~ubuntu-branches/debian/jessie/wordpress/jessie : changes

~ubuntu-branches/debian/jessie/wordpress/jessie » Changes from revision 64

From Revision 60 to 41

Rev	Summary	Authors	Tags	Date
60	* New Upstream release * New Upstream release * Fixes XML Security bug Closes: #757312	Craig Small	3.9.2+dfsg-1	9 years ago
59	* New upstream release * New upstream release * Use system CA certificate file Closes: #748965	Craig Small	3.9.1+dfsg-1	10 years ago
58	* New upstream release * New upstream release * 3.9 seems to handle different locations for plugins so the plugin directory handling patches have been cut back.	Craig Small	3.9+dfsg-1	10 years ago
57	New upstream release - fixes Quick Draft tool that broke in ... New upstream release - fixes Quick Draft tool that broke in 3.8.2	Craig Small	3.8.3+dfsg-1	10 years ago
56	New upstream release Fixes CVE-2014-0165, CVE-2014-0166 New upstream release Fixes CVE-2014-0165, CVE-2014-0166 and Closes: #744019	Craig Small	3.8.2+dfsg-1	10 years ago
55	Updated copyright file Closes: #736514 Updated copyright file Closes: #736514	Craig Small	3.8.1+dfsg1-2	10 years ago
54	* Added Breaks/Replaces for combined wordpress Closes: #7366... * Added Breaks/Replaces for combined wordpress Closes: #736688 * Removed moxieplayer.swf and added missing sources Closes: #736804	Craig Small	3.8.1+dfsg1-1	10 years ago
53	* New upstream release. * New upstream release. * Depend on either mysql or mariadb client Closes: #732914	Craig Small	3.8.1+dfsg-1	10 years ago
52	* New upstream release. * New upstream release. * Enable usage of php5-mysqlnd as an alternative to php5-mysql. Closes: #722552 * Improve wp-setup to cope with plugins/themes directories with spaces. Thanks to Oskar Liljeblad <oskar@osk.mine.nu> for the patch. Closes: #723074 * Refresh patches	Raphaël Hertzog	3.7.1+dfsg-1	10 years ago
51	New upstream security release. New upstream security release.	Raphaël Hertzog	3.6.1+dfsg-1	10 years ago
50	* New upstream release. * New upstream release. * Improve wp-settings to verify that $_SERVER['HTTP_X_FORWARDED_PROTO'] exists before accessing it (avoids a PHP notice). Thanks to Paul Dreik <slask@pauldreik.se> for the report and the patch. * Document in README.Debian the need to login to /wp-admin/ to complete an upgrade. * Drop useless debian/README.source * Drop 008CVE2008-2392.patch since upstream now disables unfiltered uploads by default. See http://core.trac.wordpress.org/ticket/10692 * Drop 009CVE2008-6767.patch since the backto parameter is validated against a whitelist, and externally triggered upgrades are not a security problem as long as they work. * Update debian/missing-sources with latest versions. * Update upstream l10n.	Raphaël Hertzog	3.6+dfsg-1	10 years ago
49	* New upstream release with many security fixes. Closes: #71... * New upstream release with many security fixes. Closes: #713947 * Server-Side Request Forgery (SSRF) via the HTTP API. CVE-2013-2199. * Privilege Escalation: Contributors can publish posts, and users can reassign authorship. CVE-2013-2200. * Cross-Site Scripting (XSS) in SWFUpload. CVE-2013-2205. * Denial of Service (DoS) via Post Password Cookies. CVE-2013-2173. * Content Spoofing via Flash Applet in TinyMCE Media Plugin. CVE-2013-2204. * Cross-Site Scripting (XSS) when Uploading Media. CVE-2013-2201. * Full Path Disclosure (FPD) during File Upload. CVE-2013-2203. * Additional security hardening includes: * Cross-Site Scripting (XSS) (Low Severity) when Editing Media. CVE-2013-2201. * Cross-Site Scripting (XSS) (Low Severity) when Installing/Updating Plugins/Themes. CVE-2013-2201. * XML External Entity Injection (XXE) via oEmbed. CVE-2013-2202. * Update the Vcs-Git and Vcs-Browser URLs. * Update Standards-Version to 3.9.4.	Raphaël Hertzog	3.5.2+dfsg-1	10 years ago
48	* Only replace tinymce files by symlinks if the content is e... * Only replace tinymce files by symlinks if the content is exactly the same. Closes: #700289 * Update debian/get-upstream-i18n to include supplementary PO files and use a more efficient method to update them. Closes: #697208	Raphaël Hertzog	3.5.1+dfsg-2	11 years ago
47	New upstream maintenance and security release. Closes: #6989... New upstream maintenance and security release. Closes: #698916	Raphaël Hertzog	3.5.1+dfsg-1	11 years ago
46	* New upstream release. * New upstream release. * Fix sample apache.conf so that Alias directives are in the proper order (from the most specific to the less specific). Closes: #693122 Thanks to Jérôme Marant for the report. * Update debian/missing-sources/ with latest upstream changes. * Update all translations. * Try to deduplicate (i.e. replace with symlinks) backbone.js and underscore.js too. * Drop debian/patches/006rss_language.patch, the rss_language option is no longer used. * Update/refresh all other patches on top of the new release. * Update lintian overrides and debian/wordpress.linktrees to match the latest changes concerning javascript libraries shipped by WordPress. * Document the loss of the twentyten theme.	Raphaël Hertzog	3.5+dfsg-1	11 years ago
45	* New upstream security & bugfix release. * New upstream security & bugfix release. * Also setup languages symlink in setup-mysql. Closes: #684628 Thanks to Jun NOGATA <nogajun@gmail.com> for the analysis. * Add new patch 011support-symlinks-for-plugins.patch grabbed in the upstream ticket to allow plugin directories to be symlinks (which is required for the Debian package since we put symlinks in /var/lib/wordpress/wp-content/plugins/). Closes: #686228	Raphaël Hertzog	3.4.2+dfsg-1	11 years ago
44	New upstream security & bugfix release. New upstream security & bugfix release.	Raphaël Hertzog	3.4.1+dfsg-1	11 years ago
43	* [f7a1c09] Drop useless postrm. * [f7a1c09] Drop useless postrm. * [d92219b] Add a prerm script calling wp-setup --purge-wp-content on remove. Closes: #678842 * [2fbf903] Allow wp-setup to symlink files as well as directories. * [cef928f] Let wp-setup also manage /var/lib/wordpress/wp-content/languages/. * [ac86408] Densify output of wp-setup.	Raphaël Hertzog	3.4+dfsg-3	11 years ago
42	* [2e63535] Merge unused debian/NEWS into debian/wordpress.N... * [2e63535] Merge unused debian/NEWS into debian/wordpress.NEWS so that users are correctly informed of the latest changes. * [e3b7b1c] Improve preinst to also move the /usr/share/wordpress/wp-content/uploads directory to its new location in /var/lib/wordpress/wp-content/. The package never created this directory but many users probably created it and we need to do this to let dpkg install the symlink that we put into place. * [5c0a29b] Add a trigger that watches /usr/share/wordpress/wp-content. When activated, it will execute wp-setup --sync-wp-content which updates /var/lib/wordpress/wp-content/ with symlinks to plugins/themes that have been added and it drops symlinks to plugins/themes which have disappeared. (Closes: #677889)	Raphaël Hertzog	3.4+dfsg-2	11 years ago
41	* New upstream release. Closes: #677534 * New upstream release. Closes: #677534 [ Raphaël Hertzog ] * [a1c0409] Refresh and update all patches to correctly apply on version 3.4. * [3804496] Update debian/missing-sources/ to match the current versions of embedded javascript and flash files. * [185b051] Drop the old "default" theme (and its French translation) * [966ce6c] Grab latest translations * [1983326] Update Standards-Version to 3.9.3 (no change). * [29c48b6] Increase debhelper compat level to 9. * [73e16d0] Replace debian/dh_linktree by the packaged version. * [359b660] Update debian/wordpress.linktrees to match latest developments. * [645b650] Let setup-mysql lowercase the FQDN since the configuration scheme expects this. Thanks to Chris Butler <chrisb@debian.org> for the report (Closes: #658395) * [5433e90] Fix setup-mysql to avoid creating /srv/www with restricted permissions (Closes: #616400) * [dd2ef1d] Move back wp-config.php to /usr/share/wordpress/ since it's only a dispatcher to the real configuration file (Closes: #592502) * [b602372] Improve wp-config.php so that WordPress works behind an https reverse-proxy. * [ba0b729] Entirely update and rewrite README.debian. (Closes: #575985, #639980) * [683a908] Update wp-config.php to not redefine constants which have already been set. Thanks to Richard van den Berg <richard@vdberg.org> for the report. (Closes: #613283) * [315eb68] Let wordpress-l10n depend on the same version than wordpress. (Closes: #623557) * [a6d0b9f] Default configuration now sets WP_CONTENT_DIR to /var/lib/wordpress/wp-content. And the package provides this new directory appropriately setup with write rights to www-data on blogs.dir and uploads. themes and plugins are root-owned directories with symlinks pointing back to the default themes and plugins. (Closes: #675469) * [4db98c6] Update setup-mysql to use WP_CONTENT_DIR (and no longer use $upload_dir). (Closes: #658508) * [a1970da] Extend debian/wordpress.linktrees to cover swfobject.js. * [8d46dab] Use dpkg-maintscript-helper to drop obsolete /etc/wordpress/wp-config.php [ Martin Bagge / brother ] * [56d0a34] Improve the setup script to be able to use a remote MySQL server.	Raphaël Hertzog	3.4+dfsg-1	11 years ago

Older »