Files
ports/www/wordpress/Makefile
T
Xin LI 122fc90edc www/wordpress: upgrade to 6.9.4 (security)
Upstream does not offer localized tarballs for 6.9.4, so download the
6.9.1 tarballs and apply files/patch-6.9.1-to-6.9.4 instead.

Security fixes in 6.9.2:
- Blind SSRF
- PoP-chain weakness in HTML API and Block Registry
- Regex DoS in Numeric Character References
- Stored XSS in Nav Menus
- AJAX query-attachments Authorization Bypass
- Stored XSS via data-wp-bind directive
- XSS allowing override of client-side templates in admin area
- PclZip Path Traversal
- Authorization Bypass on Notes feature
- XXE in external getID3 library

Bug fix in 6.9.3:
- Restore compatibility for themes using stringable objects with the
  template_include filter (regression introduced in 6.9.2)

Security fixes in 6.9.4 (incomplete fixes from 6.9.2 re-addressed):
- PclZip Path Traversal
- Authorization Bypass on Notes feature
- XXE in external getID3 library
2026-03-11 20:57:10 -07:00

71 lines
1.8 KiB
Makefile

PORTNAME= wordpress
PORTVERSION= 6.9.4
PORTREVISION?= 0
.ifndef WORDPRESS_LANG
DISTNAME= wordpress-6.9.1
PORTEPOCH= 1
MASTER_SITES= https://wordpress.org/
.else
DISTNAME= wordpress-6.9.1-${WORDPRESS_LANG}
MASTER_SITES?= https://${WORDPRESS_LANG}.wordpress.org/
.endif
CATEGORIES+= www
MAINTAINER= delphij@FreeBSD.org
COMMENT= State-of-the-art semantic personal publishing platform
WWW= ${MASTER_SITES}
LICENSE= GPLv2+
LICENSE_FILE= ${WRKSRC}/license.txt
RUN_DEPENDS= ${PECL_PKGNAMEPREFIX}imagick>=2.2.2:graphics/pecl-imagick@${PHP_FLAVOR}
USES= cpe php:web
.if ${PORTVERSION:N*.*.*}
CPE_VERSION= ${PORTVERSION}.0
.endif
.ifdef WORDPRESS_LANG
PKGNAMESUFFIX= -${WORDPRESS_LANG}
CPE_LANG= ${WORDPRESS_LANG}
.endif
USE_PHP= curl exif fileinfo filter ftp gd mysqli tokenizer xml zip zlib
CONFLICTS_INSTALL= ??-wordpress
NO_ARCH= yes
NO_BUILD= yes
SUB_FILES= pkg-message
WRKSRC= ${WRKDIR}/${PORTNAME}
PLIST= ${WRKDIR}/pkg-plist
PORTDOCS= readme.html
OPTIONS_DEFINE= DOCS
.include <bsd.port.options.mk>
pre-everything::
@${ECHO_CMD} "If you want to upgrade, you must read upgrade document."
@${ECHO_CMD} ""
. if !(defined(PACKAGE_BUILDING) || defined(BATCH))
@sleep 1
. endif
pre-install:
${ECHO_CMD} '@owner www' > ${PLIST}
${ECHO_CMD} '@group www' >> ${PLIST}
cd ${WRKSRC}/ && ${FIND} -s * -type f | ${SED} -e 's|^|%%WWWDIR%%/|' >> ${PLIST}
${ECHO_CMD} '@owner' >> ${PLIST}
${ECHO_CMD} '@group' >> ${PLIST}
if [ ! -f ${WRKSRC}/wp-config-sample.php ]; then ${CP} \
${WRKSRC}/wp-config.php.sample ${WRKSRC}/wp-config.php; fi
do-install:
${INSTALL} -d -m 755 ${STAGEDIR}${WWWDIR}/
${CP} -R ${WRKSRC}/ ${STAGEDIR}${WWWDIR}/
${FIND} ${STAGEDIR}${WWWDIR}/ -type d -exec ${CHMOD} g+w {} \;
do-install-DOCS-on:
${MKDIR} ${STAGEDIR}${DOCSDIR}/
cd ${WRKSRC}/ && ${INSTALL_DATA} ${PORTDOCS} ${STAGEDIR}${DOCSDIR}/
.include <bsd.port.mk>