security update to 4.0.1.
Changes:
- Three cross-site scripting issues that a contributor or author could use to
compromise a site.
- A cross-site request forgery that could be used to trick a user into changing
their password.
- An issue that could lead to a denial of service when passwords are checked.
- Additional protections for server-side request forgery attacks when WordPress
makes HTTP requests.
- An extremely unlikely hash collision could allow a user’s account to be
compromised, that also required that they haven’t logged in since 2008 (I
wish I were kidding).
- WordPress now invalidates the links in a password reset email if the user
remembers their password, logs in, and changes their email address.
More details on http://codex.wordpress.org/Version_4.0.1.
| -rw-r--r-- | www/wordpress/Makefile | 4 | ||||
| -rw-r--r-- | www/wordpress/distinfo | 8 |
2 files changed, 6 insertions, 6 deletions
diff --git a/www/wordpress/Makefile b/www/wordpress/Makefile index dd50b412454..837a49a225c 100644 --- a/www/wordpress/Makefile +++ b/www/wordpress/Makefile @@ -1,7 +1,7 @@ -# $NetBSD: Makefile,v 1.42 2014/09/12 22:18:08 morr Exp $ +# $NetBSD: Makefile,v 1.42.2.1 2014/11/25 15:04:11 tron Exp $ DISTNAME= wordpress-${VERSION} -VERSION= 4.0 +VERSION= 4.0.1 CATEGORIES= www MASTER_SITES= http://wordpress.org/ diff --git a/www/wordpress/distinfo b/www/wordpress/distinfo index e25969ed296..659b17a96ae 100644 --- a/www/wordpress/distinfo +++ b/www/wordpress/distinfo @@ -1,5 +1,5 @@ -$NetBSD: distinfo,v 1.34 2014/09/12 22:18:08 morr Exp $ +$NetBSD: distinfo,v 1.34.2.1 2014/11/25 15:04:11 tron Exp $ -SHA1 (wordpress-4.0.tar.gz) = 73449bbc015e3d1858f13f56f3289202bd756654 -RMD160 (wordpress-4.0.tar.gz) = 94a805f925e57ccf26c27a896913ac0d8b7fec91 -Size (wordpress-4.0.tar.gz) = 6051082 bytes +SHA1 (wordpress-4.0.1.tar.gz) = ef1bd7ca90b67e6d8f46dc2e2a78c0ec4c2afb40 +RMD160 (wordpress-4.0.1.tar.gz) = 09269a66df5a92716c3ba5e7d395d8805a5949ba +Size (wordpress-4.0.1.tar.gz) = 6054753 bytes |