[Bug 227547] Re: ubuntu wordpress should suppress the "please update" warning
wordpress (2.8.3-1) unstable; urgency=medium * [f625087] Imported Upstream version 2.8.3 (Closes: #533387, #539411) This release fixed several security issue: - Privileges unchecked and multiple information disclosures. (CVE-2009-2334, CVE-2009-2335, CVE-2009-2336) (Closes: #536724) - CVE-2009-2431, CVE-2009-2432: Obtain sensitive information (Closes: #537146) - CVE-2008-6762: Open redirect vulnerability in wp-admin/upgrade.php (Closes: #531736) * [347c164] debian/control: Added Giuseppe Iuculano in Uploaders, added Vcs and DM-Upload-Allowed control field * [92fb4ab] Bump to debhelper 7 compatibility levels * [5b8536e] Refreshing patches * [d999c0e] Added a watch file * [4163c0c] debian/rules: Do not remove the autosave tinymce plugin, there isn't anymore. * [9c4d0e5] debian/get-upstream-i18n: download .xpi files into debian/languages * [76b7c5c] Install language files * [a0bfad2] Move gettext in Build-Depends-Indep * [8b607bf] Use set -e instead of passing -e to the shell on the #! line * [6cbbf36] debian/patches/009CVE2008-6767.dpatch: Only admin can upgrade wordpress. (CVE-2008-6767) (Closes: #531736) * [d6adfbe] Disabled the the "please update" warning, thanks to Hans Spaans and Rolf Leggewie (Closes: #506685) * [15c360c] Updated to standards version 3.8.2 (No changes needed) -- Giuseppe Iuculano Tue, 11 Aug 2009 16:30:35 +0200 ** Tags added: patch ** Changed in: wordpress (Debian) Importance: Unknown => Undecided ** Changed in: wordpress (Debian) Remote watch: Debian Bug tracker #506685 => None ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2008-6762 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2008-6767 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2009-2334 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2009-2335 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2009-2336 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2009-2431 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2009-2432 ** Changed in: wordpress (Debian) Status: New => Fix Released -- ubuntu wordpress should suppress the "please update" warning https://bugs.launchpad.net/bugs/227547 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 227547] Re: ubuntu wordpress should suppress the "please update" warning
** Branch linked: lp:ubuntu/hardy-updates/wordpress ** Branch linked: lp:ubuntu/intrepid-updates/wordpress -- ubuntu wordpress should suppress the "please update" warning https://bugs.launchpad.net/bugs/227547 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 227547] Re: ubuntu wordpress should suppress the "please update" warning
** Branch linked: lp:ubuntu/karmic/wordpress -- ubuntu wordpress should suppress the "please update" warning https://bugs.launchpad.net/bugs/227547 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 227547] Re: ubuntu wordpress should suppress the "please update" warning
** Changed in: wordpress (Debian) Status: Unknown => New -- ubuntu wordpress should suppress the "please update" warning https://bugs.launchpad.net/bugs/227547 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 227547] Re: ubuntu wordpress should suppress the "please update" warning
This bug was fixed in the package wordpress - 2.3.3-1ubuntu1.1 --- wordpress (2.3.3-1ubuntu1.1) hardy-proposed; urgency=low * suppress the "new release available. please update" warning. LP: #227547 -- Rolf LeggewieSun, 23 Nov 2008 20:04:50 +0100 -- ubuntu wordpress should suppress the "please update" warning https://bugs.launchpad.net/bugs/227547 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 227547] Re: ubuntu wordpress should suppress the "please update" warning
This bug was fixed in the package wordpress - 2.5.1-8ubuntu1.1 --- wordpress (2.5.1-8ubuntu1.1) intrepid-proposed; urgency=low * supersede debian/patches/010_remove_update_notice.patch with improved version from LP: #227547. -- Rolf LeggewieSun, 23 Nov 2008 19:04:41 +0100 ** Changed in: wordpress (Ubuntu Intrepid) Status: Fix Committed => Fix Released ** Changed in: wordpress (Ubuntu Hardy) Status: Fix Committed => Fix Released -- ubuntu wordpress should suppress the "please update" warning https://bugs.launchpad.net/bugs/227547 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 227547] Re: ubuntu wordpress should suppress the "please update" warning
verified fix for intrepid, please release to -updates ** Tags removed: verification-needed -- ubuntu wordpress should suppress the "please update" warning https://bugs.launchpad.net/bugs/227547 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 227547] Re: ubuntu wordpress should suppress the "please update" warning
verified fix for hardy, please release to -updates ** Tags added: verification-done -- ubuntu wordpress should suppress the "please update" warning https://bugs.launchpad.net/bugs/227547 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 227547] Re: ubuntu wordpress should suppress the "please update" warning
Accepted into hardy-proposed, please test and give feedback here. Please see https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you in advance! ** Changed in: wordpress (Ubuntu Hardy) Status: New => Fix Committed ** Tags added: verification-needed -- ubuntu wordpress should suppress the "please update" warning https://bugs.launchpad.net/bugs/227547 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 227547] Re: ubuntu wordpress should suppress the "please update" warning
Accepted into intrepid-proposed, please test and give feedback here. Please see https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you in advance! ** Changed in: wordpress (Ubuntu Intrepid) Status: New => Fix Committed -- ubuntu wordpress should suppress the "please update" warning https://bugs.launchpad.net/bugs/227547 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 227547] Re: ubuntu wordpress should suppress the "please update" warning
motu-sru, ack? -- ubuntu wordpress should suppress the "please update" warning https://bugs.launchpad.net/bugs/227547 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 227547] Re: ubuntu wordpress should suppress the "please update" warning
** Attachment added: "wordpress_intrepid.debdiff" http://launchpadlibrarian.net/19907966/wordpress_intrepid.debdiff -- ubuntu wordpress should suppress the "please update" warning https://bugs.launchpad.net/bugs/227547 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 227547] Re: ubuntu wordpress should suppress the "please update" warning
Hi, The Hardy and Intrepid tasks are still open, the Jaunty one is closed with the upload of the merge, which is what the "Fix Released" there signifies. Thanks, James ** Changed in: wordpress (Ubuntu) Status: In Progress => Fix Released -- ubuntu wordpress should suppress the "please update" warning https://bugs.launchpad.net/bugs/227547 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 227547] Re: ubuntu wordpress should suppress the "please update" warning
reopening for hardy and intrepid ** Changed in: wordpress (Ubuntu) Status: Fix Released => In Progress -- ubuntu wordpress should suppress the "please update" warning https://bugs.launchpad.net/bugs/227547 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 227547] Re: ubuntu wordpress should suppress the "please update" warning
Hi, Here are the diffs after cleanups. Thanks, James ** Attachment added: "wordpress_hardy.debdiff" http://launchpadlibrarian.net/19906965/wordpress_hardy.debdiff -- ubuntu wordpress should suppress the "please update" warning https://bugs.launchpad.net/bugs/227547 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 227547] Re: ubuntu wordpress should suppress the "please update" warning
This bug was fixed in the package wordpress - 2.5.1-10ubuntu1 --- wordpress (2.5.1-10ubuntu1) jaunty; urgency=low * Merge from debian unstable, remaining changes: (LP: #301340) + debian/apache.conf: - Changed to use /var/www instead of /srv/www for virtual webroot. + debian/setup-mysql: - Changed to use /var/www instead of /srv/www. * debian/patches/010_remove_update_notice.patch: - Reworked original patch to remove Wordpress upgrade notify in admin dashboard (Rolf Leggewie) (LP: #227547) * Include patch for CVE2008-3747 (LP: #269301) wordpress (2.5.1-10) unstable; urgency=high * 007CVE2008-2392.patch modified. Now users chan dinamically choose to enable unrestricted upload for admins. * 010_REQUEST.patch added. This patch is only a workaround for #504771. Now cookies are properly checked; if something malicious is found wordpress stops any other execution until cookies are not cleaned. -- Stefan Lesicnik <[EMAIL PROTECTED]> Sun, 23 Nov 2008 18:12:33 +0200 ** Changed in: wordpress (Ubuntu) Status: In Progress => Fix Released -- ubuntu wordpress should suppress the "please update" warning https://bugs.launchpad.net/bugs/227547 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 227547] Re: ubuntu wordpress should suppress the "please update" warning
** Attachment removed: "wordpress_intrepid.debdiff" http://launchpadlibrarian.net/19907010/wordpress_intrepid.debdiff -- ubuntu wordpress should suppress the "please update" warning https://bugs.launchpad.net/bugs/227547 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 227547] Re: ubuntu wordpress should suppress the "please update" warning
** Attachment added: "wordpress_intrepid.debdiff" http://launchpadlibrarian.net/19907010/wordpress_intrepid.debdiff -- ubuntu wordpress should suppress the "please update" warning https://bugs.launchpad.net/bugs/227547 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 227547] Re: ubuntu wordpress should suppress the "please update" warning
** Attachment added: "wordpress_intrepid.debdiff" http://launchpadlibrarian.net/19906969/wordpress_intrepid.debdiff ** Attachment removed: "wordpress_intrepid.debdiff" http://launchpadlibrarian.net/19906969/wordpress_intrepid.debdiff -- ubuntu wordpress should suppress the "please update" warning https://bugs.launchpad.net/bugs/227547 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 227547] Re: ubuntu wordpress should suppress the "please update" warning
** Description changed: Binary package hint: wordpress I let ubuntu manage my wordpress install and I want to continue doing that. Thus, I don't think the built-in function from wordpress to inform about a new upstream release makes any sense and can easily be counterproductive. Somebody who is not so well-versed with the whole FOSS-process of upstream->debian->ubuntu might well be irritated that the software keeps telling about the available upgrade when "sudo aptitude" disagrees. executive summary (as per SRU wiki page, subheading "Procedure"): 2.1 impact: blog admin users are instructed to update which runs counter to the idea of a distribution to manage packages - 2.2 upstream dev branch: - this is not applicable upstream, the aim is to disable a feature which has a purpose but not in the context of a managed distribution + 2.2 dev branch: + fixed since version 2.5.1-5ubuntu1 in Intrepid, but there is a more elegant solution put forth here and suggested for the next Jaunty merge in bug 301340. The fix currently in Intrepid and Jaunty is only partial. 2.3 minimal patch see attached debdiffs. I worked together with james_w to iron out a few minor kinks still present in even the latest versions. To keep the bug-spam low, I did not attach them here. 2.4 TEST CASE: install and configure wordpress in hardy (I think the same thing should already be observable in Intrepid, too). log in as a blog admin. You are presented with a message that your installation of wordpress is out of date and you should update. 2.5 regression potential low. The patch disables certain portions of a page only visible to wiki admins. I guess the worst case would be that something becomes unbalanced and the page would not validate as HTML (I assume this indeed happened with the patch as it is now applied in Intrepid) for those users on administrative pages. Browsers are usually quite tolerant of incorrect HTML. pages served to regular visitors are completely unchanged. ** Description changed: Binary package hint: wordpress I let ubuntu manage my wordpress install and I want to continue doing that. Thus, I don't think the built-in function from wordpress to inform about a new upstream release makes any sense and can easily be counterproductive. Somebody who is not so well-versed with the whole FOSS-process of upstream->debian->ubuntu might well be irritated that the software keeps telling about the available upgrade when "sudo aptitude" disagrees. - executive summary (as per SRU wiki page, subheading "Procedure"): + + *** executive summary *** (as per SRU wiki page, subheading + "Procedure"): + 2.1 impact: blog admin users are instructed to update which runs counter to the idea of a distribution to manage packages 2.2 dev branch: fixed since version 2.5.1-5ubuntu1 in Intrepid, but there is a more elegant solution put forth here and suggested for the next Jaunty merge in bug 301340. The fix currently in Intrepid and Jaunty is only partial. 2.3 minimal patch see attached debdiffs. I worked together with james_w to iron out a few minor kinks still present in even the latest versions. To keep the bug-spam low, I did not attach them here. 2.4 TEST CASE: install and configure wordpress in hardy (I think the same thing should already be observable in Intrepid, too). log in as a blog admin. You are presented with a message that your installation of wordpress is out of date and you should update. 2.5 regression potential - low. The patch disables certain portions of a page only visible to wiki + low. The patch disables certain portions of a page only visible to blog admins. I guess the worst case would be that something becomes unbalanced and the page would not validate as HTML (I assume this indeed happened with the patch as it is now applied in Intrepid) for those users on administrative pages. Browsers are usually quite tolerant of incorrect HTML. pages served to regular visitors are completely unchanged. -- ubuntu wordpress should suppress the "please update" warning https://bugs.launchpad.net/bugs/227547 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 227547] Re: ubuntu wordpress should suppress the "please update" warning
** Description changed: Binary package hint: wordpress I let ubuntu manage my wordpress install and I want to continue doing that. Thus, I don't think the built-in function from wordpress to inform about a new upstream release makes any sense and can easily be counterproductive. Somebody who is not so well-versed with the whole FOSS-process of upstream->debian->ubuntu might well be irritated that the software keeps telling about the available upgrade when "sudo aptitude" disagrees. + + executive summary (as per SRU wiki page, subheading "Procedure"): + 2.1 impact: + blog admin users are instructed to update which runs counter to the idea of a distribution to manage packages + + 2.2 upstream dev branch: + this is not applicable upstream, the aim is to disable a feature which has a purpose but not in the context of a managed distribution + + 2.3 minimal patch + see attached debdiffs. I worked together with james_w to iron out a few minor kinks still present in even the latest versions. To keep the bug-spam low, I did not attach them here. + + 2.4 TEST CASE: + install and configure wordpress in hardy (I think the same thing should already be observable in Intrepid, too). log in as a blog admin. You are presented with a message that your installation of wordpress is out of date and you should update. + + 2.5 regression potential + + low. The patch disables certain portions of a page only visible to wiki + admins. I guess the worst case would be that something becomes + unbalanced and the page would not validate as HTML (I assume this indeed + happened with the patch as it is now applied in Intrepid) for those + users on administrative pages. Browsers are usually quite tolerant of + incorrect HTML. pages served to regular visitors are completely + unchanged. -- ubuntu wordpress should suppress the "please update" warning https://bugs.launchpad.net/bugs/227547 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 227547] Re: ubuntu wordpress should suppress the "please update" warning
does this look OK? ** Attachment added: "updated debdiff for intrepid" http://launchpadlibrarian.net/19886072/wordpress_intrepid.debdiff -- ubuntu wordpress should suppress the "please update" warning https://bugs.launchpad.net/bugs/227547 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 227547] Re: ubuntu wordpress should suppress the "please update" warning
** Bug watch added: Debian Bug tracker #506685 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506685 ** Also affects: wordpress (Debian) via http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506685 Importance: Unknown Status: Unknown -- ubuntu wordpress should suppress the "please update" warning https://bugs.launchpad.net/bugs/227547 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 227547] Re: ubuntu wordpress should suppress the "please update" warning
** Attachment added: "updated debdiff for hardy" http://launchpadlibrarian.net/19884709/wordpress_hardy.debdiff -- ubuntu wordpress should suppress the "please update" warning https://bugs.launchpad.net/bugs/227547 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 227547] Re: ubuntu wordpress should suppress the "please update" warning
Yes, Jaunty merge. My debdiff for that is up at https://bugs.edge.launchpad.net/ubuntu/+source/wordpress/+bug/301340. If you could do the diff for hardy and intrepid, that would be great. Please follow the SRU guidelines for them. https://wiki.ubuntu.com/StableReleaseUpdates Let me know if you need any assistance. Thanks! -- ubuntu wordpress should suppress the "please update" warning https://bugs.launchpad.net/bugs/227547 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 227547] Re: ubuntu wordpress should suppress the "please update" warning
Stefan, the merge for Jaunty? I'll prepare a debdiff for hardy and intrepid only, then. -- ubuntu wordpress should suppress the "please update" warning https://bugs.launchpad.net/bugs/227547 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 227547] Re: ubuntu wordpress should suppress the "please update" warning
Hi Rolf, Patch looks good. I will put this into the merge. Thanks for your work! -- ubuntu wordpress should suppress the "please update" warning https://bugs.launchpad.net/bugs/227547 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 227547] Re: ubuntu wordpress should suppress the "please update" warning
Hi Rolf, Your diff looks sensible to me. Thanks, James -- ubuntu wordpress should suppress the "please update" warning https://bugs.launchpad.net/bugs/227547 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 227547] Re: ubuntu wordpress should suppress the "please update" warning
Here is how I think /usr/share/wordpress/wp-admin/includes/update.php may be patched. If the experts agree, I'll prepare a debdiff which includes this patch. ** Attachment added: "lp227547.diff" http://launchpadlibrarian.net/19878821/lp227547.diff -- ubuntu wordpress should suppress the "please update" warning https://bugs.launchpad.net/bugs/227547 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 227547] Re: ubuntu wordpress should suppress the "please update" warning
I did not roll a new package, but just commented out that particular line in /usr/share/wordpress/wp-admin/includes/update.php That seems to work well for the warning message in the upper part. But there is also a warning in the footer which seems to be set in lines 5-26 in /usr/share/wordpress/wp-admin/includes/update.php -- ubuntu wordpress should suppress the "please update" warning https://bugs.launchpad.net/bugs/227547 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 227547] Re: ubuntu wordpress should suppress the "please update" warning
I dont have a working WP installation, but as a cleaner patch to this, could I propose and someone please test by hash or remove add_action( 'admin_notices', 'update_nag', 3 ); >From wp-admin/includes/update.php at line 43. -- ubuntu wordpress should suppress the "please update" warning https://bugs.launchpad.net/bugs/227547 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 227547] Re: ubuntu wordpress should suppress the "please update" warning
I am busy with a new merge for Jaunty and I will look at this patch. -- ubuntu wordpress should suppress the "please update" warning https://bugs.launchpad.net/bugs/227547 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 227547] Re: ubuntu wordpress should suppress the "please update" warning
Hi, Your jaunty patch appears to be incorrect, it leaves the patch trying to remove commented lines and put in uncommented ones. Did you reverse the patch while trying to update it? Thanks, James -- ubuntu wordpress should suppress the "please update" warning https://bugs.launchpad.net/bugs/227547 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 227547] Re: ubuntu wordpress should suppress the "please update" warning
maybe we should update dapper-backports as well? -- ubuntu wordpress should suppress the "please update" warning https://bugs.launchpad.net/bugs/227547 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 227547] Re: ubuntu wordpress should suppress the "please update" warning
** Attachment added: "debdiff for jaunty" http://launchpadlibrarian.net/19649476/wordpress_jaunty.debdiff -- ubuntu wordpress should suppress the "please update" warning https://bugs.launchpad.net/bugs/227547 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 227547] Re: ubuntu wordpress should suppress the "please update" warning
** Attachment added: "debdiff for intrepid" http://launchpadlibrarian.net/19648945/wordpress_intrepid.debdiff -- ubuntu wordpress should suppress the "please update" warning https://bugs.launchpad.net/bugs/227547 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 227547] Re: ubuntu wordpress should suppress the "please update" warning
My mistake was that I was looking at the Debian sources instead of the Ubuntu Intrepid sources. I do believe there is a minor mistake in the patch for Intrepid though. The if-statement is not commented, thus leading to an imbalance. -- ubuntu wordpress should suppress the "please update" warning https://bugs.launchpad.net/bugs/227547 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 227547] Re: ubuntu wordpress should suppress the "please update" warning
** Attachment added: "debdiff for hardy" http://launchpadlibrarian.net/19647364/wordpress_LP227547.debdiff -- ubuntu wordpress should suppress the "please update" warning https://bugs.launchpad.net/bugs/227547 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 227547] Re: ubuntu wordpress should suppress the "please update" warning
Hm, the Intrepid changelog still mentions the patch. Yet, I don't find it in the unpacked source code. I'll need to take a closer look. -- ubuntu wordpress should suppress the "please update" warning https://bugs.launchpad.net/bugs/227547 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 227547] Re: ubuntu wordpress should suppress the "please update" warning
Actually, this seems to have been unfixed in Intrepid with the latest merges. All Ubuntu specific patches are gone without explanation. We will need to again fix all releases. -- ubuntu wordpress should suppress the "please update" warning https://bugs.launchpad.net/bugs/227547 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 227547] Re: ubuntu wordpress should suppress the "please update" warning
fixed for Intrepid, reopening to nominate for hardy. Should this be backported to other releases as well? ** Changed in: wordpress (Ubuntu) Status: Fix Released => In Progress -- ubuntu wordpress should suppress the "please update" warning https://bugs.launchpad.net/bugs/227547 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 227547] Re: ubuntu wordpress should suppress the "please update" warning
This bug was fixed in the package wordpress - 2.5.1-5ubuntu1 --- wordpress (2.5.1-5ubuntu1) intrepid; urgency=low * Merge from debian unstable, remaining changes: (LP: #237348) + debian/apache.conf: - Changed to use /var/www instead of /srv/www for virtual webroot. + debian/setup-mysql: - Changed to use /var/www instead of /srv/www. * other changes: + debian/patches/008_remove_update_notice.patch: (LP: #227547) - Removed Wordpress upgrade notify in admin dashboard. wordpress (2.5.1-5) unstable; urgency=low * Modified rules file to have a lintian clean package. wordpress (2.5.1-4) unstable; urgency=low * Added patch to fix unrestricted file upload vulnerability (Closes: #485807) Now administrators can upload only files that are in the standard mime-type set (Fixes CVE-2008-2392) wordpress (2.5.1-3) unstable; urgency=low * rss_language is now modifiable through wp-admin panel. Thanks to Lionel Elie Mamane (Closes: #461584) * Makes Wordpress depend on tinymce (>= 3.0.7) -- Emanuele Gentili <[EMAIL PROTECTED]> Wed, 23 Jul 2008 02:25:27 +0200 ** Changed in: wordpress (Ubuntu) Status: Confirmed => Fix Released ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2008-2392 -- ubuntu wordpress should suppress the "please update" warning https://bugs.launchpad.net/bugs/227547 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 227547] Re: ubuntu wordpress should suppress the "please update" warning
** Changed in: wordpress (Ubuntu) Importance: Undecided => Wishlist Status: New => Confirmed -- ubuntu wordpress should suppress the "please update" warning https://bugs.launchpad.net/bugs/227547 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs