diff options
| author | morr <morr@pkgsrc.org> | 2014-11-24 19:08:53 +0000 |
|---|---|---|
| committer | morr <morr@pkgsrc.org> | 2014-11-24 19:08:53 +0000 |
| commit | 126ed5c631c0fde4b14112726e4e094dbda58427 (patch) | |
| tree | 037dc58df74d1db3dec044c9603f59e35f0b43cb /www/wordpress | |
| parent | 72cbb70b6d9ee23952ba1890e8073a429cdba681 (diff) | |
| download | pkgsrc-126ed5c631c0fde4b14112726e4e094dbda58427.tar.gz | |
Security update to 4.0.1.
Changes:
- Three cross-site scripting issues that a contributor or author could use to
compromise a site.
- A cross-site request forgery that could be used to trick a user into changing
their password.
- An issue that could lead to a denial of service when passwords are checked.
- Additional protections for server-side request forgery attacks when WordPress
makes HTTP requests.
- An extremely unlikely hash collision could allow a user’s account to be
compromised, that also required that they haven’t logged in since 2008 (I
wish I were kidding).
- WordPress now invalidates the links in a password reset email if the user
remembers their password, logs in, and changes their email address.
More details on http://codex.wordpress.org/Version_4.0.1.
Diffstat (limited to 'www/wordpress')
| -rw-r--r-- | www/wordpress/Makefile | 4 | ||||
| -rw-r--r-- | www/wordpress/distinfo | 8 |
2 files changed, 6 insertions, 6 deletions
diff --git a/www/wordpress/Makefile b/www/wordpress/Makefile index dd50b412454..2710b12589f 100644 --- a/www/wordpress/Makefile +++ b/www/wordpress/Makefile @@ -1,7 +1,7 @@ -# $NetBSD: Makefile,v 1.42 2014/09/12 22:18:08 morr Exp $ +# $NetBSD: Makefile,v 1.43 2014/11/24 19:08:53 morr Exp $ DISTNAME= wordpress-${VERSION} -VERSION= 4.0 +VERSION= 4.0.1 CATEGORIES= www MASTER_SITES= http://wordpress.org/ diff --git a/www/wordpress/distinfo b/www/wordpress/distinfo index e25969ed296..352ad56448b 100644 --- a/www/wordpress/distinfo +++ b/www/wordpress/distinfo @@ -1,5 +1,5 @@ -$NetBSD: distinfo,v 1.34 2014/09/12 22:18:08 morr Exp $ +$NetBSD: distinfo,v 1.35 2014/11/24 19:08:53 morr Exp $ -SHA1 (wordpress-4.0.tar.gz) = 73449bbc015e3d1858f13f56f3289202bd756654 -RMD160 (wordpress-4.0.tar.gz) = 94a805f925e57ccf26c27a896913ac0d8b7fec91 -Size (wordpress-4.0.tar.gz) = 6051082 bytes +SHA1 (wordpress-4.0.1.tar.gz) = ef1bd7ca90b67e6d8f46dc2e2a78c0ec4c2afb40 +RMD160 (wordpress-4.0.1.tar.gz) = 09269a66df5a92716c3ba5e7d395d8805a5949ba +Size (wordpress-4.0.1.tar.gz) = 6054753 bytes |