security and bugfix update to WordPress 3.5.1:

- server-side request forgery vulnerability and remote port scanning
using pingbacks
(http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html)
- cross-site scripting via shortcodes and post content
- cross-site scripting vulnerability in the external library Plupload

ok merdely@
This commit is contained in:
sthen 2013-01-28 21:14:09 +00:00
parent ff750e2173
commit 7120709ab9
3 changed files with 6 additions and 5 deletions

View File

@ -1,8 +1,8 @@
# $OpenBSD: Makefile,v 1.43 2012/12/14 02:56:41 merdely Exp $
# $OpenBSD: Makefile,v 1.44 2013/01/28 21:14:09 sthen Exp $
COMMENT = standard compliant weblog
DISTNAME = wordpress-3.5
DISTNAME = wordpress-3.5.1
CATEGORIES = www
HOMEPAGE = http://wordpress.org/

View File

@ -1,2 +1,2 @@
SHA256 (wordpress-3.5.tar.gz) = 3vHQlNvT/MUiCNTmOuTDGQHf2X6bTNYZt9AX/TQpcqs=
SIZE (wordpress-3.5.tar.gz) = 5009441
SHA256 (wordpress-3.5.1.tar.gz) = 99YnvIhurHWq4i5Sas296iRKEqkvAuYIS6UZPUsNepc=
SIZE (wordpress-3.5.1.tar.gz) = 5012722

View File

@ -1,4 +1,4 @@
@comment $OpenBSD: PLIST,v 1.21 2012/12/14 02:56:41 merdely Exp $
@comment $OpenBSD: PLIST,v 1.22 2013/01/28 21:14:09 sthen Exp $
@pkgpath www/wordpress-mu
wordpress/
wordpress/index.php
@ -377,6 +377,7 @@ wordpress/wp-content/
wordpress/wp-content/index.php
wordpress/wp-content/plugins/
wordpress/wp-content/plugins/akismet/
wordpress/wp-content/plugins/akismet/.htaccess
wordpress/wp-content/plugins/akismet/admin.php
wordpress/wp-content/plugins/akismet/akismet.css
wordpress/wp-content/plugins/akismet/akismet.gif