wp-includes/class-wp-http.php | 6 3 + 3 - 0 !
1 file changed, 3 insertions(+), 3 deletions(-)

 use system ca file
 Instead of the shipped CA file use the system one found in the
 Debian ca-certificates package.
Bug-Debian: http://bugs.debian.org/748965

readme.html | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

 provide url for gpl-2+ license in readme

wp-admin/install.php | 3 3 + 0 - 0 !
1 file changed, 3 insertions(+)

 patching install.php to permit a valid upload path

wp-admin/includes/update.php | 4 4 + 0 - 0 !
1 file changed, 4 insertions(+)

 disabled the "please update" warning
 thanks to Hans Spaans and Rolf Leggewie (Closes: #506685)

wp-admin/includes/update.php | 5 5 + 0 - 0 !
1 file changed, 5 insertions(+)

 switch off update warning when auto updates set to false (closes #1001623)

wp-admin/update-core.php | 6 6 + 0 - 0 !
1 file changed, 6 insertions(+)

 do not show "your version is up-to-date" when this information is wrong (closes #1001623)

wp-activate.php | 10 8 + 2 - 0 !
wp-admin/user-new.php | 4 2 + 2 - 0 !
wp-includes/ms-default-filters.php | 4 2 + 2 - 0 !
wp-includes/ms-functions.php | 89 72 + 17 - 0 !
4 files changed, 84 insertions(+), 23 deletions(-)

 use hash for user activation key
 Removes cleartext of the user activation key
 CVE-2017-14990

wp-includes/js/tw-sack.js | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

---