From root@Leo.mi.chu.edu.tw  Fri Sep  7 09:29:32 2012
Return-Path: <root@Leo.mi.chu.edu.tw>
Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52])
	by hub.freebsd.org (Postfix) with ESMTP id 6AEEC106564A
	for <FreeBSD-gnats-submit@freebsd.org>; Fri,  7 Sep 2012 09:29:32 +0000 (UTC)
	(envelope-from root@Leo.mi.chu.edu.tw)
Received: from Leo.mi.chu.edu.tw (unknown [IPv6:2002:8c7e:8f3f::8c7e:8f3f])
	by mx1.freebsd.org (Postfix) with ESMTP id 211C08FC0A
	for <FreeBSD-gnats-submit@freebsd.org>; Fri,  7 Sep 2012 09:29:32 +0000 (UTC)
Received: from Leo.mi.chu.edu.tw (localhost [127.0.0.1])
	by Leo.mi.chu.edu.tw (Postfix) with ESMTP id 481914DFC29
	for <FreeBSD-gnats-submit@freebsd.org>; Fri,  7 Sep 2012 17:29:31 +0800 (CST)
Received: from Leo.mi.chu.edu.tw ([127.0.0.1])
	by Leo.mi.chu.edu.tw (Leo.mi.chu.edu.tw [127.0.0.1]) (amavisd-new, port 10024)
	with LMTP id PPXlNwBXCQqJ for <FreeBSD-gnats-submit@freebsd.org>;
	Fri,  7 Sep 2012 17:29:31 +0800 (CST)
Received: by Leo.mi.chu.edu.tw (Postfix, from userid 0)
	id 1A4EE4DFC28; Fri,  7 Sep 2012 17:29:31 +0800 (CST)
Message-Id: <20120907092931.1A4EE4DFC28@Leo.mi.chu.edu.tw>
Date: Fri,  7 Sep 2012 17:29:31 +0800 (CST)
From: Joe Horn <joehorn@gmail.com>
To: FreeBSD-gnats-submit@freebsd.org
Cc:
Subject: [MAINTAINER] chinese/wordpress-zh_TW: update to 3.4.2
X-Send-Pr-Version: 3.113
X-GNATS-Notify:

>Number:         171405
>Category:       ports
>Synopsis:       [MAINTAINER] chinese/wordpress-zh_TW: update to 3.4.2
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    swills
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          maintainer-update
>Submitter-Id:   current-users
>Arrival-Date:   Fri Sep 07 09:30:02 UTC 2012
>Closed-Date:    Fri Sep 07 20:26:43 UTC 2012
>Last-Modified:  Fri Sep  7 20:30:19 UTC 2012
>Originator:     Joe Horn
>Release:        FreeBSD 9.0-RELEASE-p3 amd64
>Organization:
Taiwanese User
>Environment:
System: FreeBSD joehorn.idv.tw 9.0-RELEASE-p3 FreeBSD 9.0-RELEASE-p3 #4: Mon Jun 25 11:48:59 CST 2012
>Description:
- Update to 3.4.2

Generated with FreeBSD Port Tools 0.99_6 (mode: update, diff: ports)
>How-To-Repeat:
>Fix:

--- wordpress-zh_TW-3.4.2.patch begins here ---
diff -ruN --exclude=CVS /usr/ports/chinese/wordpress-zh_TW/Makefile ./Makefile
--- /usr/ports/chinese/wordpress-zh_TW/Makefile	2012-06-29 01:52:41.000000000 +0800
+++ ./Makefile	2012-09-07 17:28:46.000000000 +0800
@@ -6,7 +6,7 @@
 #
 
 PORTNAME=	wordpress
-PORTVERSION=	3.4.1
+PORTVERSION=	3.4.2
 CATEGORIES=	chinese www
 MASTER_SITES=	http://tw.wordpress.org/ \
 		http://mirror.joehorn.idv.tw/wordpress/
@@ -20,7 +20,7 @@
 
 WRKSRC=		${WRKDIR}/${PORTNAME}
 
-USE_PHP=	mysql pcre xml gd tokenizer
+USE_PHP=	curl gd mysql pcre tokenizer xml zip
 NO_BUILD=	YES
 WANT_PHP_WEB=	YES
 
diff -ruN --exclude=CVS /usr/ports/chinese/wordpress-zh_TW/distinfo ./distinfo
--- /usr/ports/chinese/wordpress-zh_TW/distinfo	2012-06-29 01:52:41.000000000 +0800
+++ ./distinfo	2012-09-07 17:29:01.000000000 +0800
@@ -1,2 +1,2 @@
-SHA256 (wordpress-3.4.1-zh_TW.tar.gz) = 40f456dfd1d7ca313423775adddc4f9c3132e93d3083c0ced7aa99f57f902b82
-SIZE (wordpress-3.4.1-zh_TW.tar.gz) = 4939683
+SHA256 (wordpress-3.4.2-zh_TW.tar.gz) = 8aef4d86ac8f181ca499ab16948568f170b8a1e81ac4c330f7807f0965d3bfa1
+SIZE (wordpress-3.4.2-zh_TW.tar.gz) = 4924530
--- wordpress-zh_TW-3.4.2.patch ends here ---

>Release-Note:
>Audit-Trail:
Responsible-Changed-From-To: freebsd-ports-bugs->bdrewery 
Responsible-Changed-By: bdrewery 
Responsible-Changed-When: Fri Sep 7 14:40:23 UTC 2012 
Responsible-Changed-Why:  
I'll take it. 

http://www.freebsd.org/cgi/query-pr.cgi?pr=171405 
Responsible-Changed-From-To: bdrewery->swills 
Responsible-Changed-By: swills 
Responsible-Changed-When: Fri Sep 7 19:33:16 UTC 2012 
Responsible-Changed-Why:  
Steal these from bdrewery since it's security related 

http://www.freebsd.org/cgi/query-pr.cgi?pr=171405 
State-Changed-From-To: open->closed 
State-Changed-By: swills 
State-Changed-When: Fri Sep 7 20:26:39 UTC 2012 
State-Changed-Why:  
Committed. Thanks! 

http://www.freebsd.org/cgi/query-pr.cgi?pr=171405 

From: dfilter@FreeBSD.ORG (dfilter service)
To: bug-followup@FreeBSD.org
Cc:  
Subject: Re: ports/171405: commit references a PR
Date: Fri,  7 Sep 2012 20:25:58 +0000 (UTC)

 Author: swills
 Date: Fri Sep  7 20:25:41 2012
 New Revision: 303824
 URL: http://svn.freebsd.org/changeset/ports/303824
 
 Log:
   - Update to 3.4.2 [1] [2] [3]
   - Document security issue [4]
   
   PR:		ports/171397 [1]
   PR:		ports/171404 [2]
   PR:		ports/171405 [3]
   Submitted by:	Yuan-Chung Hsiao <ychsiao@ychsiao.org> (maintainer) [1]
   Submitted by:	Joe Horn <joehorn@gmail.com> (maintainer) [2] [3]
   Reviewed by:	eadler [4]
   Security:	30149157-f926-11e1-95cd-001fd0af1a4c
 
 Modified:
   head/chinese/wordpress-zh_CN/Makefile   (contents, props changed)
   head/chinese/wordpress-zh_CN/distinfo   (contents, props changed)
   head/chinese/wordpress-zh_TW/Makefile   (contents, props changed)
   head/chinese/wordpress-zh_TW/distinfo   (contents, props changed)
   head/security/vuxml/vuln.xml
   head/www/wordpress/Makefile   (contents, props changed)
   head/www/wordpress/distinfo   (contents, props changed)
 
 Modified: head/chinese/wordpress-zh_CN/Makefile
 ==============================================================================
 --- head/chinese/wordpress-zh_CN/Makefile	Fri Sep  7 20:08:28 2012	(r303823)
 +++ head/chinese/wordpress-zh_CN/Makefile	Fri Sep  7 20:25:41 2012	(r303824)
 @@ -6,7 +6,7 @@
  #
  
  PORTNAME=	wordpress
 -PORTVERSION=	3.4.1
 +PORTVERSION=	3.4.2
  CATEGORIES=	chinese www
  MASTER_SITES=	http://cn.wordpress.org/ \
  		http://mirror.joehorn.idv.tw/wordpress/
 @@ -20,7 +20,7 @@ LICENSE=	GPLv2
  
  WRKSRC=		${WRKDIR}/${PORTNAME}
  
 -USE_PHP=	mysql pcre xml gd tokenizer
 +USE_PHP=	curl gd mysql pcre tokenizer xml zip
  NO_BUILD=	YES
  WANT_PHP_WEB=	YES
  
 
 Modified: head/chinese/wordpress-zh_CN/distinfo
 ==============================================================================
 --- head/chinese/wordpress-zh_CN/distinfo	Fri Sep  7 20:08:28 2012	(r303823)
 +++ head/chinese/wordpress-zh_CN/distinfo	Fri Sep  7 20:25:41 2012	(r303824)
 @@ -1,2 +1,2 @@
 -SHA256 (wordpress-3.4.1-zh_CN.tar.gz) = 243ee6297b63d6e3529de87db151c7c1903c7b5951422faeb28f561257c03b4b
 -SIZE (wordpress-3.4.1-zh_CN.tar.gz) = 4938612
 +SHA256 (wordpress-3.4.2-zh_CN.tar.gz) = 10095c73deb7d73f8a52f503de2c7f8e22affea59850897b0629167cf20efe52
 +SIZE (wordpress-3.4.2-zh_CN.tar.gz) = 4938647
 
 Modified: head/chinese/wordpress-zh_TW/Makefile
 ==============================================================================
 --- head/chinese/wordpress-zh_TW/Makefile	Fri Sep  7 20:08:28 2012	(r303823)
 +++ head/chinese/wordpress-zh_TW/Makefile	Fri Sep  7 20:25:41 2012	(r303824)
 @@ -6,7 +6,7 @@
  #
  
  PORTNAME=	wordpress
 -PORTVERSION=	3.4.1
 +PORTVERSION=	3.4.2
  CATEGORIES=	chinese www
  MASTER_SITES=	http://tw.wordpress.org/ \
  		http://mirror.joehorn.idv.tw/wordpress/
 @@ -20,7 +20,7 @@ LICENSE=	GPLv2
  
  WRKSRC=		${WRKDIR}/${PORTNAME}
  
 -USE_PHP=	mysql pcre xml gd tokenizer
 +USE_PHP=	curl gd mysql pcre tokenizer xml zip
  NO_BUILD=	YES
  WANT_PHP_WEB=	YES
  
 
 Modified: head/chinese/wordpress-zh_TW/distinfo
 ==============================================================================
 --- head/chinese/wordpress-zh_TW/distinfo	Fri Sep  7 20:08:28 2012	(r303823)
 +++ head/chinese/wordpress-zh_TW/distinfo	Fri Sep  7 20:25:41 2012	(r303824)
 @@ -1,2 +1,2 @@
 -SHA256 (wordpress-3.4.1-zh_TW.tar.gz) = 40f456dfd1d7ca313423775adddc4f9c3132e93d3083c0ced7aa99f57f902b82
 -SIZE (wordpress-3.4.1-zh_TW.tar.gz) = 4939683
 +SHA256 (wordpress-3.4.2-zh_TW.tar.gz) = 8aef4d86ac8f181ca499ab16948568f170b8a1e81ac4c330f7807f0965d3bfa1
 +SIZE (wordpress-3.4.2-zh_TW.tar.gz) = 4924530
 
 Modified: head/security/vuxml/vuln.xml
 ==============================================================================
 --- head/security/vuxml/vuln.xml	Fri Sep  7 20:08:28 2012	(r303823)
 +++ head/security/vuxml/vuln.xml	Fri Sep  7 20:25:41 2012	(r303824)
 @@ -51,6 +51,35 @@ Note:  Please add new entries to the beg
  
  -->
  <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
 +  <vuln vid="30149157-f926-11e1-95cd-001fd0af1a4c">
 +    <topic>wordpress -- multiple unspecified privilege escalation bugs</topic>
 +    <affects>
 +      <package>
 +	<name>wordpress</name>
 +	<range><lt>3.4.2</lt></range>
 +      </package>
 +    </affects>
 +    <description>
 +      <body xmlns="http://www.w3.org/1999/xhtml">
 +       <p>Wordpress reports:</p>
 +	<blockquote cite="http://wordpress.org/news/2012/09/wordpress-3-4-2/">
 +	 <p>Version 3.4.2 also fixes a few security issues and contains some
 +	    security hardening. The vulnerabilities included potential
 +	    privilege escalation and a bug that affects multisite installs with
 +	    untrusted users. These issues were discovered and fixed by the
 +	    WordPress security team.</p>
 +       </blockquote>
 +      </body>
 +    </description>
 +    <references>
 +      <url>http://wordpress.org/news/2012/09/wordpress-3-4-2/</url>
 +    </references>
 +    <dates>
 +      <discovery>2012-09-06</discovery>
 +      <entry>2012-09-07</entry>
 +    </dates>
 +  </vuln>
 +
    <vuln vid="4a8a98ab-f745-11e1-8bd8-0022156e8794">
      <topic>moinmoin -- cross-site scripting via RST parser</topic>
      <affects>
 
 Modified: head/www/wordpress/Makefile
 ==============================================================================
 --- head/www/wordpress/Makefile	Fri Sep  7 20:08:28 2012	(r303823)
 +++ head/www/wordpress/Makefile	Fri Sep  7 20:25:41 2012	(r303824)
 @@ -6,7 +6,7 @@
  #
  
  PORTNAME=	wordpress
 -PORTVERSION=	3.4.1
 +PORTVERSION=	3.4.2
  PORTEPOCH=	1
  CATEGORIES=	www
  MASTER_SITES=	http://wordpress.org/
 
 Modified: head/www/wordpress/distinfo
 ==============================================================================
 --- head/www/wordpress/distinfo	Fri Sep  7 20:08:28 2012	(r303823)
 +++ head/www/wordpress/distinfo	Fri Sep  7 20:25:41 2012	(r303824)
 @@ -1,2 +1,2 @@
 -SHA256 (wordpress-3.4.1.tar.gz) = c452c0b07e87ea6ce73e294a831d494eea9df43d8ca9140b087067d6a4166d15
 -SIZE (wordpress-3.4.1.tar.gz) = 4536505
 +SHA256 (wordpress-3.4.2.tar.gz) = e69acc6b6fdbffc166fd96f2264d578b4944ef3e451eb9650e8ca795b665eeb0
 +SIZE (wordpress-3.4.2.tar.gz) = 4538716
 _______________________________________________
 svn-ports-all@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/svn-ports-all
 To unsubscribe, send any mail to "svn-ports-all-unsubscribe@freebsd.org"
 
>Unformatted:
