summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--www-apps/wordpress/ChangeLog12
-rw-r--r--www-apps/wordpress/files/digest-wordpress-2.2.33
-rw-r--r--www-apps/wordpress/files/digest-wordpress-2.33
-rw-r--r--www-apps/wordpress/files/digest-wordpress-2.3.13
-rw-r--r--www-apps/wordpress/files/digest-wordpress-2.3.23
-rw-r--r--www-apps/wordpress/files/postinstall-en.txt16
-rw-r--r--www-apps/wordpress/files/postupgrade-en.txt17
-rw-r--r--www-apps/wordpress/wordpress-2.2.3.ebuild89
-rw-r--r--www-apps/wordpress/wordpress-2.3.2.ebuild (renamed from www-apps/wordpress/wordpress-2.3.1.ebuild)4
-rw-r--r--www-apps/wordpress/wordpress-2.3.ebuild83
10 files changed, 48 insertions, 185 deletions
diff --git a/www-apps/wordpress/ChangeLog b/www-apps/wordpress/ChangeLog
index c144f3f30b62..f6a6ad18dbd4 100644
--- a/www-apps/wordpress/ChangeLog
+++ b/www-apps/wordpress/ChangeLog
@@ -1,6 +1,14 @@
# ChangeLog for www-apps/wordpress
-# Copyright 2000-2007 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/www-apps/wordpress/ChangeLog,v 1.87 2007/10/30 12:19:59 wrobel Exp $
+# Copyright 2000-2008 Gentoo Foundation; Distributed under the GPL v2
+# $Header: /var/cvsroot/gentoo-x86/www-apps/wordpress/ChangeLog,v 1.88 2008/01/08 06:29:52 wrobel Exp $
+
+*wordpress-2.3.2 (08 Jan 2008)
+
+ 08 Jan 2008; Gunnar Wrobel <wrobel@gentoo.org> files/postinstall-en.txt,
+ files/postupgrade-en.txt, -wordpress-2.2.3.ebuild, -wordpress-2.3.ebuild,
+ -wordpress-2.3.1.ebuild, +wordpress-2.3.2.ebuild:
+ Added wordpress-2.3.2 to the tree, removed insecure versions (sec issues
+ #202071 and #202779).
*wordpress-2.3.1 (30 Oct 2007)
diff --git a/www-apps/wordpress/files/digest-wordpress-2.2.3 b/www-apps/wordpress/files/digest-wordpress-2.2.3
deleted file mode 100644
index d62d4654c54a..000000000000
--- a/www-apps/wordpress/files/digest-wordpress-2.2.3
+++ /dev/null
@@ -1,3 +0,0 @@
-MD5 98c1e611f8533d4fe4e8f995b8d83110 wordpress-2.2.3.tar.gz 824904
-RMD160 40e44c5950ee3072ab2abb0a97fc867c0cf780e6 wordpress-2.2.3.tar.gz 824904
-SHA256 6af35c864417fe3e5d4b2b2485cdedec7879f5f170088de79a71bc8cfb54110f wordpress-2.2.3.tar.gz 824904
diff --git a/www-apps/wordpress/files/digest-wordpress-2.3 b/www-apps/wordpress/files/digest-wordpress-2.3
deleted file mode 100644
index 8b911094b19c..000000000000
--- a/www-apps/wordpress/files/digest-wordpress-2.3
+++ /dev/null
@@ -1,3 +0,0 @@
-MD5 36ffea2a049a071342efda985feedf31 wordpress-2.3.tar.gz 870766
-RMD160 fa9d1bdc75aca40a870cddc7e91cee8df5aff559 wordpress-2.3.tar.gz 870766
-SHA256 34c7589b7d40281e3f6f8ac6f4172e69c28b3c93cf394490b73eec55dccc8741 wordpress-2.3.tar.gz 870766
diff --git a/www-apps/wordpress/files/digest-wordpress-2.3.1 b/www-apps/wordpress/files/digest-wordpress-2.3.1
deleted file mode 100644
index 5e4bb9b39578..000000000000
--- a/www-apps/wordpress/files/digest-wordpress-2.3.1
+++ /dev/null
@@ -1,3 +0,0 @@
-MD5 bd53264cbe80e470c5a9bc2cf7aa85e4 wordpress-2.3.1.tar.gz 883535
-RMD160 9136f1425e9ea377501c753749818d463c677713 wordpress-2.3.1.tar.gz 883535
-SHA256 20004580fab20c8801ca7a86c6d57db0bc794f2b59ab583aa6b82457c67f8cf7 wordpress-2.3.1.tar.gz 883535
diff --git a/www-apps/wordpress/files/digest-wordpress-2.3.2 b/www-apps/wordpress/files/digest-wordpress-2.3.2
new file mode 100644
index 000000000000..ea0f7201d527
--- /dev/null
+++ b/www-apps/wordpress/files/digest-wordpress-2.3.2
@@ -0,0 +1,3 @@
+MD5 7489b5f2433f3b2096aa02bbca09b069 wordpress-2.3.2.tar.gz 884822
+RMD160 2432bf7a508d93e4d21e5a5d73518931dc9b936d wordpress-2.3.2.tar.gz 884822
+SHA256 fb14e3d41964091be03772941d657dfba49f2598c14672466a39520e95272168 wordpress-2.3.2.tar.gz 884822
diff --git a/www-apps/wordpress/files/postinstall-en.txt b/www-apps/wordpress/files/postinstall-en.txt
index 695840d5cd17..ef25510f5b7f 100644
--- a/www-apps/wordpress/files/postinstall-en.txt
+++ b/www-apps/wordpress/files/postinstall-en.txt
@@ -31,3 +31,19 @@ Once this is done, you can log in to WordPress at
http://${VHOST_HOSTNAME}/${VHOST_APPDIR}
------------------------------------------------------------------------
+!!!!!!!!! SECURITY WARNING !!!!!!!!!!!
+
+Wordpress has had a history of serious security flaws. Any application
+with less widespread use but the same amount of security issues would
+have been removed from the tree.
+
+We decided to keep the application in the unstable portage tree so that
+it get's some level of attention from our security team. Currently
+you can expect us to react within 40 days of a reported security
+problem.
+
+This still means that you might open up your installation to hackers for
+about a month after an issue has been made public. This is a severe
+risk and you should keep a close eye on the common security trackers so
+that you are able to fix problems with your installation yourself if
+required.
diff --git a/www-apps/wordpress/files/postupgrade-en.txt b/www-apps/wordpress/files/postupgrade-en.txt
index bc0e55fc7a35..e205c82a7a42 100644
--- a/www-apps/wordpress/files/postupgrade-en.txt
+++ b/www-apps/wordpress/files/postupgrade-en.txt
@@ -11,3 +11,20 @@ http://${VHOST_HOSTNAME}/${VHOST_APPDIR}/wp-admin/upgrade.php
and follow the instructions on the screen.
------------------------------------------------------------------------
+!!!!!!!!! SECURITY WARNING !!!!!!!!!!!
+
+Wordpress has had a history of serious security flaws. Any application
+with less widespread use but the same amount of security issues would
+have been removed from the tree.
+
+We decided to keep the application in the unstable portage tree so that
+it get's some level of attention from our security team. Currently
+you can expect us to react within 40 days of a reported security
+problem.
+
+This still means that you might open up your installation to hackers for
+about a month after an issue has been made public. This is a severe
+risk and you should keep a close eye on the common security trackers so
+that you are able to fix problems with your installation yourself if
+required.
+
diff --git a/www-apps/wordpress/wordpress-2.2.3.ebuild b/www-apps/wordpress/wordpress-2.2.3.ebuild
deleted file mode 100644
index d5bfb42fe9fe..000000000000
--- a/www-apps/wordpress/wordpress-2.2.3.ebuild
+++ /dev/null
@@ -1,89 +0,0 @@
-# Copyright 1999-2007 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/www-apps/wordpress/wordpress-2.2.3.ebuild,v 1.1 2007/09/08 17:02:42 beandog Exp $
-
-inherit webapp eutils depend.php
-
-DESCRIPTION="Wordpress php and mysql based CMS system."
-HOMEPAGE="http://wordpress.org/"
-SRC_URI="http://www.wordpress.org/${P}.tar.gz"
-LICENSE="GPL-2"
-KEYWORDS="~amd64 ~hppa ~ppc ~ppc64 ~sparc ~x86"
-IUSE=""
-
-S="${WORKDIR}/${PN}"
-
-need_php
-
-pkg_setup() {
- webapp_pkg_setup
-
- require_php_with_any_use mysql mysqli
- require_php_with_use pcre
-}
-
-src_install() {
- local docs="license.txt readme.html"
-
- webapp_src_preinst
-
- einfo "Installing main files"
- cp wp-config-sample.php wp-config.php
- cp -r * ${D}${MY_HTDOCSDIR}
- einfo "Done"
-
- ewarn
- ewarn Please make sure you have register_globals = off set in your /etc/apache2/php.ini file
- ewarn If this is not an option for your web server and you NEED it set to on, then insert the following in your WordPress .htaccess file:
- ewarn php_flag register_globals off
- ewarn
-
- ewarn
- ewarn You will need to create a table for your WordPress database. This
- ewarn assumes you have some knowledge of MySQL, and already have it
- ewarn installed and configured. If not, please refer to
- ewarn the Gentoo MySQL guide at the following URL:
- ewarn http://www.gentoo.org/doc/en/mysql-howto.xml
- ewarn Log in to MySQL, and create a new database called
- ewarn "wordpress". From this point, you will need to edit
- ewarn your wp-config.php file in $DocumentRoot/wordpress/
- ewarn and point to your database. Once this is done, you can log in to
- ewarn WordPress at http://localhost/wordpress
- ewarn
-
- ewarn
- ewarn If you are upgrading from a previous version BACK UP your
- ewarn database. Once you are done with that, browse to
- ewarn http://localhost/wordpress/wp-admin/upgrade.php and follow
- ewarn the instructions on the screen.
- ewarn
-
- # handle documentation files
- #
- # NOTE that doc files go into /usr/share/doc as normal; they do NOT
- # get installed per vhost!
-
- dodoc ${docs}
- for doc in ${docs} INSTALL; do
- rm -f ${doc}
- done
-
- # Identify the configuration files that this app uses
- # User can want to make changes to these!
- webapp_serverowned ${MY_HTDOCSDIR}/index.php
- #webapp_serverowned ${MY_HTDOCSDIR}/wp-layout.css
- webapp_serverowned ${MY_HTDOCSDIR}/wp-admin/menu.php
- webapp_serverowned ${MY_HTDOCSDIR}
- webapp_configfile ${MY_HTDOCSDIR}/wp-config.php
- # Identify any script files that need #! headers adding to run under
- # a CGI script (such as PHP/CGI)
- #
- # for wordpress, we *assume* that all .php files need to have CGI/BIN
- # support added
-
- # post-install instructions
- #webapp_postinst_txt en ${FILESDIR}/1.2/postinstall-en.txt
-
- # now strut stuff
- webapp_src_install
-}
diff --git a/www-apps/wordpress/wordpress-2.3.1.ebuild b/www-apps/wordpress/wordpress-2.3.2.ebuild
index af17d91a54c7..95efa807024e 100644
--- a/www-apps/wordpress/wordpress-2.3.1.ebuild
+++ b/www-apps/wordpress/wordpress-2.3.2.ebuild
@@ -1,6 +1,6 @@
-# Copyright 1999-2007 Gentoo Foundation
+# Copyright 1999-2008 Gentoo Foundation
# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/www-apps/wordpress/wordpress-2.3.1.ebuild,v 1.1 2007/10/30 12:19:59 wrobel Exp $
+# $Header: /var/cvsroot/gentoo-x86/www-apps/wordpress/wordpress-2.3.2.ebuild,v 1.1 2008/01/08 06:29:52 wrobel Exp $
inherit webapp eutils depend.php
diff --git a/www-apps/wordpress/wordpress-2.3.ebuild b/www-apps/wordpress/wordpress-2.3.ebuild
deleted file mode 100644
index 01d0a46c3313..000000000000
--- a/www-apps/wordpress/wordpress-2.3.ebuild
+++ /dev/null
@@ -1,83 +0,0 @@
-# Copyright 1999-2007 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/www-apps/wordpress/wordpress-2.3.ebuild,v 1.1 2007/10/08 12:55:42 anant Exp $
-
-inherit webapp eutils depend.php
-
-DESCRIPTION="Wordpress php and mysql based CMS system."
-HOMEPAGE="http://wordpress.org/"
-SRC_URI="http://www.wordpress.org/${P}.tar.gz"
-LICENSE="GPL-2"
-KEYWORDS="~amd64 ~hppa ~ppc ~ppc64 ~sparc ~x86"
-IUSE=""
-
-S="${WORKDIR}/${PN}"
-
-need_php
-
-pkg_setup() {
- webapp_pkg_setup
-
- require_php_with_any_use mysql mysqli
- require_php_with_use pcre
-}
-
-src_install() {
- local docs="license.txt readme.html"
-
- webapp_src_preinst
-
- einfo "Installing main files"
- cp wp-config-sample.php wp-config.php
- cp -r * "${D}${MY_HTDOCSDIR}"
- einfo "Done"
-
- ewarn " "
- ewarn "Please make sure you have register_globals = off set in your"
- ewarn "/etc/apache2/php.ini file "
- ewarn "If this is not an option for your web server and you NEED it"
- ewarn "set to on, then insert the following in your WordPress "
- ewarn ".htaccess file: "
- ewarn "php_flag register_globals off "
- ewarn " "
-
- ewarn " "
- ewarn "You will need to create a table for your WordPress database."
- ewarn "This assumes you have some knowledge of MySQL, and already "
- ewarn "have it installed and configured. If not, please refer to "
- ewarn "the Gentoo MySQL guide at the following URL: "
- ewarn "http://www.gentoo.org/doc/en/mysql-howto.xml "
- ewarn "Log in to MySQL, and create a new database called "
- ewarn "'wordpress'. From this point, you will need to edit your "
- ewarn "wp-config.php file in $DocumentRoot/wordpress/ and point to "
- ewarn "your database. Once this is done, you can log in to "
- ewarn "WordPress at http://localhost/wordpress "
- ewarn " "
-
- ewarn " "
- ewarn "If you are upgrading from a previous version BACK UP your "
- ewarn "database. Once you are done with that, browse to "
- ewarn "http://localhost/wordpress/wp-admin/upgrade.php and follow "
- ewarn "the instructions on the screen. "
- ewarn " "
-
- # handle documentation files
- #
- # NOTE that doc files go into /usr/share/doc as normal; they do NOT
- # get installed per vhost!
-
- dodoc "${docs}"
- for doc in "${docs}" INSTALL; do
- rm -f "${doc}"
- done
-
- # Identify the configuration files that this app uses
- # User can want to make changes to these!
- webapp_serverowned "${MY_HTDOCSDIR}/index.php"
- webapp_serverowned "${MY_HTDOCSDIR}/wp-admin/menu.php"
- webapp_serverowned "${MY_HTDOCSDIR}"
- webapp_configfile "${MY_HTDOCSDIR}/wp-config.php"
-
- # now strut stuff
- webapp_src_install
-}