www/php-ja-wordpress: update to 7.0.6
7.0.5 (2026-09-17)
Security Updates
* An issue allowing a crafted URL to install and preview a theme from
WordPress.org reported by Paulos Yibelo and pwn.ai
* A stored cross-site scripting (XSS) issue in custom header images on some
themes reported by Jeremy Felt of the WordPress Security Team
* An information disclosure issue exposing the title of a private parent
post reported by HDWSec
* An HTML API issue allowing modified text to break out of an HTML comment
reported by Jeremy Felt of the WordPress Security Team
* A multisite issue allowing a site administrator to network-activate a
[27 lines not shown]
www/wordpress: update to 7.0.6
7.0.5 (2026-09-17)
Security Updates
* An issue allowing a crafted URL to install and preview a theme from
WordPress.org reported by Paulos Yibelo and pwn.ai
* A stored cross-site scripting (XSS) issue in custom header images on some
themes reported by Jeremy Felt of the WordPress Security Team
* An information disclosure issue exposing the title of a private parent
post reported by HDWSec
* An HTML API issue allowing modified text to break out of an HTML comment
reported by Jeremy Felt of the WordPress Security Team
* A multisite issue allowing a site administrator to network-activate a
[27 lines not shown]
t_mkfifo: Bump timeouts a little bit to exercise the race better.
Currently on the releng testbed, the parent's open() call is not
failing with _any_ EINTR, presumably because (a) the child is opening
the fifo before any itimer alarms fire and then (b) signal no longer
causes the parent's open() to fail once the child has opened the other
end of the fifo. So let's give the parent a bit more of a head start,
and run the race a little longer.
PR kern/59578: open() hangs indefinitely on FIFO with frequent signal
interruption
re(4): fix mangled TX queue on DMA map loading errors
Do not advance the TX queue producer index when bus_dmamap_load_mbuf()
fails.
The producer index must advance only after a packet has been
successfully committed to a TX queue entry. Advancing it on a
map loading error leaves a hole in re_txq[], while re_txq_free()
still counts only successfully queued packets.
re_txeof() assumes that all outstanding TX queue entries from
re_txq_considx are contiguous, so such a hole can make it process
an unused entry and corrupt the TX queue accounting.
This bug was introduced by my re_encap() -> re_start() refactoring
in rev. 1.59 back in 2006. Sorry it took ~20 years to notice it.
Should be pulled up to netbsd-11 and netbsd-10.
Revert "turnstile(9): Fix priority inheritance if trylock requires restart."
This was originally done in an attempt to resolve the issue described
in:
PR kern/60739: Turnstile priority inheritance short-circuits walking
of waiter chain when trylock fails
But it may have broken other things:
PR kern/60776: reproducable assertion failure with today's current
> Today's amd64 kernel reproducably crashes for me when running build.sh.
>
> [ 4043.4787057] panic: kernel diagnostic assertion "lwp_eprio(l) >= ts->ts_eprio" failed: file "../../../../kern/kern_turnstile.c", line 356
> [ 4043.6286910] cpu1: Begin traceback...
> [ 4043.6686907] vpanic() at netbsd:vpanic+0x189
> [ 4043.7186903] kern_assert() at netbsd:kern_assert+0x4b
> [ 4043.7786898] turnstile_wakeup() at netbsd:turnstile_wakeup+0x2c5
[10 lines not shown]
t_fdrestart: Test named fifos too.
Turns out we're missing a wakeup on close for read and write on fifos
too!
PR kern/57659: closing pipe writefd fails to wake concurrent write on
same writefd
t_fdrestart: Test restarting poll and select on close too.
They must promptly report POLLNVAL/EBADF when a file descriptor they
are listening for is closed, just like read and write.
Note: kevent doesn't get restarted when an fd registered with it is
closed; the registration is simply silently discarded instead. Hence
no corresponding kevent tests here.
PR kern/57659: closing pipe writefd fails to wake concurrent write on
same writefd
