From f8e88b0452846539bdad8c502ddcdc508a937870 Mon Sep 17 00:00:00 2001 From: John Berninger Date: Sun, 3 Dec 2006 18:09:18 +0000 Subject: [PATCH 01/12] Fix for BZ 213985 --- wordpress.spec | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/wordpress.spec b/wordpress.spec index 34a7f20..ae58258 100644 --- a/wordpress.spec +++ b/wordpress.spec @@ -3,7 +3,7 @@ URL: http://www.wordpress.org Name: wordpress Version: 2.0.4 Group: Applications/Publishing -Release: 1%{?dist} +Release: 2%{?dist} License: GPL # Source0 with name-version does not work for web retrieval, # latest.tar.gz does not work for build @@ -11,6 +11,7 @@ License: GPL Source0: http://wordpress.org/%{name}-%{version}.tar.gz Source1: wordpress-httpd-conf Source2: README.fedora.wordpress +Patch0: wordpress-bz213985.patch BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) Requires: php >= 4.1.0, httpd, mysql-server, php-mysql BuildArch: noarch @@ -21,6 +22,7 @@ almost trivial, to get information out to people on the web. %prep %setup -q -n wordpress +%patch0 -p1 %install mkdir -p ${RPM_BUILD_ROOT}%{_datadir}/wordpress @@ -72,6 +74,9 @@ rm -rf ${RPM_BUILD_ROOT} %dir %{_sysconfdir}/wordpress %changelog +* Sun Dec 3 2006 John Berninger - 2.0.4-2 +- Fix wp-db-backup.php vuln in BZ 213985 + * Thu Oct 26 2006 John Berninger - 2.0.4-1 - Doc fix for BZ 207822 From c5e495b588047c73ad06fa9330c10825fed43d06 Mon Sep 17 00:00:00 2001 From: John Berninger Date: Sun, 3 Dec 2006 18:27:22 +0000 Subject: [PATCH 02/12] Fix for BZ 213985 --- wordpress-bz213985.patch | 49 ++++++++++++++++++++++++++++++++++++++++ wordpress.spec | 5 +++- 2 files changed, 53 insertions(+), 1 deletion(-) create mode 100644 wordpress-bz213985.patch diff --git a/wordpress-bz213985.patch b/wordpress-bz213985.patch new file mode 100644 index 0000000..58d8f5c --- /dev/null +++ b/wordpress-bz213985.patch @@ -0,0 +1,49 @@ +diff -ruN wp-204/wp-content/plugins/wp-db-backup.php wp-205/wp-content/plugins/wp-db-backup.php +--- wp-204/wp-content/plugins/wp-db-backup.php 2006-07-26 18:56:56.000000000 -0400 ++++ wp-205/wp-content/plugins/wp-db-backup.php 2006-09-25 14:51:54.000000000 -0400 +@@ -4,7 +4,7 @@ + Plugin URI: http://www.skippy.net/blog/plugins/ + Description: On-demand backup of your WordPress database. + Author: Scott Merrill +-Version: 1.7 ++Version: 1.8 + Author URI: http://www.skippy.net/ + + Much of this was modified from Mark Ghosh's One Click Backup, which +@@ -69,7 +69,8 @@ + $via = isset($_GET['via']) ? $_GET['via'] : 'http'; + + $this->backup_file = $_GET['backup']; +- ++ $this->validate_file($this->backup_file); ++ + switch($via) { + case 'smtp': + case 'email': +@@ -95,6 +96,7 @@ + } + if (isset($_GET['fragment'] )) { + list($table, $segment, $filename) = explode(':', $_GET['fragment']); ++ $this->validate_file($filename); + $this->backup_fragment($table, $segment, $filename); + } + +@@ -881,6 +883,18 @@ + + return; + } // wp_cron_db_backup ++ ++ function validate_file($file) { ++ if (false !== strpos($file, '..')) ++ die(__("Cheatin' uh ?")); ++ ++ if (false !== strpos($file, './')) ++ die(__("Cheatin' uh ?")); ++ ++ if (':' == substr($file, 1, 1)) ++ die(__("Cheatin' uh ?")); ++ } ++ + } + + function wpdbBackup_init() { diff --git a/wordpress.spec b/wordpress.spec index ae58258..40dd9f3 100644 --- a/wordpress.spec +++ b/wordpress.spec @@ -3,7 +3,7 @@ URL: http://www.wordpress.org Name: wordpress Version: 2.0.4 Group: Applications/Publishing -Release: 2%{?dist} +Release: 3%{?dist} License: GPL # Source0 with name-version does not work for web retrieval, # latest.tar.gz does not work for build @@ -74,6 +74,9 @@ rm -rf ${RPM_BUILD_ROOT} %dir %{_sysconfdir}/wordpress %changelog +* Sun Dec 3 2006 John Berninger - 2.0.4-3 +- Remove mysql-server dependency + * Sun Dec 3 2006 John Berninger - 2.0.4-2 - Fix wp-db-backup.php vuln in BZ 213985 From 53afb9d75381e0f5e1ae132cf8c271d01e827891 Mon Sep 17 00:00:00 2001 From: John Berninger Date: Tue, 5 Dec 2006 01:41:12 +0000 Subject: [PATCH 03/12] Actually remove mysql-server dependency this time --- wordpress.spec | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/wordpress.spec b/wordpress.spec index 40dd9f3..1ee1347 100644 --- a/wordpress.spec +++ b/wordpress.spec @@ -3,7 +3,7 @@ URL: http://www.wordpress.org Name: wordpress Version: 2.0.4 Group: Applications/Publishing -Release: 3%{?dist} +Release: 4%{?dist} License: GPL # Source0 with name-version does not work for web retrieval, # latest.tar.gz does not work for build @@ -13,7 +13,7 @@ Source1: wordpress-httpd-conf Source2: README.fedora.wordpress Patch0: wordpress-bz213985.patch BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) -Requires: php >= 4.1.0, httpd, mysql-server, php-mysql +Requires: php >= 4.1.0, httpd, php-mysql BuildArch: noarch %description @@ -74,6 +74,9 @@ rm -rf ${RPM_BUILD_ROOT} %dir %{_sysconfdir}/wordpress %changelog +* Sun Dec 3 2006 John Berninger - 2.0.4-4 +- Remove mysql-server dependency for real this time. + * Sun Dec 3 2006 John Berninger - 2.0.4-3 - Remove mysql-server dependency From f38988bf6ec8a87ad36e843b5eb59be8dc7b6ab1 Mon Sep 17 00:00:00 2001 From: John Berninger Date: Wed, 27 Dec 2006 16:05:20 +0000 Subject: [PATCH 04/12] Update to 2.0.5 to fix bz 220818 --- .cvsignore | 2 +- sources | 2 +- wordpress-bz213985.patch | 49 ---------------------------------------- wordpress.spec | 9 ++++---- 4 files changed, 7 insertions(+), 55 deletions(-) delete mode 100644 wordpress-bz213985.patch diff --git a/.cvsignore b/.cvsignore index 9a585ee..ff07df1 100644 --- a/.cvsignore +++ b/.cvsignore @@ -1 +1 @@ -wordpress-2.0.4.tar.gz +wordpress-2.0.5.tar.gz diff --git a/sources b/sources index acfe7d1..318205c 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -0de8e4b2051ce9313a23d7726210d5e3 wordpress-2.0.4.tar.gz +f16ffc47e22ba3540a1e4f32354fae0e wordpress-2.0.5.tar.gz diff --git a/wordpress-bz213985.patch b/wordpress-bz213985.patch deleted file mode 100644 index 58d8f5c..0000000 --- a/wordpress-bz213985.patch +++ /dev/null @@ -1,49 +0,0 @@ -diff -ruN wp-204/wp-content/plugins/wp-db-backup.php wp-205/wp-content/plugins/wp-db-backup.php ---- wp-204/wp-content/plugins/wp-db-backup.php 2006-07-26 18:56:56.000000000 -0400 -+++ wp-205/wp-content/plugins/wp-db-backup.php 2006-09-25 14:51:54.000000000 -0400 -@@ -4,7 +4,7 @@ - Plugin URI: http://www.skippy.net/blog/plugins/ - Description: On-demand backup of your WordPress database. - Author: Scott Merrill --Version: 1.7 -+Version: 1.8 - Author URI: http://www.skippy.net/ - - Much of this was modified from Mark Ghosh's One Click Backup, which -@@ -69,7 +69,8 @@ - $via = isset($_GET['via']) ? $_GET['via'] : 'http'; - - $this->backup_file = $_GET['backup']; -- -+ $this->validate_file($this->backup_file); -+ - switch($via) { - case 'smtp': - case 'email': -@@ -95,6 +96,7 @@ - } - if (isset($_GET['fragment'] )) { - list($table, $segment, $filename) = explode(':', $_GET['fragment']); -+ $this->validate_file($filename); - $this->backup_fragment($table, $segment, $filename); - } - -@@ -881,6 +883,18 @@ - - return; - } // wp_cron_db_backup -+ -+ function validate_file($file) { -+ if (false !== strpos($file, '..')) -+ die(__("Cheatin' uh ?")); -+ -+ if (false !== strpos($file, './')) -+ die(__("Cheatin' uh ?")); -+ -+ if (':' == substr($file, 1, 1)) -+ die(__("Cheatin' uh ?")); -+ } -+ - } - - function wpdbBackup_init() { diff --git a/wordpress.spec b/wordpress.spec index 1ee1347..bb1a942 100644 --- a/wordpress.spec +++ b/wordpress.spec @@ -1,9 +1,9 @@ Summary: WordPress blogging software URL: http://www.wordpress.org Name: wordpress -Version: 2.0.4 +Version: 2.0.5 Group: Applications/Publishing -Release: 4%{?dist} +Release: 1%{?dist} License: GPL # Source0 with name-version does not work for web retrieval, # latest.tar.gz does not work for build @@ -11,7 +11,6 @@ License: GPL Source0: http://wordpress.org/%{name}-%{version}.tar.gz Source1: wordpress-httpd-conf Source2: README.fedora.wordpress -Patch0: wordpress-bz213985.patch BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) Requires: php >= 4.1.0, httpd, php-mysql BuildArch: noarch @@ -22,7 +21,6 @@ almost trivial, to get information out to people on the web. %prep %setup -q -n wordpress -%patch0 -p1 %install mkdir -p ${RPM_BUILD_ROOT}%{_datadir}/wordpress @@ -74,6 +72,9 @@ rm -rf ${RPM_BUILD_ROOT} %dir %{_sysconfdir}/wordpress %changelog +* Wed Dec 27 2006 John Berninger - 2.0.5-1 +- ver 2.0.5 to fix bz 220818 + * Sun Dec 3 2006 John Berninger - 2.0.4-4 - Remove mysql-server dependency for real this time. From 17871ed1ef23160fb9fa07f0e75a3b7bf081810a Mon Sep 17 00:00:00 2001 From: John Berninger Date: Thu, 1 Feb 2007 02:45:58 +0000 Subject: [PATCH 05/12] update to v2.1 to fix multiple bz/vuln's --- .cvsignore | 2 +- sources | 2 +- wordpress.spec | 8 ++++++-- 3 files changed, 8 insertions(+), 4 deletions(-) diff --git a/.cvsignore b/.cvsignore index ff07df1..5723143 100644 --- a/.cvsignore +++ b/.cvsignore @@ -1 +1 @@ -wordpress-2.0.5.tar.gz +wordpress-2.1.tar.gz diff --git a/sources b/sources index 318205c..59aedfb 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -f16ffc47e22ba3540a1e4f32354fae0e wordpress-2.0.5.tar.gz +a8ffd0063b080de4789b928696c1fb26 wordpress-2.1.tar.gz diff --git a/wordpress.spec b/wordpress.spec index bb1a942..09e605a 100644 --- a/wordpress.spec +++ b/wordpress.spec @@ -1,9 +1,9 @@ Summary: WordPress blogging software URL: http://www.wordpress.org Name: wordpress -Version: 2.0.5 +Version: 2.1 Group: Applications/Publishing -Release: 1%{?dist} +Release: 0%{?dist} License: GPL # Source0 with name-version does not work for web retrieval, # latest.tar.gz does not work for build @@ -57,6 +57,7 @@ rm -rf ${RPM_BUILD_ROOT} %{_datadir}/wordpress/wp-config-sample.php %{_datadir}/wordpress/wp-config.php %config(noreplace) %{_sysconfdir}/wordpress/wp-config.php +%{_datadir}/wordpress/wp-cron.php %{_datadir}/wordpress/wp-feed.php %{_datadir}/wordpress/wp-links-opml.php %{_datadir}/wordpress/wp-login.php @@ -72,6 +73,9 @@ rm -rf ${RPM_BUILD_ROOT} %dir %{_sysconfdir}/wordpress %changelog +* Wed Jan 31 2007 John Berninger - 2.1-0 +- update to v 2.1 to fix multiple bz/vuln's + * Wed Dec 27 2006 John Berninger - 2.0.5-1 - ver 2.0.5 to fix bz 220818 From 6237923d481bfa86e95c05ca49e53cf43a5690ed Mon Sep 17 00:00:00 2001 From: John Berninger Date: Tue, 27 Feb 2007 16:08:16 +0000 Subject: [PATCH 06/12] bz 229991 update to 2.1.1 --- .cvsignore | 2 +- sources | 2 +- wordpress.spec | 5 ++++- 3 files changed, 6 insertions(+), 3 deletions(-) diff --git a/.cvsignore b/.cvsignore index 5723143..c84e0f2 100644 --- a/.cvsignore +++ b/.cvsignore @@ -1 +1 @@ -wordpress-2.1.tar.gz +wordpress-2.1.1.tar.gz diff --git a/sources b/sources index 59aedfb..2d574c3 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -a8ffd0063b080de4789b928696c1fb26 wordpress-2.1.tar.gz +9b694bdd05364554d8977333445adbc1 wordpress-2.1.1.tar.gz diff --git a/wordpress.spec b/wordpress.spec index 09e605a..4997d75 100644 --- a/wordpress.spec +++ b/wordpress.spec @@ -1,7 +1,7 @@ Summary: WordPress blogging software URL: http://www.wordpress.org Name: wordpress -Version: 2.1 +Version: 2.1.1 Group: Applications/Publishing Release: 0%{?dist} License: GPL @@ -73,6 +73,9 @@ rm -rf ${RPM_BUILD_ROOT} %dir %{_sysconfdir}/wordpress %changelog +* Tue Feb 27 2007 John Berninger - 2.1.1-0 +- update to 2.1.1 for vuln fix - bz 229991 + * Wed Jan 31 2007 John Berninger - 2.1-0 - update to v 2.1 to fix multiple bz/vuln's From 92da5c1d0b699640fbe0679d26226ba1c60b9cff Mon Sep 17 00:00:00 2001 From: John Berninger Date: Sat, 3 Mar 2007 13:34:05 +0000 Subject: [PATCH 07/12] update to 2.1.2 - bz 230825 --- .cvsignore | 2 +- sources | 2 +- wordpress.spec | 5 ++++- 3 files changed, 6 insertions(+), 3 deletions(-) diff --git a/.cvsignore b/.cvsignore index c84e0f2..9506e72 100644 --- a/.cvsignore +++ b/.cvsignore @@ -1 +1 @@ -wordpress-2.1.1.tar.gz +wordpress-2.1.2.tar.gz diff --git a/sources b/sources index 2d574c3..7646d15 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -9b694bdd05364554d8977333445adbc1 wordpress-2.1.1.tar.gz +b1ae0c152e60300cba8c40c030baafd4 wordpress-2.1.2.tar.gz diff --git a/wordpress.spec b/wordpress.spec index 4997d75..07b1256 100644 --- a/wordpress.spec +++ b/wordpress.spec @@ -1,7 +1,7 @@ Summary: WordPress blogging software URL: http://www.wordpress.org Name: wordpress -Version: 2.1.1 +Version: 2.1.2 Group: Applications/Publishing Release: 0%{?dist} License: GPL @@ -73,6 +73,9 @@ rm -rf ${RPM_BUILD_ROOT} %dir %{_sysconfdir}/wordpress %changelog +* Sat Mar 3 2007 John Berninger - 2.1.2-0 +- update to 2.1.2 - backdoor exploit introduced upstream in 2.1.1 - bz 230825 + * Tue Feb 27 2007 John Berninger - 2.1.1-0 - update to 2.1.1 for vuln fix - bz 229991 From 9247f27815b63898c8b822ae574c432c89f6d342 Mon Sep 17 00:00:00 2001 From: John Berninger Date: Mon, 26 Mar 2007 15:42:19 +0000 Subject: [PATCH 08/12] update for bz 233703 --- .cvsignore | 2 +- sources | 2 +- wordpress.spec | 9 ++++++--- 3 files changed, 8 insertions(+), 5 deletions(-) diff --git a/.cvsignore b/.cvsignore index 9506e72..5034f8f 100644 --- a/.cvsignore +++ b/.cvsignore @@ -1 +1 @@ -wordpress-2.1.2.tar.gz +wordpress-2.1.3-RC2.tar.gz diff --git a/sources b/sources index 7646d15..e4d32ad 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -b1ae0c152e60300cba8c40c030baafd4 wordpress-2.1.2.tar.gz +8dcbf82fbdff4f0214e1d8862e281e7e wordpress-2.1.3-RC2.tar.gz diff --git a/wordpress.spec b/wordpress.spec index 07b1256..7268bc1 100644 --- a/wordpress.spec +++ b/wordpress.spec @@ -1,14 +1,14 @@ Summary: WordPress blogging software URL: http://www.wordpress.org Name: wordpress -Version: 2.1.2 +Version: 2.1.3 Group: Applications/Publishing -Release: 0%{?dist} +Release: 0.rc2%{?dist} License: GPL # Source0 with name-version does not work for web retrieval, # latest.tar.gz does not work for build # Source0: http://wordpress.org/latest.tar.gz -Source0: http://wordpress.org/%{name}-%{version}.tar.gz +Source0: http://wordpress.org/%{name}-%{version}-RC2.tar.gz Source1: wordpress-httpd-conf Source2: README.fedora.wordpress BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) @@ -73,6 +73,9 @@ rm -rf ${RPM_BUILD_ROOT} %dir %{_sysconfdir}/wordpress %changelog +* Mon Mar 26 2007 John Berninger - 2.1.3-rc2 +- update to 2.1.3rc2 for bz 233703 + * Sat Mar 3 2007 John Berninger - 2.1.2-0 - update to 2.1.2 - backdoor exploit introduced upstream in 2.1.1 - bz 230825 From 7008296f0cfba76a8a88b0f2fafe7163561b0cd8 Mon Sep 17 00:00:00 2001 From: John Berninger Date: Mon, 16 Apr 2007 15:13:46 +0000 Subject: [PATCH 09/12] update to 2.1.3 final --- .cvsignore | 2 +- sources | 2 +- wordpress.spec | 7 +++++-- 3 files changed, 7 insertions(+), 4 deletions(-) diff --git a/.cvsignore b/.cvsignore index 5034f8f..9a61071 100644 --- a/.cvsignore +++ b/.cvsignore @@ -1 +1 @@ -wordpress-2.1.3-RC2.tar.gz +wordpress-2.1.3.tar.gz diff --git a/sources b/sources index e4d32ad..4a2a426 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -8dcbf82fbdff4f0214e1d8862e281e7e wordpress-2.1.3-RC2.tar.gz +d480bcaff18c4751eda572be878ef7bc wordpress-2.1.3.tar.gz diff --git a/wordpress.spec b/wordpress.spec index 7268bc1..4d82b1d 100644 --- a/wordpress.spec +++ b/wordpress.spec @@ -3,12 +3,12 @@ URL: http://www.wordpress.org Name: wordpress Version: 2.1.3 Group: Applications/Publishing -Release: 0.rc2%{?dist} +Release: 1%{?dist} License: GPL # Source0 with name-version does not work for web retrieval, # latest.tar.gz does not work for build # Source0: http://wordpress.org/latest.tar.gz -Source0: http://wordpress.org/%{name}-%{version}-RC2.tar.gz +Source0: http://wordpress.org/%{name}-%{version}.tar.gz Source1: wordpress-httpd-conf Source2: README.fedora.wordpress BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) @@ -73,6 +73,9 @@ rm -rf ${RPM_BUILD_ROOT} %dir %{_sysconfdir}/wordpress %changelog +* Mon Apr 16 2007 John Berninger - 2.1.3-1 +- update to 2.1.3 final - bz235912 + * Mon Mar 26 2007 John Berninger - 2.1.3-rc2 - update to 2.1.3rc2 for bz 233703 From bb1dfc507727764af942d06cd8f60aa3d3bf8549 Mon Sep 17 00:00:00 2001 From: John Berninger Date: Wed, 4 Jul 2007 22:22:09 +0000 Subject: [PATCH 10/12] update to 2.2.1 --- .cvsignore | 2 +- README.fedora.wordpress | 28 ++++++++++++++++++++++++++++ sources | 2 +- wordpress.spec | 8 ++++++-- 4 files changed, 36 insertions(+), 4 deletions(-) diff --git a/.cvsignore b/.cvsignore index 9a61071..c7edbfc 100644 --- a/.cvsignore +++ b/.cvsignore @@ -1 +1 @@ -wordpress-2.1.3.tar.gz +wordpress-2.2.1.tar.gz diff --git a/README.fedora.wordpress b/README.fedora.wordpress index 8a4518d..469b6e0 100644 --- a/README.fedora.wordpress +++ b/README.fedora.wordpress @@ -1,6 +1,9 @@ Wordpress is a database driven blogging program designed to make it exceedingly easy to publish an online blog, sometimes also called a weblog or journal. + +CONFIGURING WORDPRESS FOR THE FIRST TIME +---------------------------------------- Once this package is installed, there are a few configuration items which need to be performed before the blog is usable. First, you need to establish a username and password to connect to your MySQL database as, and make both @@ -43,3 +46,28 @@ Once that's done and the database server and web server have been started, open a web browser to http://localhost/wordpress/wp-admin/install.php and follow the instructions given to you on the pages you see to set up the database tables and begin publishing your blog. + + +UPGRADING WORDPRESS +------------------- +In order to upgrade from a 2.1 series package, there are several steps you +will need to take. If you've already performed the 'yum update', all is not +lost, and you more than likely still be able to complete the upgrade +painlessly. + +First, you will want to back up your entire database. This is simply common +sense, but it is also mentioned explicitly in Wordpress's upgrade instructions. + +You should have disabled all your plugins. Having old plugins still active +could cause problems, as the old plugins may not be compatible with the new +version of Wordpress. + +Once all the plugins are disabled, run the actual yum update. Once this +completes, you should point a browser at +http:///wordpress/wp-admin/upgrade.php and follow the +instructions that appear in the browser window. Once this is completed, you +can begin reactivating plugins one at a time. + +If you need a more detailed upgrade document, or you run into problems, please +see the Wordpress upgrade documentation at +http://codex.wordpress.org/Upgrading_WordPress#Detailed_Instructions diff --git a/sources b/sources index 4a2a426..f815815 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -d480bcaff18c4751eda572be878ef7bc wordpress-2.1.3.tar.gz +a2670e28b2ebfe165278ce03ff75fa06 wordpress-2.2.1.tar.gz diff --git a/wordpress.spec b/wordpress.spec index 4d82b1d..5097632 100644 --- a/wordpress.spec +++ b/wordpress.spec @@ -1,7 +1,7 @@ Summary: WordPress blogging software URL: http://www.wordpress.org Name: wordpress -Version: 2.1.3 +Version: 2.2.1 Group: Applications/Publishing Release: 1%{?dist} License: GPL @@ -12,7 +12,7 @@ Source0: http://wordpress.org/%{name}-%{version}.tar.gz Source1: wordpress-httpd-conf Source2: README.fedora.wordpress BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) -Requires: php >= 4.1.0, httpd, php-mysql +Requires: php >= 4.2.0, httpd, php-mysql BuildArch: noarch %description @@ -50,6 +50,7 @@ rm -rf ${RPM_BUILD_ROOT} %doc license.txt %doc readme.html %doc README.fedora +%{_datadir}/wordpress/wp-app.php %{_datadir}/wordpress/wp-atom.php %{_datadir}/wordpress/wp-blog-header.php %{_datadir}/wordpress/wp-comments-post.php @@ -73,6 +74,9 @@ rm -rf ${RPM_BUILD_ROOT} %dir %{_sysconfdir}/wordpress %changelog +* Wed Jul 4 2007 John Berninger - 2.2.1-1 +- update to upstream 2.2.1 to fix various vulnerabilities + * Mon Apr 16 2007 John Berninger - 2.1.3-1 - update to 2.1.3 final - bz235912 From 933c83d89a3d9fd97f6e4a4e65734efef78fe487 Mon Sep 17 00:00:00 2001 From: John Berninger Date: Wed, 29 Aug 2007 14:54:42 +0000 Subject: [PATCH 11/12] update to upstream 2.2.2 and license tag update --- .cvsignore | 2 +- sources | 2 +- wordpress.spec | 10 +++++++--- 3 files changed, 9 insertions(+), 5 deletions(-) diff --git a/.cvsignore b/.cvsignore index c7edbfc..af7c807 100644 --- a/.cvsignore +++ b/.cvsignore @@ -1 +1 @@ -wordpress-2.2.1.tar.gz +wordpress-2.2.2.tar.gz diff --git a/sources b/sources index f815815..7956b5e 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -a2670e28b2ebfe165278ce03ff75fa06 wordpress-2.2.1.tar.gz +a87666c6fe6cb4db94e2ae0531e5b633 wordpress-2.2.2.tar.gz diff --git a/wordpress.spec b/wordpress.spec index 5097632..9f258c1 100644 --- a/wordpress.spec +++ b/wordpress.spec @@ -1,10 +1,10 @@ Summary: WordPress blogging software URL: http://www.wordpress.org Name: wordpress -Version: 2.2.1 +Version: 2.2.2 Group: Applications/Publishing -Release: 1%{?dist} -License: GPL +Release: 0%{?dist} +License: GPLv2 # Source0 with name-version does not work for web retrieval, # latest.tar.gz does not work for build # Source0: http://wordpress.org/latest.tar.gz @@ -74,6 +74,10 @@ rm -rf ${RPM_BUILD_ROOT} %dir %{_sysconfdir}/wordpress %changelog +* Wed Aug 29 2007 John Berninger - 2.2.2-1 +- update to upstream 2.2.2 +- license tag update + * Wed Jul 4 2007 John Berninger - 2.2.1-1 - update to upstream 2.2.1 to fix various vulnerabilities From 1d94be10b5424f9c64ba1896a4cc85a3f5fc7c70 Mon Sep 17 00:00:00 2001 From: Adrian Reber Date: Tue, 11 Sep 2007 16:45:21 +0000 Subject: [PATCH 12/12] - updated to 2.2.3 (security release) --- .cvsignore | 1 + sources | 1 + wordpress.spec | 7 +++++-- 3 files changed, 7 insertions(+), 2 deletions(-) diff --git a/.cvsignore b/.cvsignore index af7c807..ba1cbea 100644 --- a/.cvsignore +++ b/.cvsignore @@ -1 +1,2 @@ wordpress-2.2.2.tar.gz +wordpress-2.2.3.tar.gz diff --git a/sources b/sources index 7956b5e..667782e 100644 --- a/sources +++ b/sources @@ -1 +1,2 @@ a87666c6fe6cb4db94e2ae0531e5b633 wordpress-2.2.2.tar.gz +98c1e611f8533d4fe4e8f995b8d83110 wordpress-2.2.3.tar.gz diff --git a/wordpress.spec b/wordpress.spec index 9f258c1..09221a1 100644 --- a/wordpress.spec +++ b/wordpress.spec @@ -1,7 +1,7 @@ Summary: WordPress blogging software URL: http://www.wordpress.org Name: wordpress -Version: 2.2.2 +Version: 2.2.3 Group: Applications/Publishing Release: 0%{?dist} License: GPLv2 @@ -74,7 +74,10 @@ rm -rf ${RPM_BUILD_ROOT} %dir %{_sysconfdir}/wordpress %changelog -* Wed Aug 29 2007 John Berninger - 2.2.2-1 +* Tue Sep 11 2007 Adrian Reber - 2.2.3-0 +- updated to 2.2.3 (security release) + +* Wed Aug 29 2007 John Berninger - 2.2.2-0 - update to upstream 2.2.2 - license tag update