WordPress 5.1.18 Security Release

(cherry picked from commit 6005fbcc0c)

sources

@@ -1 +1 @@
-SHA512 (wordpress-7.1.tar.gz) = 4bb95bddeb0d30778b9d744e42f7e21507ed3070fda3e34dd41918073618181e350cf77ea8dfaacc48c59a00f50273b4a1b7a6e4c43d2a81ccfd35f27df342bc
+SHA512 (wordpress-5.1.18.tar.gz) = 4dff8a76fed07d7c547dc5b43d49d0c3175939fe25808af78d8d35d03ea4f9e5f4a604ac21451f993f64abdaa6de5ccfbae35f9e94eb3d3e82919fac9c801900

wordpress-4.9-mediaelement_no_swf.patch

@@ -1,7 +1,7 @@
-diff -up wordpress/wp-includes/js/mediaelement/mediaelement-and-player.js.no wordpress/wp-includes/js/mediaelement/mediaelement-and-player.js
---- wordpress/wp-includes/js/mediaelement/mediaelement-and-player.js.no	2020-09-29 17:53:06.000000000 +0200
-+++ wordpress/wp-includes/js/mediaelement/mediaelement-and-player.js	2020-12-09 09:44:27.954254919 +0100
-@@ -6135,6 +6135,7 @@ if (hasFlash) {
+diff -up wordpress/wp-includes/js/mediaelement/mediaelement-and-player.js.old wordpress/wp-includes/js/mediaelement/mediaelement-and-player.js
+--- wordpress/wp-includes/js/mediaelement/mediaelement-and-player.js.old	2017-11-16 09:22:17.148277728 +0100
++++ wordpress/wp-includes/js/mediaelement/mediaelement-and-player.js	2017-11-16 09:23:42.056696625 +0100
+@@ -6121,6 +6121,7 @@ if (hasFlash) {
  		}
  	});
  
@@ -9,7 +9,7 @@ diff -up wordpress/wp-includes/js/mediaelement/mediaelement-and-player.js.no wor
  	var FlashMediaElementVideoRenderer = {
  		name: 'flash_video',
  		options: {
-@@ -6219,6 +6220,7 @@ if (hasFlash) {
+@@ -6205,6 +6206,7 @@ if (hasFlash) {
  		create: FlashMediaElementRenderer.create
  	};
  	_renderer.renderer.add(FlashMediaElementAudioOggRenderer);
@@ -17,10 +17,10 @@ diff -up wordpress/wp-includes/js/mediaelement/mediaelement-and-player.js.no wor
  }
  
  },{"2":2,"25":25,"27":27,"28":28,"3":3,"5":5,"7":7,"8":8}],21:[function(_dereq_,module,exports){
-diff -up wordpress/wp-includes/js/mediaelement/mediaelement.js.no wordpress/wp-includes/js/mediaelement/mediaelement.js
---- wordpress/wp-includes/js/mediaelement/mediaelement.js.no	2020-09-29 17:53:06.000000000 +0200
-+++ wordpress/wp-includes/js/mediaelement/mediaelement.js	2020-12-09 09:44:38.532227178 +0100
-@@ -1842,6 +1842,7 @@ if (hasFlash) {
+diff -up wordpress/wp-includes/js/mediaelement/mediaelement.js.old wordpress/wp-includes/js/mediaelement/mediaelement.js
+--- wordpress/wp-includes/js/mediaelement/mediaelement.js.old	2017-11-16 09:24:44.984007081 +0100
++++ wordpress/wp-includes/js/mediaelement/mediaelement.js	2017-11-16 09:24:49.655030123 +0100
+@@ -1839,6 +1839,7 @@ if (hasFlash) {
  		}
  	});
  
@@ -28,7 +28,7 @@ diff -up wordpress/wp-includes/js/mediaelement/mediaelement.js.no wordpress/wp-i
  	var FlashMediaElementVideoRenderer = {
  		name: 'flash_video',
  		options: {
-@@ -1926,6 +1927,7 @@ if (hasFlash) {
+@@ -1923,6 +1924,7 @@ if (hasFlash) {
  		create: FlashMediaElementRenderer.create
  	};
  	_renderer.renderer.add(FlashMediaElementAudioOggRenderer);

wordpress-5.1-config.patch

@@ -1,7 +1,7 @@
-diff -up wordpress/wp-config.php.rpm wordpress/wp-config.php
---- wordpress/wp-config.php.rpm	2020-10-20 15:05:26.351765085 +0200
-+++ wordpress/wp-config.php	2020-10-20 15:05:48.663684089 +0200
-@@ -66,6 +66,22 @@ define( 'NONCE_SALT',       'put your un
+diff -up wordpress/wp-config.php.orig wordpress/wp-config.php
+--- wordpress/wp-config.php.orig	2019-02-21 15:07:29.558863904 +0100
++++ wordpress/wp-config.php	2019-02-21 15:07:37.024901925 +0100
+@@ -66,6 +66,19 @@ define( 'NONCE_SALT',       'put your un
  $table_prefix = 'wp_';
  
  /**
@@ -11,9 +11,6 @@ diff -up wordpress/wp-config.php.rpm wordpress/wp-config.php
 +/* Disable all file change, as RPM base installation are read-only */
 +define('DISALLOW_FILE_MODS', true);
 +
-+/* Please ensure that this is either 'direct', 'ssh2', 'ftpext', 'ftpsockets' or false */
-+define('FS_METHOD', 'direct');
-+
 +/* Disable automatic updater, in case you want to allow
 +   above FILE_MODS for plugins, themes, ... */
 +define('AUTOMATIC_UPDATER_DISABLED', true);
@@ -24,11 +21,11 @@ diff -up wordpress/wp-config.php.rpm wordpress/wp-config.php
   * For developers: WordPress debugging mode.
   *
   * Change this to true to enable the display of notices during development.
-@@ -83,7 +99,7 @@ define( 'WP_DEBUG', false );
+@@ -83,7 +96,7 @@ define( 'WP_DEBUG', false );
  
  /** Absolute path to the WordPress directory. */
  if ( ! defined( 'ABSPATH' ) ) {
--	define( 'ABSPATH', __DIR__ . '/' );
+-	define( 'ABSPATH', dirname( __FILE__ ) . '/' );
 +	define('ABSPATH', '/usr/share/wordpress');
  }
  

wordpress-5.1-no_swfupload.patch

@@ -0,0 +1,16 @@
+diff -up wordpress/wp-includes/script-loader.php.orig wordpress/wp-includes/script-loader.php
+--- wordpress/wp-includes/script-loader.php.orig	2019-02-21 14:57:23.338776485 +0100
++++ wordpress/wp-includes/script-loader.php	2019-02-21 14:57:25.832789185 +0100
+@@ -1098,12 +1098,6 @@ function wp_default_scripts( &$scripts )
+ 	$scripts->add( 'wp-plupload', "/wp-includes/js/plupload/wp-plupload$suffix.js", array( 'plupload', 'jquery', 'json2', 'media-models' ), false, 1 );
+ 	did_action( 'init' ) && $scripts->localize( 'wp-plupload', 'pluploadL10n', $uploader_l10n );
+ 
+-	// keep 'swfupload' for back-compat.
+-	$scripts->add( 'swfupload', '/wp-includes/js/swfupload/swfupload.js', array(), '2201-20110113' );
+-	$scripts->add( 'swfupload-all', false, array( 'swfupload' ), '2201' );
+-	$scripts->add( 'swfupload-handlers', "/wp-includes/js/swfupload/handlers$suffix.js", array( 'swfupload-all', 'jquery' ), '2201-20110524' );
+-	did_action( 'init' ) && $scripts->localize( 'swfupload-handlers', 'swfuploadL10n', $uploader_l10n );
+-
+ 	$scripts->add( 'comment-reply', "/wp-includes/js/comment-reply$suffix.js", array(), false, 1 );
+ 
+ 	$scripts->add( 'json2', "/wp-includes/js/json2$suffix.js", array(), '2015-05-03' );

wordpress-5.1-noupdate.patch

@@ -0,0 +1,74 @@
+diff -up wordpress/wp-admin/includes/admin-filters.php.rpm wordpress/wp-admin/includes/admin-filters.php
+--- wordpress/wp-admin/includes/admin-filters.php.rpm	2019-02-21 15:14:36.864022775 +0100
++++ wordpress/wp-admin/includes/admin-filters.php	2019-02-21 15:14:46.729070707 +0100
+@@ -116,7 +116,6 @@ add_action( 'personal_options_update', '
+ add_action( 'load-plugins.php', 'wp_plugin_update_rows', 20 ); // After wp_update_plugins() is called.
+ add_action( 'load-themes.php', 'wp_theme_update_rows', 20 ); // After wp_update_themes() is called.
+ 
+-add_action( 'admin_notices', 'update_nag', 3 );
+ add_action( 'admin_notices', 'maintenance_nag', 10 );
+ 
+ add_filter( 'update_footer', 'core_update_footer' );
+diff -up wordpress/wp-admin/includes/class-core-upgrader.php.rpm wordpress/wp-admin/includes/class-core-upgrader.php
+--- wordpress/wp-admin/includes/class-core-upgrader.php.rpm	2019-02-21 15:14:36.864022775 +0100
++++ wordpress/wp-admin/includes/class-core-upgrader.php	2019-02-21 15:14:46.729070707 +0100
+@@ -250,6 +250,9 @@ class Core_Upgrader extends WP_Upgrader
+ 	 * @return bool True if we should update to the offered version, otherwise false.
+ 	 */
+ 	public static function should_update_to_version( $offered_ver ) {
++		// RPM: nether allow core update
++		return false;
++
+ 		include( ABSPATH . WPINC . '/version.php' ); // $wp_version; // x.y.z
+ 
+ 		$current_branch                 = implode( '.', array_slice( preg_split( '/[.-]/', $wp_version ), 0, 2 ) ); // x.y
+diff -up wordpress/wp-admin/includes/class-wp-automatic-updater.php.rpm wordpress/wp-admin/includes/class-wp-automatic-updater.php
+--- wordpress/wp-admin/includes/class-wp-automatic-updater.php.rpm	2019-02-21 15:14:36.864022775 +0100
++++ wordpress/wp-admin/includes/class-wp-automatic-updater.php	2019-02-21 15:14:46.729070707 +0100
+@@ -38,7 +38,7 @@ class WP_Automatic_Updater {
+ 		}
+ 
+ 		// More fine grained control can be done through the WP_AUTO_UPDATE_CORE constant and filters.
+-		$disabled = defined( 'AUTOMATIC_UPDATER_DISABLED' ) && AUTOMATIC_UPDATER_DISABLED;
++		$disabled = !defined( 'AUTOMATIC_UPDATER_DISABLED' ) || AUTOMATIC_UPDATER_DISABLED;
+ 
+ 		/**
+ 		 * Filters whether to entirely disable background updates.
+diff -up wordpress/wp-admin/includes/update.php.rpm wordpress/wp-admin/includes/update.php
+--- wordpress/wp-admin/includes/update.php.rpm	2019-02-21 15:14:36.865022780 +0100
++++ wordpress/wp-admin/includes/update.php	2019-02-21 15:14:46.729070707 +0100
+@@ -301,7 +301,7 @@ function update_right_now_message() {
+ 		$cur = get_preferred_from_update_core();
+ 
+ 		if ( isset( $cur->response ) && $cur->response == 'upgrade' ) {
+-			$msg .= '<a href="' . network_admin_url( 'update-core.php' ) . '" class="button" aria-describedby="wp-version">' . sprintf( __( 'Update to %s' ), $cur->current ? $cur->current : __( 'Latest' ) ) . '</a> ';
++			$msg .= '';
+ 		}
+ 	}
+ 
+diff -up wordpress/wp-includes/load.php.rpm wordpress/wp-includes/load.php
+--- wordpress/wp-includes/load.php.rpm	2019-01-30 12:01:52.000000000 +0100
++++ wordpress/wp-includes/load.php	2019-02-21 15:14:36.865022780 +0100
+@@ -1259,7 +1259,7 @@ function wp_is_file_mod_allowed( $contex
+ 	 * @param bool   $file_mod_allowed Whether file modifications are allowed.
+ 	 * @param string $context          The usage context.
+ 	 */
+-	return apply_filters( 'file_mod_allowed', ! defined( 'DISALLOW_FILE_MODS' ) || ! DISALLOW_FILE_MODS, $context );
++	return apply_filters( 'file_mod_allowed', defined( 'DISALLOW_FILE_MODS' ) && ! DISALLOW_FILE_MODS, $context );
+ }
+ 
+ /**
+diff -up wordpress/wp-includes/update.php.rpm wordpress/wp-includes/update.php
+--- wordpress/wp-includes/update.php.rpm	2019-02-21 15:14:36.865022780 +0100
++++ wordpress/wp-includes/update.php	2019-02-21 15:16:50.428671765 +0100
+@@ -770,10 +770,6 @@ function _maybe_update_themes() {
+  * @since 3.1.0
+  */
+ function wp_schedule_update_checks() {
+-	if ( ! wp_next_scheduled( 'wp_version_check' ) && ! wp_installing() ) {
+-		wp_schedule_event( time(), 'twicedaily', 'wp_version_check' );
+-	}
+-
+ 	if ( ! wp_next_scheduled( 'wp_update_plugins' ) && ! wp_installing() ) {
+ 		wp_schedule_event( time(), 'twicedaily', 'wp_update_plugins' );
+ 	}

wordpress-5.1-remove-jshint-refs.patch

@@ -1,11 +1,11 @@
 diff -up wordpress/wp-includes/script-loader.php.orig wordpress/wp-includes/script-loader.php
---- wordpress/wp-includes/script-loader.php.orig	2026-08-25 07:26:03.212320361 +0200
-+++ wordpress/wp-includes/script-loader.php	2026-08-25 07:26:08.488274508 +0200
-@@ -1205,7 +1205,6 @@ function wp_default_scripts( $scripts )
- 	$scripts->add( 'wp-codemirror', '/wp-includes/js/codemirror/codemirror.min.js', array(), '5.65.20' );
+--- wordpress/wp-includes/script-loader.php.orig	2019-02-22 10:52:01.902006889 +0100
++++ wordpress/wp-includes/script-loader.php	2019-02-22 10:52:04.560023086 +0100
+@@ -1251,7 +1251,6 @@ function wp_default_scripts( &$scripts )
+ 	$scripts->add( 'wp-codemirror', '/wp-includes/js/codemirror/codemirror.min.js', array(), '5.29.1-alpha-ee20357' );
  	$scripts->add( 'csslint', '/wp-includes/js/codemirror/csslint.js', array(), '1.0.5' );
- 	$scripts->add( 'esprima', '/wp-includes/js/codemirror/esprima.js', array(), '4.0.1' ); // Deprecated.
--	$scripts->add( 'jshint', '/wp-includes/js/codemirror/fakejshint.js', array( 'esprima' ), '2.9.5' ); // Deprecated.
- 	$scripts->add( 'jsonlint', '/wp-includes/js/codemirror/jsonlint.js', array(), '1.6.3' );
- 	$scripts->add( 'htmlhint', '/wp-includes/js/codemirror/htmlhint.js', array(), '1.9.2' );
+ 	$scripts->add( 'esprima', '/wp-includes/js/codemirror/esprima.js', array(), '4.0.0' );
+-	$scripts->add( 'jshint', '/wp-includes/js/codemirror/fakejshint.js', array( 'esprima' ), '2.9.5' );
+ 	$scripts->add( 'jsonlint', '/wp-includes/js/codemirror/jsonlint.js', array(), '1.6.2' );
+ 	$scripts->add( 'htmlhint', '/wp-includes/js/codemirror/htmlhint.js', array(), '0.9.14-xwp' );
  	$scripts->add( 'htmlhint-kses', '/wp-includes/js/codemirror/htmlhint-kses.js', array( 'htmlhint' ) );

wordpress-5.1-systemlibs.patch

@@ -0,0 +1,21 @@
+diff -up wordpress/wp-admin/includes/media.php.orig wordpress/wp-admin/includes/media.php
+--- wordpress/wp-admin/includes/media.php.orig	2019-02-21 15:01:56.055165397 +0100
++++ wordpress/wp-admin/includes/media.php	2019-02-21 15:02:41.288395787 +0100
+@@ -3261,7 +3261,7 @@ function wp_read_video_metadata( $file )
+ 	}
+ 
+ 	if ( ! class_exists( 'getID3', false ) ) {
+-		require( ABSPATH . WPINC . '/ID3/getid3.php' );
++		require( '/usr/share/php/getid3/getid3.php' );
+ 	}
+ 	$id3  = new getID3();
+ 	$data = $id3->analyze( $file );
+@@ -3358,7 +3358,7 @@ function wp_read_audio_metadata( $file )
+ 	}
+ 
+ 	if ( ! class_exists( 'getID3', false ) ) {
+-		require( ABSPATH . WPINC . '/ID3/getid3.php' );
++		require( '/usr/share/php/getid3/getid3.php' );
+ 	}
+ 	$id3  = new getID3();
+ 	$data = $id3->analyze( $file );

wordpress-7.1-noupdate.patch

@@ -1,91 +0,0 @@
-diff -up wordpress/wp-admin/includes/admin-filters.php.orig wordpress/wp-admin/includes/admin-filters.php
---- wordpress/wp-admin/includes/admin-filters.php.orig	2026-03-09 00:49:37.395081000 +0100
-+++ wordpress/wp-admin/includes/admin-filters.php	2026-08-25 07:30:05.010828032 +0200
-@@ -130,7 +130,6 @@ add_action( 'personal_options_update', '
- add_action( 'load-plugins.php', 'wp_plugin_update_rows', 20 ); // After wp_update_plugins() is called.
- add_action( 'load-themes.php', 'wp_theme_update_rows', 20 ); // After wp_update_themes() is called.
- 
--add_action( 'admin_notices', 'update_nag', 3 );
- add_action( 'admin_notices', 'deactivated_plugins_notice', 5 );
- add_action( 'admin_notices', 'paused_plugins_notice', 5 );
- add_action( 'admin_notices', 'paused_themes_notice', 5 );
-diff -up wordpress/wp-admin/includes/class-core-upgrader.php.orig wordpress/wp-admin/includes/class-core-upgrader.php
---- wordpress/wp-admin/includes/class-core-upgrader.php.orig	2026-02-13 19:34:41.944764000 +0100
-+++ wordpress/wp-admin/includes/class-core-upgrader.php	2026-08-25 07:30:05.010951923 +0200
-@@ -277,6 +277,9 @@ class Core_Upgrader extends WP_Upgrader
- 	 * @return bool True if we should update to the offered version, otherwise false.
- 	 */
- 	public static function should_update_to_version( $offered_ver ) {
-+		// RPM: nether allow core update
-+		return false;
-+
- 		require ABSPATH . WPINC . '/version.php'; // $wp_version; // x.y.z
- 
- 		$current_branch = implode( '.', array_slice( preg_split( '/[.-]/', $wp_version ), 0, 2 ) ); // x.y
-diff -up wordpress/wp-admin/includes/class-wp-automatic-updater.php.orig wordpress/wp-admin/includes/class-wp-automatic-updater.php
---- wordpress/wp-admin/includes/class-wp-automatic-updater.php.orig	2026-07-29 10:01:50.858475000 +0200
-+++ wordpress/wp-admin/includes/class-wp-automatic-updater.php	2026-08-25 07:30:05.011078018 +0200
-@@ -41,7 +41,7 @@ class WP_Automatic_Updater {
- 		}
- 
- 		// More fine grained control can be done through the WP_AUTO_UPDATE_CORE constant and filters.
--		$disabled = defined( 'AUTOMATIC_UPDATER_DISABLED' ) && AUTOMATIC_UPDATER_DISABLED;
-+		$disabled = !defined( 'AUTOMATIC_UPDATER_DISABLED' ) || AUTOMATIC_UPDATER_DISABLED;
- 
- 		/**
- 		 * Filters whether to entirely disable background updates.
-diff -up wordpress/wp-admin/includes/file.php.orig wordpress/wp-admin/includes/file.php
---- wordpress/wp-admin/includes/file.php.orig	2026-07-29 10:01:50.858475000 +0200
-+++ wordpress/wp-admin/includes/file.php	2026-08-25 07:30:05.011274367 +0200
-@@ -2270,7 +2270,7 @@ function WP_Filesystem( $args = false, $
-  */
- function get_filesystem_method( $args = array(), $context = '', $allow_relaxed_file_ownership = false ) {
- 	// Please ensure that this is either 'direct', 'ssh2', 'ftpext', or 'ftpsockets'.
--	$method = defined( 'FS_METHOD' ) ? FS_METHOD : false;
-+	$method = defined( 'FS_METHOD' ) ? FS_METHOD : 'direct';
- 
- 	if ( ! $context ) {
- 		$context = WP_CONTENT_DIR;
-diff -up wordpress/wp-admin/includes/update.php.orig wordpress/wp-admin/includes/update.php
---- wordpress/wp-admin/includes/update.php.orig	2026-07-30 16:55:49.613388000 +0200
-+++ wordpress/wp-admin/includes/update.php	2026-08-25 07:31:37.114050011 +0200
-@@ -382,12 +382,7 @@ function update_right_now_message() {
- 		$cur = get_preferred_from_update_core();
- 
- 		if ( isset( $cur->response ) && 'upgrade' === $cur->response ) {
--			$msg .= sprintf(
--				'<a href="%s" class="button" aria-describedby="wp-version">%s</a>',
--				network_admin_url( 'update-core.php' ),
--				/* translators: %s: WordPress version number, or 'Latest' string. */
--				sprintf( __( 'Update to %s' ), $cur->current ? $cur->current : __( 'Latest' ) )
--			);
-+			$msg .= '';
- 		}
- 	}
- 
-diff -up wordpress/wp-includes/load.php.orig wordpress/wp-includes/load.php
---- wordpress/wp-includes/load.php.orig	2026-08-07 21:13:51.810460000 +0200
-+++ wordpress/wp-includes/load.php	2026-08-25 07:30:05.011640399 +0200
-@@ -1835,7 +1835,7 @@ function wp_is_file_mod_allowed( $contex
- 	 * @param bool   $file_mod_allowed Whether file modifications are allowed.
- 	 * @param string $context          The usage context.
- 	 */
--	return apply_filters( 'file_mod_allowed', ! defined( 'DISALLOW_FILE_MODS' ) || ! DISALLOW_FILE_MODS, $context );
-+	return apply_filters( 'file_mod_allowed', defined( 'DISALLOW_FILE_MODS' ) && ! DISALLOW_FILE_MODS, $context );
- }
- 
- /**
-diff -up wordpress/wp-includes/update.php.orig wordpress/wp-includes/update.php
---- wordpress/wp-includes/update.php.orig	2026-07-06 23:09:52.376708000 +0200
-+++ wordpress/wp-includes/update.php	2026-08-25 07:30:05.011769619 +0200
-@@ -1087,10 +1087,6 @@ function _maybe_update_themes() {
-  * @since 3.1.0
-  */
- function wp_schedule_update_checks() {
--	if ( ! wp_next_scheduled( 'wp_version_check' ) && ! wp_installing() ) {
--		wp_schedule_event( time(), 'twicedaily', 'wp_version_check' );
--	}
--
- 	if ( ! wp_next_scheduled( 'wp_update_plugins' ) && ! wp_installing() ) {
- 		wp_schedule_event( time(), 'twicedaily', 'wp_update_plugins' );
- 	}

wordpress-debian_patches_hello.patch

@@ -1,17 +1,16 @@
-diff -up wordpress/wp-content/plugins/hello.php.dolly wordpress/wp-content/plugins/hello.php
---- wordpress/wp-content/plugins/hello.php.dolly	2025-04-16 08:21:31.710644174 +0200
-+++ wordpress/wp-content/plugins/hello.php	2025-04-16 08:23:15.011000365 +0200
-@@ -6,7 +6,7 @@
+diff -up ./wp-content/plugins/hello.php.dolly ./wp-content/plugins/hello.php
+--- ./wp-content/plugins/hello.php.dolly	2018-11-16 00:38:48.000000000 +0100
++++ ./wp-content/plugins/hello.php	2018-12-12 13:54:41.867980830 +0100
+@@ -6,41 +6,26 @@
  /*
  Plugin Name: Hello Dolly
  Plugin URI: http://wordpress.org/plugins/hello-dolly/
 -Description: This is not just a plugin, it symbolizes the hope and enthusiasm of an entire generation summed up in two words sung most famously by Louis Armstrong: Hello, Dolly. When activated you will randomly see a lyric from <cite>Hello, Dolly</cite> in the upper right of your admin screen on every page.
 +Description: This is not just a plugin, it symbolizes the hope and enthusiasm of an entire generation summed up in two words sung most famously by Richard M. Stallman: Free Software. When activated you will randomly see a lyric from the <cite>Free Software Song</cite> in the upper right of your admin screen on every page.
  Author: Matt Mullenweg
- Version: 1.7.2
+ Version: 1.7.1
  Author URI: http://ma.tt/
-@@ -18,34 +18,19 @@ if ( ! defined( 'ABSPATH' ) ) {
- }
+ */
  
  function hello_dolly_get_lyric() {
 -	/** These are the lyrics to Hello Dolly */
@@ -26,7 +25,7 @@ diff -up wordpress/wp-content/plugins/hello.php.dolly wordpress/wp-content/plugi
 -While the band's playin'
 -One of our old favorite songs from way back when
 -So, take her wrap, fellas
--Dolly, never go away again
+-Dolly, never go away again 
 -Hello, Dolly
 -Well, hello, Dolly
 -It's so nice to have you back where you belong
@@ -56,5 +55,5 @@ diff -up wordpress/wp-content/plugins/hello.php.dolly wordpress/wp-content/plugi
 +Join us now and share the software;
 +You'll be free, hackers, you'll be free.";
  
- 	// Here we split it into lines.
+ 	// Here we split it into lines
  	$lyrics = explode( "\n", $lyrics );

wordpress-httpd-conf

@@ -5,19 +5,31 @@ Alias /wordpress /usr/share/wordpress
 
 <Directory /usr/share/wordpress>
   AllowOverride Options
+  <IfModule mod_authz_core.c>
+    # Apache 2.4
     Require local
+  </IfModule>
+  <IfModule !mod_authz_core.c>
+    # Apache 2.2
+    Order Deny,Allow
+    Deny from All
+    Allow from 127.0.0.1
+    Allow from ::1
+ </IfModule>
 </Directory>
 
 <Directory /usr/share/wordpress/wp-content/uploads>
   # Deny access to any php file in the uploads directory
-  <FilesMatch "\.(php|phar)$">
-    Require all denied
+  <FilesMatch "\.(php)$">
+    Order Deny,Allow
+    Deny from all
   </FilesMatch>
 </Directory>
 
 <Directory /usr/share/wordpress/wp-content/plugins/akismet>
   # Deny access to any php file in the akismet directory
   <FilesMatch "\.(php|txt)$">
-    Require all denied
+    Order Deny,Allow
+    Deny from all
   </FilesMatch>
 </Directory>

wordpress-move-wp-content.patch

@@ -0,0 +1,30 @@
+diff -up wordpress/wp-includes/default-constants.php.rhbz522897 wordpress/wp-includes/default-constants.php
+--- wordpress/wp-includes/default-constants.php.rhbz522897	2010-05-26 04:42:15.000000000 +0200
++++ wordpress/wp-includes/default-constants.php	2011-06-02 12:29:57.919714584 +0200
+@@ -39,7 +39,7 @@ function wp_initial_constants( ) {
+ 		@ini_set('memory_limit', WP_MEMORY_LIMIT);
+ 
+ 	if ( !defined('WP_CONTENT_DIR') )
+-		define( 'WP_CONTENT_DIR', ABSPATH . 'wp-content' ); // no trailing slash, full paths only - WP_CONTENT_URL is defined further down
++		define( 'WP_CONTENT_DIR', '/var/www/wordpress/wp-content' ); // no trailing slash, full paths only - WP_CONTENT_URL is defined further down
+ 
+ 	// Add define('WP_DEBUG', true); to wp-config.php to enable display of notices during development.
+ 	if ( !defined('WP_DEBUG') )
+@@ -75,7 +75,7 @@ function wp_initial_constants( ) {
+  */
+ function wp_plugin_directory_constants( ) {
+ 	if ( !defined('WP_CONTENT_URL') )
+-		define( 'WP_CONTENT_URL', get_option('siteurl') . '/wp-content'); // full url - WP_CONTENT_DIR is defined further up
++		define( 'WP_CONTENT_URL', get_option('siteurl')); // full url - WP_CONTENT_DIR is defined further up
+ 
+ 	/**
+ 	 * Allows for the plugins directory to be moved from the default location.
+@@ -100,7 +100,7 @@ function wp_plugin_directory_constants( 
+ 	 * @deprecated
+ 	 */
+ 	if ( !defined('PLUGINDIR') )
+-		define( 'PLUGINDIR', 'wp-content/plugins' ); // Relative to ABSPATH.  For back compat.
++		define( 'PLUGINDIR', WP_CONTENT_DIR . 'plugins' ); // Relative to ABSPATH.  For back compat.
+ 
+ 	/**
+ 	 * Allows for the mu-plugins directory to be moved from the default location.

wordpress.spec

@@ -5,24 +5,23 @@
 #
 # Please preserve changelog entries
 #
+%{!?_pkgdocdir: %global _pkgdocdir %{_docdir}/%{name}-%{version}}
 %global wp_content %{_datadir}/wordpress/wp-content
 
-%global upstream_version 7.1
-#global upstream_prever  RC5
-#global upstream_lower   rc5
+%if 0%{?fedora} >= 21 || 0%{?rhel} >= 8
+%global with_nginx 1
+%else
+%global with_nginx 0
+%endif
 
 Summary:    Blog tool and publishing platform
-URL:        https://wordpress.org/
+URL:        http://www.wordpress.org
 Name:       wordpress
-Version:    %{upstream_version}%{?upstream_prever:~%upstream_lower}
+Version:    5.1.18
 Release:    1%{?dist}
-# Wordpress     is GPL-2.0-or-later
-# php-simplepie is BSD-3-Clause
-# php-getid3    is LGPL-3.0-or-later (or some others)
-# php-mailer    is LGPL-2.1-only
-License:    GPL-2.0-or-later AND BSD-3-Clause AND LGPL-3.0-or-later AND LGPL-2.1-only
+License:    GPLv2
 
-Source0:    https://wordpress.org/%{name}-%{upstream_version}%{?upstream_prever:-%{upstream_prever}}.tar.gz
+Source0:    https://wordpress.org/%{name}-%{version}.tar.gz
 Source1:    wordpress-httpd-conf
 Source2:    README.fedora.wordpress
 Source3:    README.fedora.wordpress-mu
@@ -32,75 +31,83 @@ Source5:    wordpress-minify.php
 
 # Patch out copyrighted text of Hello, Dolly
 # (and replace it with Free Software Song)
-Patch0: wordpress-6.8-hello.patch
+Patch0: wordpress-debian_patches_hello.patch
+# Move wp-content to /var/www/wordpress/
+# This patch doesn’t work well, see bugzilla.redhat.com/522897
+Patch1: wordpress-move-wp-content.patch
+# Drop swfupload: not built from source, not reasonably possible to do
+Patch2: wordpress-5.1-no_swfupload.patch
 # Adjust tinymce's media plugin not to use its SWF plugin. This changes
 # 'p.getParam("flash_video_player_url",u.convertUrl(u.url+"/moxieplayer.swf"))'
 # to 'false'
 Patch3: wordpress-5.1-tinymce_noflash.patch
 # We drop the SWF files from mediaelement
-Patch4: wordpress-5.6-mediaelement_no_swf.patch
+Patch4: wordpress-4.9-mediaelement_no_swf.patch
 # RPM configuration:
 # Path to installation
 # Disable auto-updater
-Patch5: wordpress-5.4-config.patch
+Patch5: wordpress-5.1-config.patch
 # RPM are readonly
 # disable version check and updated
 # change DISALLOW_FILE_MODS default value to true
 # ignore WP_AUTO_UPDATE_CORE (always false)
-Patch6: wordpress-7.1-noupdate.patch
+Patch6: wordpress-5.1-noupdate.patch
+# Use system libraries
+Patch7: wordpress-5.1-systemlibs.patch
 # Debian patch for jshint
-Patch8: wordpress-7.1-remove-jshint-refs.patch
+Patch8: wordpress-5.1-remove-jshint-refs.patch
 
 
 BuildArch: noarch
 BuildRequires: php-cli
 BuildRequires: php-patchwork-jsqueeze
-BuildRequires: php(language) >= 7.2
 
+%if %{with_nginx}
 Requires: webserver
 Requires: php(httpd)
 Suggests: httpd
 # For directory ownership
 Requires: httpd-filesystem
 Requires: nginx-filesystem
-Requires: php(language) >= 7.2
-Requires: php-sodium
+
+%else
+Requires: php >= 5.2.4
+%endif
+Requires: php-simplepie >= 1.3.1
+Requires: php-getid3
 Requires: php-ctype
 Requires: php-filter
 Requires: php-mysqli
 
 # From phpcompatinfo report for version 4.5.3
 Requires: php-curl
+Requires: php-date
 Requires: php-dom
 Requires: php-exif
 Requires: php-fileinfo
 Requires: php-gd
 Requires: php-gettext
+Requires: php-hash
 Requires: php-iconv
 Requires: php-intl
 Requires: php-json
 Requires: php-libxml
 Requires: php-mbstring
 Requires: php-openssl
+Requires: php-pcre
 Requires: php-simplexml
+Requires: php-spl
 Requires: php-xml
 Requires: php-xmlreader
 Requires: php-zip
 Requires: php-zlib
+# Unbundled libraries
+Requires: php-PHPMailer
 Requires: httpd
-# Unbundled
-Requires: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
-# Bundled
-# grep "SIMPLEPIE_VERSION'" wordpress/wp-includes/class-simplepie.php
-Provides: bundled(php-simplepie) = 1.9.0
-# grep ' VERSION '  wordpress/wp-includes/ID3/getid3.php
-Provides: bundled(php-getid3) = 1.9.25
-# grep ' VERSION ' wordpress/wp-includes/PHPMailer/PHPMailer.php
-Provides: bundled(php-phpmailer)  = 7.1.1
+Requires: ca-certificates
 Provides: wordpress-mu = %{version}-%{release}
 Obsoletes: wordpress-mu < 2.9.3
 
-
 %description
 Wordpress is an online publishing / weblog package that makes it very easy,
 almost trivial, to get information out to people on the web.
@@ -117,15 +124,14 @@ rm -rf wp-includes/js/swfupload
 # remove .htaccess, protected by httpd config file
 rm wp-content/plugins/akismet/.htaccess
 
-# only for PHP < 7.0 without random_int
-rm -rf wp-includes/random_compat
-# only for PHP < 7.2 without sodium_crypto_box
-rm -rf wp-includes/sodium_compat
-
 %patch -P0 -p1 -b .dolly
+#patch1 -p1 -b .rhbz522897
+%patch -P2 -p1
 %patch -P3 -p1
 # Adjust mediaelement not to use its SWF
 %patch -P4 -p1
+#rm  wp-includes/js/mediaelement/media*swf
+%patch -P7 -p1
 %patch -P8 -p1
 
 # We patch .js files, so minify them
@@ -160,17 +166,12 @@ fi
 
 # Create RPM configuration
 sed -e 's/\r//' wp-config-sample.php >wp-config.php
-%patch -P5 -p1
-%patch -P6 -p1
+%patch5 -p1
+%patch6 -p1
 
 # fix file encoding
 sed -i -e 's/\r//' license.txt
 
-: Bundled library versions
-grep ' VERSION '  wp-includes/SimplePie/src/SimplePie.php
-grep ' VERSION '  wp-includes/ID3/getid3.php
-grep ' VERSION '  wp-includes/PHPMailer/PHPMailer.php
-
 
 %build
 
@@ -178,7 +179,9 @@ grep ' VERSION '  wp-includes/PHPMailer/PHPMailer.php
 # Apache configuration
 install -m 0644 -D -p %{SOURCE1} ${RPM_BUILD_ROOT}%{_sysconfdir}/httpd/conf.d/wordpress.conf
 
+%if %{with_nginx}
 install -m 0644 -D -p %{SOURCE4} ${RPM_BUILD_ROOT}%{_sysconfdir}/nginx/default.d/wordpress.conf
+%endif
 
 # Application
 mkdir -p ${RPM_BUILD_ROOT}%{_datadir}/wordpress
@@ -199,28 +202,51 @@ find ${RPM_BUILD_ROOT} -type f -empty -exec rm -vf {} \;
 # These are docs, remove them from here, docify them later
 rm -f ${RPM_BUILD_ROOT}%{_datadir}/wordpress/{license.txt,readme.html}
 
+# Remove bundled php-simplepie and link to system copy
+rm    ${RPM_BUILD_ROOT}%{_datadir}/wordpress/wp-includes/class-simplepie.php
+rm -r ${RPM_BUILD_ROOT}%{_datadir}/wordpress/wp-includes/SimplePie
+ln -s /usr/share/php/php-simplepie/autoloader.php \
+       ${RPM_BUILD_ROOT}%{_datadir}/wordpress/wp-includes/class-simplepie.php
+
+# Remove bundled PHPMailer and link to system one
+# Note POP3 is not from PHPMailer but from SquirrelMail
+for fic in phpmailer smtp; do
+  rm     ${RPM_BUILD_ROOT}%{_datadir}/wordpress/wp-includes/class-$fic.php
+  ln -sf /usr/share/php/PHPMailer/class.$fic.php \
+         ${RPM_BUILD_ROOT}%{_datadir}/wordpress/wp-includes/class-$fic.php
+done
+
+# Remove bundled php-getid3
+rm -r ${RPM_BUILD_ROOT}%{_datadir}/wordpress/wp-includes/ID3
+
 # Remove bundled ca-bundle.crt
 rm ${RPM_BUILD_ROOT}%{_datadir}/wordpress/wp-includes/certificates/ca-bundle.crt
-ln -s %{_sysconfdir}/pki/ca-trust/extracted/pem/tls-ca-bundle.pem \
+ln -s %{_sysconfdir}/pki/tls/certs/ca-bundle.crt \
    ${RPM_BUILD_ROOT}%{_datadir}/wordpress/wp-includes/certificates/ca-bundle.crt
 
 # Remove backup copies of patches
 find ${RPM_BUILD_ROOT} \( -name \*.dolly -o -name \*.rhbz522897 -o -name \*.orig \) \
     -print -delete
 
+## Move wp-content directory to /var/www location
+#mkdir -p ${RPM_BUILD_ROOT}%%{_localstatedir}/www/wordpress
+#mv -v ${RPM_BUILD_ROOT}%%{wp_content}/ \
+#  ${RPM_BUILD_ROOT}%%{_localstatedir}/www/wordpress
 
-%pretrans -p <lua>
--- Remove link to system library
-path = "%{_datadir}/wordpress/wp-includes/PHPMailer"
-st = posix.stat(path)
-if st and st.type == "link" then
-  os.remove(path)
-end
+#%%post
+#if [ $1 -eq 2 ] ; then
+## In case user has old wp-content from previous version, move it to
+## the new location.
+#mv -uf %%{wp_content}/* %%{_localstatedir}/www/wordpress/
+#/sbin/restorecon -R %%{_localstatedir}/www/wordpress/
+#fi
 
 
 %files
 %config(noreplace) %{_sysconfdir}/httpd/conf.d/wordpress.conf
+%if %{with_nginx}
 %config(noreplace) %{_sysconfdir}/nginx/default.d/wordpress.conf
+%endif
 %dir %{_datadir}/wordpress
 %{_datadir}/wordpress/wp-admin
 %{_datadir}/wordpress/wp-includes
@@ -245,290 +271,53 @@ end
 
 
 %changelog
-* Tue Aug 25 2026 Remi Collet <remi@remirepo.net> -7.1-1
-- WordPress 7.1 “Mary Lou”
+* Thu Feb 01 2024 Remi Collet <remi@remirepo.net> - 5.1.18-1
+- WordPress 5.1.18 Security Release
 
-* Thu Aug 13 2026 Remi Collet <remi@remirepo.net> -7.0.4-1
-- WordPress 7.0.4 Release
+* Mon Oct 16 2023 Remi Collet <remi@remirepo.net> - 5.1.17-1
+- WordPress 5.1.17 Security Release
 
-* Fri Aug  7 2026 Remi Collet <remi@remirepo.net> -7.0.3-1
-- WordPress 7.0.3 Release
+* Wed May 17 2023 Remi Collet <remi@remirepo.net> - 5.1.16-1
+- WordPress 5.1.16 Security Release
 
-* Tue Jul 21 2026 Remi Collet <remi@remirepo.net> -7.0.2-1
-- WordPress 7.0.2 Release
+* Tue Oct 18 2022 Remi Collet <remi@remirepo.net> - 5.1.15-1
+- WordPress 5.1.15 Security Release
 
-* Fri Jul 17 2026 Fedora Release Engineering <releng@fedoraproject.org> - 7.0.1-2
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild
+* Fri Mar 11 2022 Remi Collet <remi@remirepo.net> - 5.1.13-1
+- WordPress 5.1.13 Security Release
 
-* Fri Jul 10 2026 Remi Collet <remi@remirepo.net> -7.0.1-1
-- WordPress 7.0.1 Maintenance Release
+* Fri Jan  7 2022 Remi Collet <remi@remirepo.net> - 5.1.12-1
+- WordPress 5.1.12 Security Release
 
-* Tue May 26 2026 Remi Collet <remi@remirepo.net> -7.0-1
-- WordPress 7.0 “Armstrong”
+* Thu Nov 11 2021 Remi Collet <remi@remirepo.net> - 5.1.11-1
+- WordPress 5.1.11 Security Release
 
-* Thu Mar 12 2026 Remi Collet <remi@remirepo.net> - 6.9.4-1
-- WordPress 6.9.4 Release
+* Mon May 17 2021 Remi Collet <remi@remirepo.net> - 5.1.10-1
+- WordPress 5.1.10 Security Release
 
-* Wed Mar 11 2026 Remi Collet <remi@remirepo.net> - 6.9.3-1
-- WordPress 6.9.3 Release
+* Thu Apr 15 2021 Remi Collet <remi@remirepo.net> - 5.1.9-1
+- WordPress 5.1.9 Security Release
 
-* Wed Feb  4 2026 Remi Collet <remi@remirepo.net> - 6.9.1-1
-- WordPress 6.9.1 Maintenance Release
+* Mon Nov  2 2020 Remi Collet <remi@remirepo.net> - 5.1.8-1
+- WordPress 5.1.8 Maintenance Release
 
-* Sat Jan 17 2026 Fedora Release Engineering <releng@fedoraproject.org> - 6.9-2
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
+* Fri Oct 30 2020 Remi Collet <remi@remirepo.net> - 5.1.7-1
+- WordPress 5.1.7 Security Release
 
-* Wed Dec  3 2025 Remi Collet <remi@remirepo.net> - 6.9-1
-- WordPress 6.9 “Gene”
+* Thu Jun 11 2020 Remi Collet <remi@remirepo.net> - 5.1.6-1
+- WordPress 5.1.6 Security Release
 
-* Wed Oct  1 2025 Remi Collet <remi@remirepo.net> - 6.8.3-1
-- WordPress 6.8.3 Security Release
+* Thu Apr 30 2020 Remi Collet <remi@remirepo.net> - 5.1.5-1
+- WordPress 5.1.5 Security Release
 
-* Mon Jul 28 2025 Remi Collet <remi@remirepo.net> - 6.8.2-3
-- fix system certificates path
+* Fri Dec 13 2019 Remi Collet <remi@remirepo.net> - 5.1.4-1
+- WordPress 5.1.4 Security Release
 
-* Fri Jul 25 2025 Fedora Release Engineering <releng@fedoraproject.org> - 6.8.2-2
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
+* Tue Oct 15 2019 Remi Collet <remi@remirepo.net> - 5.1.3-1
+- WordPress 5.1.3 Security Release
 
-* Tue Jul 22 2025 Remi Collet <remi@remirepo.net> - 6.8.2-1
-- WordPress 6.8.2 Maintenance Release
-
-* Mon May  5 2025 Remi Collet <remi@remirepo.net> - 6.8.1-1
-- WordPress 6.8.1 Maintenance Release
-
-* Wed Apr 16 2025 Remi Collet <remi@remirepo.net> - 6.8-1
-- WordPress 6.8 “Cecil”
-
-* Wed Feb 12 2025 Remi Collet <remi@remirepo.net> - 6.7.2-1
-- WordPress 6.7.2 Maintenance Release
-
-* Sun Jan 19 2025 Fedora Release Engineering <releng@fedoraproject.org> - 6.7.1-2
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
-
-* Fri Nov 22 2024 Remi Collet <remi@remirepo.net> - 6.7.1-1
-- WordPress 6.7.1 Maintenance Release
-
-* Wed Nov 13 2024 Remi Collet <remi@remirepo.net> - 6.7-1
-- WordPress 6.7 “Rollins”
-
-* Wed Sep 11 2024 Remi Collet <remi@remirepo.net> - 6.6.2-1
-- WordPress 6.6.2 Maintenance Release
-
-* Wed Jul 24 2024 Remi Collet <remi@remirepo.net> - 6.6.1-1
-- WordPress 6.6.1 Maintenance Release
-
-* Sat Jul 20 2024 Fedora Release Engineering <releng@fedoraproject.org> - 6.6-2
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
-
-* Wed Jul 17 2024 Remi Collet <remi@remirepo.net> - 6.6-1
-- WordPress 6.6 “Dorsey”
-
-* Tue Jul  2 2024 Remi Collet <remi@remirepo.net> - 6.5.5-1
-- WordPress 6.4.2 Maintenance & Security Release
-
-* Thu Jun  6 2024 Remi Collet <remi@remirepo.net> - 6.5.4-1
-- WordPress 6.5.4 Maintenance Release
-
-* Mon May 13 2024 Remi Collet <remi@remirepo.net> - 6.5.3-1
-- WordPress 6.5.3 Maintenance Release
-
-* Wed Apr 10 2024 Remi Collet <remi@remirepo.net> - 6.5.2-1
-- WordPress 6.5.2 Maintenance and Security Release
-
-* Wed Apr  3 2024 Remi Collet <remi@remirepo.net> - 6.5-1
-- WordPress 6.5 “Regina”
-
-* Thu Feb  1 2024 Remi Collet <remi@remirepo.net> - 6.4.3-1
-- WordPress 6.4.3 Maintenance & Security Release
-
-* Sat Jan 27 2024 Fedora Release Engineering <releng@fedoraproject.org> - 6.4.2-2
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
-
-* Thu Dec  7 2023 Remi Collet <remi@remirepo.net> - 6.4.2-1
-- WordPress 6.4.2 Maintenance & Security Release
-
-* Thu Nov  9 2023 Remi Collet <remi@remirepo.net> - 6.4.1-1
-- WordPress 6.4.1 Maintenance Release
-
-* Wed Nov  8 2023 Remi Collet <remi@remirepo.net> - 6.4-1
-- WordPress 6.4 “Shirley”
-
-* Mon Oct 16 2023 Remi Collet <remi@remirepo.net> - 6.3.2-1
-- WordPress 6.3.2 – Maintenance and Security release
-
-* Thu Aug 31 2023 Remi Collet <remi@remirepo.net> - 6.3.1-1
-* WordPress 6.3.1 Maintenance Release
-
-* Sun Aug 20 2023 Remi Collet <remi@remirepo.net> - 6.3-1
-- WordPress 6.3 “Lionel”
-
-* Sat Jul 22 2023 Fedora Release Engineering <releng@fedoraproject.org> - 6.2.2-2
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
-
-* Sun May 21 2023 Remi Collet <remi@remirepo.net> - 6.2.2-1
-- WordPress 6.2.2 Security Release
-
-* Wed May 17 2023 Remi Collet <remi@remirepo.net> - 6.2.1-1
-- WordPress 6.2.1 Maintenance & Security Release
-
-* Thu Mar 30 2023 Remi Collet <remi@remirepo.net> - 6.2-1
-- WordPress 6.2 “Dolphy”
-- use SPDX license IDs
-
-* Sat Jan 21 2023 Fedora Release Engineering <releng@fedoraproject.org> - 6.1.1-2
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
-
-* Wed Nov 16 2022 Remi Collet <remi@remirepo.net> - 6.1.1-1
-- WordPress 6.1.1 Maintenance Release
-
-* Wed Nov  2 2022 Remi Collet <remi@remirepo.net> - 6.1-1
-- WordPress 6.1 “Misha”
-
-* Tue Oct 18 2022 Remi Collet <remi@remirepo.net> - 6.0.3-1
-- WordPress 6.0.3 Security Release
-
-* Thu Sep  8 2022 Remi Collet <remi@remirepo.net> - 6.0.2-1
-- WordPress 6.0.2 Security and Maintenance Release
-
-* Sat Jul 23 2022 Fedora Release Engineering <releng@fedoraproject.org> - 6.0.1-2
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
-
-* Wed Jul 13 2022 Remi Collet <remi@remirepo.net> - 6.0.1-1
-- WordPress 6.0.1 Maintenance Release
-
-* Wed May 25 2022 Remi Collet <remi@remirepo.net> - 6.0-1
-- WordPress 6.0 “Arturo”
-
-* Wed Apr  6 2022 Remi Collet <remi@remirepo.net> - 5.9.3-1
-- WordPress 5.9.3 Maintenance Release
-
-* Fri Mar 11 2022 Remi Collet <remi@remirepo.net> - 5.9.2-1
-- WordPress 5.9.2 Security & Maintenance Release
-
-* Wed Feb 23 2022 Remi Collet <remi@remirepo.net> - 5.9.1-1
-- WordPress 5.9.1 Maintenance Release
-
-* Wed Jan 26 2022 Remi Collet <remi@remirepo.net> - 5.9-1
-- WordPress 5.9 Josephine
-
-* Sat Jan 22 2022 Fedora Release Engineering <releng@fedoraproject.org> - 5.8.3-2
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
-
-* Fri Jan  7 2022 Remi Collet <remi@remirepo.net> - 5.8.3-1
-- WordPress 5.8.3 Security Release
-
-* Tue Dec  7 2021 Remi Collet <remi@remirepo.net> - 5.8.2-2
-- use bundled libraries
-
-* Thu Nov 11 2021 Remi Collet <remi@remirepo.net> - 5.8.2-1
-- WordPress 5.8.2 Security and Maintenance Release
-
-* Thu Sep  9 2021 Remi Collet <remi@remirepo.net> - 5.8.1-1
-- WordPress 5.8.1 Security and Maintenance Release
-
-* Fri Jul 23 2021 Fedora Release Engineering <releng@fedoraproject.org> - 5.8-2
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
-
-* Wed Jul 21 2021 Remi Collet <remi@remirepo.net> - 5.8-1
-- WordPress 5.8 Tatum
-
-* Thu May 13 2021 Remi Collet <remi@remirepo.net> - 5.7.2-1
-- WordPress 5.7.2 Security Release
-
-* Thu Apr 15 2021 Remi Collet <remi@remirepo.net> - 5.7.1-1
-- WordPress 5.7.1 Security and Maintenance Release
-
-* Wed Mar 10 2021 Remi Collet <remi@remirepo.net> - 5.7-1
-- WordPress 5.7 “Esperanza”
-
-* Tue Feb 23 2021 Remi Collet <remi@remirepo.net> - 5.6.2-1
-- WordPress 5.6.2 Maintenance Release
-
-* Fri Feb  5 2021 Remi Collet <remi@remirepo.net> - 5.6.1-1
-- WordPress 5.6.1 Maintenance Release
-
-* Wed Jan 27 2021 Fedora Release Engineering <releng@fedoraproject.org> - 5.6-2
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
-
-* Wed Dec  9 2020 Remi Collet <remi@remirepo.net> - 5.6-1
-- WordPress 5.6 “Simone”
-
-* Sat Oct 31 2020 Remi Collet <remi@remirepo.net> - 5.5.3-1
-- WordPress 5.5.3 Maintenance Release
-
-* Fri Oct 30 2020 Remi Collet <remi@remirepo.net> - 5.5.2-1
-- WordPress 5.5.2 Security and Maintenance Release
-
-* Tue Oct 20 2020 Remi Collet <remi@remirepo.net> - 5.5.1-2
-- Change FS_METHOD default to 'direct' to allow enabling FILE_MODS #1889644
-
-* Wed Sep  2 2020 Remi Collet <remi@remirepo.net> - 5.5.1-1
-- WordPress 5.5.1 Maintenance Release
-
-* Wed Aug 12 2020 Remi Collet <remi@remirepo.net> - 5.5-1
-- WordPress 5.5 “Eckstine”
-- requires php-phpmailer6 instead of old php-PHPMailer
-
-* Wed Jul 29 2020 Fedora Release Engineering <releng@fedoraproject.org> - 5.4.2-2
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
-
-* Thu Jun 11 2020 Remi Collet <remi@remirepo.net> - 5.4.2-1
-- WordPress 5.4.2 Security and Maintenance Release
-
-* Thu Apr 30 2020 Remi Collet <remi@remirepo.net> - 5.4.1-1
-- WordPress 5.4.1 Security and Maintenance Release
-
-* Wed Apr  1 2020 Remi Collet <remi@remirepo.net> - 5.4-1
-- WordPress 5.4 “Adderley”
-
-* Mon Mar 30 2020 Remi Collet <remi@remirepo.net> - 5.4~rc5-1
-- WordPress 5.4 RC 5
-
-* Wed Mar 25 2020 Remi Collet <remi@remirepo.net> - 5.4~rc4-1
-- WordPress 5.4 RC 4
-
-* Fri Jan 31 2020 Fedora Release Engineering <releng@fedoraproject.org> - 5.3.2-2
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
-
-* Thu Dec 19 2019 Remi Collet <remi@remirepo.net> - 5.3.2-1
-- WordPress 5.3.2 Maintenance Release
-
-* Fri Dec 13 2019 Remi Collet <remi@remirepo.net> - 5.3.1-1
-- WordPress 5.3.1 Security and Maintenance Release
-
-* Wed Nov 13 2019 Remi Collet <remi@remirepo.net> - 5.3-1
-- WordPress 5.3 “Kirk”
-
-* Tue Oct 15 2019 Remi Collet <remi@remirepo.net> - 5.2.4-1
-- WordPress 5.2.4 Security Release
-
-* Thu Sep  5 2019 Remi Collet <remi@remirepo.net> - 5.2.3-1
-- WordPress 5.2.3 Security and Maintenance Release
-
-* Sat Jul 27 2019 Fedora Release Engineering <releng@fedoraproject.org> - 5.2.2-2
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
-
-* Wed Jun 19 2019 Remi Collet <remi@remirepo.net> - 5.2.2-1
-- WordPress 5.2.2 Maintenance Release
-
-* Wed May 22 2019 Remi Collet <remi@remirepo.net> - 5.2.1-1
-- WordPress 5.2.1 Maintenance Release
-
-* Wed May  8 2019 Remi Collet <remi@remirepo.net> - 5.2.0-1
-- WordPress 5.2 “Jaco”
-
-* Fri Apr 26 2019 Remi Collet <remi@remirepo.net> - 5.2.0~rc1-1
-- WordPress 5.2 RC 1
-
-* Wed Apr 17 2019 Remi Collet <remi@remirepo.net> - 5.2.0~beta3-1
-- WordPress 5.2 Beta 3
-
-* Tue Apr  9 2019 Remi Collet <remi@remirepo.net> - 5.2.0~beta2-1
-- WordPress 5.2 Beta 2
-
-* Thu Mar 28 2019 Remi Collet <remi@remirepo.net> - 5.2.0~beta1-1
-- WordPress 5.2 Beta 1
-- raise dependency on PHP 7.2
+* Thu Sep  5 2019 Remi Collet <remi@remirepo.net> - 5.1.2-1
+- update to 5.1.2
 
 * Fri Mar 22 2019 Remi Collet <remi@remirepo.net> - 5.1.1-4
 - fix wp-tinymce.js is missing, wp-tinymce.js.gz is empty #1691524
@@ -539,12 +328,6 @@ end
 * Fri Feb 22 2019 Remi Collet <remi@remirepo.net> - 5.1-1
 - WordPress 5.1 “Betty”
 
-* Thu Feb 21 2019 Remi Collet <remi@remirepo.net> - 5.1~RC2-1
-- WordPress 5.1-RC2
-
-* Sun Feb 03 2019 Fedora Release Engineering <releng@fedoraproject.org> - 5.0.3-2
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
-
 * Fri Jan 11 2019 Remi Collet <remi@remirepo.net> - 5.0.3-1
 - WordPress 5.0.3 Maintenance Release
 
@@ -560,9 +343,6 @@ end
 * Fri Aug 03 2018 Kevin Fenzi <kevin@scrye.com> - 4.9.8-1
 - Update to 4.9.8. Fixes bug #1611877
 
-* Sat Jul 14 2018 Fedora Release Engineering <releng@fedoraproject.org> - 4.9.7-2
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
-
 * Thu Jul 05 2018 Kevin Fenzi <kevin@scrye.com> - 4.9.7-1
 - Update to 4.9.7 security update. Fixes bug #1598612
 - Fixes CVE-2018-12895 bugs #1595584 and #1595585
@@ -596,27 +376,18 @@ end
 * Thu Aug  3 2017 Remi Collet <remi@remirepo.net> - 4.8.1-1
 - Update to 4.8.1 Maintenance Release.
 
-* Thu Jul 27 2017 Fedora Release Engineering <releng@fedoraproject.org> - 4.8-2
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
-
 * Fri Jun  9 2017 Remi Collet <remi@remirepo.net> - 4.8-1
 - WordPress 4.8 “Evans”
 
 * Wed May 17 2017 Remi Collet <remi@remirepo.net> - 4.7.5-1
 - WordPress 4.7.5 Security and Maintenance Release
 
-* Wed May 10 2017 Remi Collet <remi@remirepo.net> - 4.7.4-2
-- protect .phar from being executed from uploads directory
-
 * Sat Apr 22 2017 Kevin Fenzi <kevin@scrye.com> - 4.7.4-1
 - Update to 4.7.4. Maintenance Release.
 
 * Tue Mar  7 2017 Remi Collet <remi@fedoraproject.org> - 4.7.3-1
 - WordPress 4.7.3 Security and Maintenance Release
 
-* Sat Feb 11 2017 Fedora Release Engineering <releng@fedoraproject.org> - 4.7.2-2
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
-
 * Fri Jan 27 2017 Remi Collet <remi@fedoraproject.org> - 4.7.2-1
 - WordPress 4.7.2 Security Release
 
@@ -633,14 +404,8 @@ end
 - WordPress 4.6 “Pepper”
 - fix directory permissions #1305687
 
-* Mon Jun 27 2016 Remi Collet <remi@fedoraproject.org> - 4.5.3-2
-- add patch to drop ereg dependency, see
-  https://core.trac.wordpress.org/ticket/37194
-
 * Wed Jun 22 2016 Remi Collet <remi@fedoraproject.org> - 4.5.3-1
 - WordPress 4.5.3 Maintenance and Security Release
-
-* Sat May 14 2016 Remi Collet <remi@fedoraproject.org> - 4.5.2-2
 - never bundle ca-bundle.crt (EL-5)
 - provide nginx configuration (fedora)
 - drop mandatory dependency on httpd (suggested) #1336091
@@ -655,9 +420,6 @@ end
 * Wed Apr 13 2016 Remi Collet <remi@fedoraproject.org> - 4.5-1
 - WordPress 4.5 “Coleman”
 
-* Fri Mar 25 2016 Remi Collet <remi@fedoraproject.org> - 4.5-0.1.RC1
-- WordPress 4.5 Release Candidate
-
 * Wed Feb  3 2016 Remi Collet <remi@fedoraproject.org> - 4.4.2-1
 - WordPress 4.4.2 Security and Maintenance Release
 
@@ -679,18 +441,16 @@ end
 * Fri Jul 24 2015 Remi Collet <remi@fedoraproject.org> - 4.2.3-1
 - WordPress 4.2.3 Security and Maintenance Release
 
-* Fri Jun 19 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 4.2.2-2
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
-
 * Thu May  7 2015 Remi Collet <remi@fedoraproject.org> - 4.2.2-1
 - WordPress 4.2.2 Security and Maintenance Release
 
 * Tue Apr 28 2015 Remi Collet <remi@fedoraproject.org> - 4.2.1-1
 - WordPress 4.2.1 Security Release
-
-* Fri Apr 24 2015 Remi Collet <remi@fedoraproject.org> - 4.2-1
 - WordPress 4.2 “Powell”
 
+* Fri Apr 24 2015 Remi Collet <remi@fedoraproject.org> - 4.1.3-1
+- WordPress 4.1.3 Maintenance Release
+
 * Thu Apr 23 2015 Remi Collet <remi@fedoraproject.org> - 4.1.2-1
 - WordPress 4.1.2 Security Release
 
@@ -702,8 +462,6 @@ end
 
 * Fri Nov 21 2014 Remi Collet <remi@fedoraproject.org> - 4.0.1-1
 - WordPress 4.0.1 Security Release
-
-* Tue Sep 30 2014 Remi Collet <remi@fedoraproject.org> - 4.0-3
 - use system php-getid3 when available #1145574
 
 * Mon Sep  8 2014 Remi Collet <remi@fedoraproject.org> - 4.0-1
@@ -717,9 +475,6 @@ end
 - update to 3.9.2 Security Release #1127547
 - config file only readable by apache user (httpd or php-fpm) #1124582
 
-* Sun Jun 08 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.9.1-2
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
-
 * Fri May  9 2014 Remi Collet <remi@fedoraproject.org> - 3.9.1-1
 - update to 3.9.1 Maintenance Release