Security and maintenance update to version 4.2.2.

WordPress 4.2.2 fixes a cross-site scripting vulnerability contained in an HTML
file shipped with recent Genericons packages included in the Twenty Fifteen
theme as well as a number of popular plugins by removing the file.

Version 4.2.2 also improves on a fix for a critical cross-site scripting
vulnerability introduced in 4.2.1.

The release also includes hardening for a potential cross-site scripting
vulnerability when using the Visual editor.

In addition to the security fixes, WordPress 4.2.2 contains fixes for 13 bugs
from 4.2.1, including:

o Fixes an emoji loading error in IE9 and IE10
o Fixes a keyboard shortcut for saving from the Visual editor on Mac
o Fixes oEmbed for YouTube URLs to always expect https
o Fixes how WordPress checks for encoding when sending strings to MySQL
o Fixes a bug with allowing queries to reference tables in the dbname.tablename
  format
o Lowers memory usage for a regex checking for UTF-8 encoding
o Fixes an issue with trying to change the wrong index in the wp_signups table
  on utf8mb4 conversion
o Improves performance of loop detection in _get_term_children()
o Fixes a bug where attachment URLs were incorrectly being forced to use https
  in some contexts
o Fixes a bug where creating a temporary file could end up in an endless loop.

3 files changed, 7 insertions, 10 deletions

diff --git a/www/wordpress/Makefile b/www/wordpress/Makefile
index 4b60c2d9fff..c7b0409c8d9 100644
--- a/www/wordpress/Makefile
+++ b/www/wordpress/Makefile
@@ -1,7 +1,7 @@
-# $NetBSD: Makefile,v 1.46 2015/05/04 19:48:00 morr Exp $
+# $NetBSD: Makefile,v 1.47 2015/05/11 05:16:31 morr Exp $
 
 DISTNAME=		wordpress-${VERSION}
-VERSION=		4.2.1
+VERSION=		4.2.2
 CATEGORIES=		www
 MASTER_SITES=		http://wordpress.org/
 
diff --git a/www/wordpress/PLIST b/www/wordpress/PLIST
index 8240dc99db6..5d796b4a45e 100644
--- a/www/wordpress/PLIST
+++ b/www/wordpress/PLIST
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.24 2015/05/04 19:48:00 morr Exp $
+@comment $NetBSD: PLIST,v 1.25 2015/05/11 05:16:31 morr Exp $
 share/doc/wordpress/license.txt
 share/doc/wordpress/readme.html
 share/examples/wordpress/wordpress.conf
@@ -482,7 +482,6 @@ share/wordpress/wp-content/themes/twentyfifteen/genericons/Genericons.ttf
 share/wordpress/wp-content/themes/twentyfifteen/genericons/Genericons.woff
 share/wordpress/wp-content/themes/twentyfifteen/genericons/LICENSE.txt
 share/wordpress/wp-content/themes/twentyfifteen/genericons/README.md
-share/wordpress/wp-content/themes/twentyfifteen/genericons/example.html
 share/wordpress/wp-content/themes/twentyfifteen/genericons/genericons.css
 share/wordpress/wp-content/themes/twentyfifteen/header.php
 share/wordpress/wp-content/themes/twentyfifteen/image.php
@@ -531,7 +530,6 @@ share/wordpress/wp-content/themes/twentyfourteen/genericons/COPYING.txt
 share/wordpress/wp-content/themes/twentyfourteen/genericons/Genericons-Regular.otf
 share/wordpress/wp-content/themes/twentyfourteen/genericons/LICENSE.txt
 share/wordpress/wp-content/themes/twentyfourteen/genericons/README.txt
-share/wordpress/wp-content/themes/twentyfourteen/genericons/example.html
 share/wordpress/wp-content/themes/twentyfourteen/genericons/font/genericons-regular-webfont.eot
 share/wordpress/wp-content/themes/twentyfourteen/genericons/font/genericons-regular-webfont.svg
 share/wordpress/wp-content/themes/twentyfourteen/genericons/font/genericons-regular-webfont.ttf
@@ -593,7 +591,6 @@ share/wordpress/wp-content/themes/twentythirteen/genericons/COPYING.txt
 share/wordpress/wp-content/themes/twentythirteen/genericons/Genericons-Regular.otf
 share/wordpress/wp-content/themes/twentythirteen/genericons/LICENSE.txt
 share/wordpress/wp-content/themes/twentythirteen/genericons/README.txt
-share/wordpress/wp-content/themes/twentythirteen/genericons/example.html
 share/wordpress/wp-content/themes/twentythirteen/genericons/font/genericons-regular-webfont.eot
 share/wordpress/wp-content/themes/twentythirteen/genericons/font/genericons-regular-webfont.svg
 share/wordpress/wp-content/themes/twentythirteen/genericons/font/genericons-regular-webfont.ttf
diff --git a/www/wordpress/distinfo b/www/wordpress/distinfo
index 36169c7966a..fbbdf259616 100644
--- a/www/wordpress/distinfo
+++ b/www/wordpress/distinfo
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.38 2015/05/04 19:48:00 morr Exp $
+$NetBSD: distinfo,v 1.39 2015/05/11 05:16:31 morr Exp $
 
-SHA1 (wordpress-4.2.1.tar.gz) = c93a39be9911591b19a94743014be3585df0512f
-RMD160 (wordpress-4.2.1.tar.gz) = 2f81bec9ac2af030f827537916dcbe3fea4d60df
-Size (wordpress-4.2.1.tar.gz) = 6321767 bytes
+SHA1 (wordpress-4.2.2.tar.gz) = d3a70d0f116e6afea5b850f793a81a97d2115039
+RMD160 (wordpress-4.2.2.tar.gz) = 74037a085ec23d815564e22f4990794137a58bec
+Size (wordpress-4.2.2.tar.gz) = 6307937 bytes