~ubuntu-branches/debian/sid/wordpress/sid : changes

~ubuntu-branches/debian/sid/wordpress/sid » Changes from revision 64

From Revision 53 to 34

Rev	Summary	Authors	Tags	Date
53	* New upstream release. * New upstream release. * Depend on either mysql or mariadb client Closes: #732914	Craig Small	3.8.1+dfsg-1	10 years ago
52	* New upstream release. * New upstream release. * Enable usage of php5-mysqlnd as an alternative to php5-mysql. Closes: #722552 * Improve wp-setup to cope with plugins/themes directories with spaces. Thanks to Oskar Liljeblad <oskar@osk.mine.nu> for the patch. Closes: #723074 * Refresh patches	Raphaël Hertzog	3.7.1+dfsg-1	10 years ago
51	New upstream security release. New upstream security release.	Raphaël Hertzog	3.6.1+dfsg-1	10 years ago
50	* New upstream release. * New upstream release. * Improve wp-settings to verify that $_SERVER['HTTP_X_FORWARDED_PROTO'] exists before accessing it (avoids a PHP notice). Thanks to Paul Dreik <slask@pauldreik.se> for the report and the patch. * Document in README.Debian the need to login to /wp-admin/ to complete an upgrade. * Drop useless debian/README.source * Drop 008CVE2008-2392.patch since upstream now disables unfiltered uploads by default. See http://core.trac.wordpress.org/ticket/10692 * Drop 009CVE2008-6767.patch since the backto parameter is validated against a whitelist, and externally triggered upgrades are not a security problem as long as they work. * Update debian/missing-sources with latest versions. * Update upstream l10n.	Raphaël Hertzog	3.6+dfsg-1	10 years ago
49	* New upstream release with many security fixes. Closes: #71... * New upstream release with many security fixes. Closes: #713947 * Server-Side Request Forgery (SSRF) via the HTTP API. CVE-2013-2199. * Privilege Escalation: Contributors can publish posts, and users can reassign authorship. CVE-2013-2200. * Cross-Site Scripting (XSS) in SWFUpload. CVE-2013-2205. * Denial of Service (DoS) via Post Password Cookies. CVE-2013-2173. * Content Spoofing via Flash Applet in TinyMCE Media Plugin. CVE-2013-2204. * Cross-Site Scripting (XSS) when Uploading Media. CVE-2013-2201. * Full Path Disclosure (FPD) during File Upload. CVE-2013-2203. * Additional security hardening includes: * Cross-Site Scripting (XSS) (Low Severity) when Editing Media. CVE-2013-2201. * Cross-Site Scripting (XSS) (Low Severity) when Installing/Updating Plugins/Themes. CVE-2013-2201. * XML External Entity Injection (XXE) via oEmbed. CVE-2013-2202. * Update the Vcs-Git and Vcs-Browser URLs. * Update Standards-Version to 3.9.4.	Raphaël Hertzog	3.5.2+dfsg-1	10 years ago
48	* Only replace tinymce files by symlinks if the content is e... * Only replace tinymce files by symlinks if the content is exactly the same. Closes: #700289 * Update debian/get-upstream-i18n to include supplementary PO files and use a more efficient method to update them. Closes: #697208	Raphaël Hertzog	3.5.1+dfsg-2	11 years ago
47	New upstream maintenance and security release. Closes: #6989... New upstream maintenance and security release. Closes: #698916	Raphaël Hertzog	3.5.1+dfsg-1	11 years ago
46	* New upstream release. * New upstream release. * Fix sample apache.conf so that Alias directives are in the proper order (from the most specific to the less specific). Closes: #693122 Thanks to Jérôme Marant for the report. * Update debian/missing-sources/ with latest upstream changes. * Update all translations. * Try to deduplicate (i.e. replace with symlinks) backbone.js and underscore.js too. * Drop debian/patches/006rss_language.patch, the rss_language option is no longer used. * Update/refresh all other patches on top of the new release. * Update lintian overrides and debian/wordpress.linktrees to match the latest changes concerning javascript libraries shipped by WordPress. * Document the loss of the twentyten theme.	Raphaël Hertzog	3.5+dfsg-1	11 years ago
45	* New upstream security & bugfix release. * New upstream security & bugfix release. * Also setup languages symlink in setup-mysql. Closes: #684628 Thanks to Jun NOGATA <nogajun@gmail.com> for the analysis. * Add new patch 011support-symlinks-for-plugins.patch grabbed in the upstream ticket to allow plugin directories to be symlinks (which is required for the Debian package since we put symlinks in /var/lib/wordpress/wp-content/plugins/). Closes: #686228	Raphaël Hertzog	3.4.2+dfsg-1	11 years ago
44	New upstream security & bugfix release. New upstream security & bugfix release.	Raphaël Hertzog	3.4.1+dfsg-1	11 years ago
43	* [f7a1c09] Drop useless postrm. * [f7a1c09] Drop useless postrm. * [d92219b] Add a prerm script calling wp-setup --purge-wp-content on remove. Closes: #678842 * [2fbf903] Allow wp-setup to symlink files as well as directories. * [cef928f] Let wp-setup also manage /var/lib/wordpress/wp-content/languages/. * [ac86408] Densify output of wp-setup.	Raphaël Hertzog	3.4+dfsg-3	11 years ago
42	* [2e63535] Merge unused debian/NEWS into debian/wordpress.N... * [2e63535] Merge unused debian/NEWS into debian/wordpress.NEWS so that users are correctly informed of the latest changes. * [e3b7b1c] Improve preinst to also move the /usr/share/wordpress/wp-content/uploads directory to its new location in /var/lib/wordpress/wp-content/. The package never created this directory but many users probably created it and we need to do this to let dpkg install the symlink that we put into place. * [5c0a29b] Add a trigger that watches /usr/share/wordpress/wp-content. When activated, it will execute wp-setup --sync-wp-content which updates /var/lib/wordpress/wp-content/ with symlinks to plugins/themes that have been added and it drops symlinks to plugins/themes which have disappeared. (Closes: #677889)	Raphaël Hertzog	3.4+dfsg-2	11 years ago
41	* New upstream release. Closes: #677534 * New upstream release. Closes: #677534 [ Raphaël Hertzog ] * [a1c0409] Refresh and update all patches to correctly apply on version 3.4. * [3804496] Update debian/missing-sources/ to match the current versions of embedded javascript and flash files. * [185b051] Drop the old "default" theme (and its French translation) * [966ce6c] Grab latest translations * [1983326] Update Standards-Version to 3.9.3 (no change). * [29c48b6] Increase debhelper compat level to 9. * [73e16d0] Replace debian/dh_linktree by the packaged version. * [359b660] Update debian/wordpress.linktrees to match latest developments. * [645b650] Let setup-mysql lowercase the FQDN since the configuration scheme expects this. Thanks to Chris Butler <chrisb@debian.org> for the report (Closes: #658395) * [5433e90] Fix setup-mysql to avoid creating /srv/www with restricted permissions (Closes: #616400) * [dd2ef1d] Move back wp-config.php to /usr/share/wordpress/ since it's only a dispatcher to the real configuration file (Closes: #592502) * [b602372] Improve wp-config.php so that WordPress works behind an https reverse-proxy. * [ba0b729] Entirely update and rewrite README.debian. (Closes: #575985, #639980) * [683a908] Update wp-config.php to not redefine constants which have already been set. Thanks to Richard van den Berg <richard@vdberg.org> for the report. (Closes: #613283) * [315eb68] Let wordpress-l10n depend on the same version than wordpress. (Closes: #623557) * [a6d0b9f] Default configuration now sets WP_CONTENT_DIR to /var/lib/wordpress/wp-content. And the package provides this new directory appropriately setup with write rights to www-data on blogs.dir and uploads. themes and plugins are root-owned directories with symlinks pointing back to the default themes and plugins. (Closes: #675469) * [4db98c6] Update setup-mysql to use WP_CONTENT_DIR (and no longer use $upload_dir). (Closes: #658508) * [a1970da] Extend debian/wordpress.linktrees to cover swfobject.js. * [8d46dab] Use dpkg-maintscript-helper to drop obsolete /etc/wordpress/wp-config.php [ Martin Bagge / brother ] * [56d0a34] Improve the setup script to be able to use a remote MySQL server.	Raphaël Hertzog	3.4+dfsg-1	11 years ago
40	* New upstream security release. Closes: #670124 * New upstream security release. Closes: #670124 * Use the embedded copy of SimplePie until #669054 is resolved.	Raphaël Hertzog	3.3.2+dfsg-1	12 years ago
39	New upstream security release. Fixes CVE-2012-0287. New upstream security release. Fixes CVE-2012-0287.	Raphaël Hertzog	3.3.1+dfsg-1	12 years ago
38	* New upstream release. Closes: #652041 * New upstream release. Closes: #652041 * [4deb832] Add all the missing sources in debian/missing-sources/. (Closes: #646729) * [913eba5] Refresh all patches. * [ae61778] Use xz compression for the debian tarball to save some space.	Raphaël Hertzog	3.3+dfsg-1	12 years ago
37	* Upload with urgency medium to speed up a bit the transitio... * Upload with urgency medium to speed up a bit the transition to testing since the testing version is broken. * [72d01a3] Improve dh_linktree. It is now able to generate dependencies and to have different behaviour for each file to replace. Modify wordpress.linktrees to ensure we have the very same JQuery files but blindly replaces all the other files. Drop the explicit dependencies in favor of the autogenerated dependencies. As a side-effect this fixes installation of widgets which was broken by the mismatch of some JQuery ui files. * [bbce711] Add lintian overrides for warnings about the embedded copy of JQuery. We do a reasonable effort to replace it if it matches.	Raphaël Hertzog	3.2.1+dfsg-3	12 years ago
36	* [af74ce2] Add a preinst to drop symlinks to directories fo... * [af74ce2] Add a preinst to drop symlinks to directories for tinymce and cropper. The new dh_linktree only symlinks files and hierarchies are duplicated. So we have to drop symlinks to directories in the preinst, otherwise dpkg installs the new symlinks in the tinymce/cropper directories instead of in the wordpress ones. Also drop the upgrade code in the postinst converting the same directories into symlinks... (Closes: #639733) * [0b51c4f] Invite users affected by #639733 to reinstall tinymce/libjs-cropper. * [55af033] Fix invalid test in postinst (upgrade → configure) "upgrade" is not a valid parameter in the postinst. Instead we get "configure".	Raphaël Hertzog	3.2.1+dfsg-2	12 years ago
35	[ Paul Tagliamonte ] [ Paul Tagliamonte ] * [c5e4b2c] Added a get-orig-source target to recreate the DFSG-clean tarball. It drops all the sourceless flash files. Closes: #625773 [ Raphaël Hertzog ] * [d1035bd] Imported Upstream version 3.2.1+dfsg * [b968405] Update and refresh all patches. * [10ab97c] Drop manifest.patch because the description in its header doesn't make any sense. * [87537db] Update dependencies as per new upstream requirements. * [0c534ec] Update packaging to avoid using even more embedded PHP/JS libraries. * [ec5c11e] Use a new dh_linktree to replace embedded PHP/JS libraries. * [8690719] Add lintian override for embedded-php-library streams.php since it's a false positive. * [83c15bc] Upgrade Standards-Version to 3.9.2 (no changes needed). * [938fb15] Update internationalization files. * [6ac0357] Install class-smtp.php and class-phpmailer.php so that they can be replaced by dh_linktree.	Raphaël Hertzog	3.2.1+dfsg-1	12 years ago
34	* [077b77b] Imported Upstream version 3.0.5+dfsg * [077b77b] Imported Upstream version 3.0.5+dfsg * [8d1ce17] Refreshed patches	Giuseppe Iuculano	3.0.5+dfsg-1	13 years ago

Older »