Date: Tue, 9 Dec 2008 19:41:57 GMT From: Matthew Seaman <m.seaman@infracaninophile.co.uk> To: FreeBSD-gnats-submit@FreeBSD.org Cc: sec-team@FreeBSD.org Subject: ports/129534: [maintainer] databases/phpmyadmin211 security update to 2.11.9.4 Message-ID: <200812091941.mB9Jfv4v054878@happy-idiot-talk.infracaninophile.co.uk> Resent-Message-ID: <200812091950.mB9Jo2bg040126@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 129534
>Category: ports
>Synopsis: [maintainer] databases/phpmyadmin211 security update to 2.11.9.4
>Confidential: no
>Severity: serious
>Priority: medium
>Responsible: freebsd-ports-bugs
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: maintainer-update
>Submitter-Id: current-users
>Arrival-Date: Tue Dec 09 19:50:01 UTC 2008
>Closed-Date:
>Last-Modified:
>Originator: Matthew Seaman
>Release: FreeBSD 7.1-PRERELEASE i386
>Organization:
Infracaninophile
>Environment:
System: FreeBSD happy-idiot-talk.infracaninophile.co.uk 7.1-PRERELEASE FreeBSD 7.1-PRERELEASE #49: Sat Nov 29 14:18:14 GMT 2008 root@happy-idiot-talk.infracaninophile.co.uk:/usr/obj/usr/src/sys/HAPPY-IDIOT-TALK i386
>Description:
The Announcement:
"Welcome to this normal bugfix release of 3.1.1 (which contains
also a security fix). Version 2.11.9.4 was also published with
this security fix.
Security announcement:
http://www.phpmyadmin.net/home_page/security/PMASA-2008-10.php
http://phpmyadmin.net will be updated with the download links;
meanwhile you can visit
https://sourceforge.net/projects/phpmyadmin/ in the Download area.
Marc Delisle, for the team"
ChangeLog is at:
http://sourceforge.net/project/shownotes.php?release_id=646025
Also:
When PHP_VER == 5 no more RUN_DEPENDS on devel/php5-pcre as it
has been subsumed into lang/php5. When PHP_VER == 4 will still
have a RUN_DEPENDS on devel/php4-pcre
>How-To-Repeat:
>Fix:
--- phpmyadmin211.diff begins here ---
diff -Nur /usr/ports/databases/phpmyadmin211/Makefile phpmyadmin211/Makefile
--- /usr/ports/databases/phpmyadmin211/Makefile 2008-11-01 16:09:55.000000000 +0000
+++ phpmyadmin211/Makefile 2008-12-09 19:26:05.000000000 +0000
@@ -6,7 +6,7 @@
#
PORTNAME= phpMyAdmin211
-DISTVERSION= 2.11.9.3
+DISTVERSION= 2.11.9.4
CATEGORIES= databases www
MASTER_SITES= SF/phpmyadmin
DISTNAME= ${PORTNAME:S/211//}-${DISTVERSION}-all-languages
@@ -17,7 +17,7 @@
USE_BZIP2= yes
NO_BUILD= yes
.if !defined(WITHOUT_PHP_DEPENDS)
-USE_PHP= ctype mysql pcre session
+USE_PHP= ctype mysql session
.endif
# Unfortunately can't make WITH_SUPHP part of the OPTIONS selection,
@@ -104,6 +104,10 @@
.include <bsd.port.pre.mk>
+.if !defined(WITHOUT_PHP_DEPENDS) && ${PHP_VER} == 4
+USE_PHP+= pcre
+.endif
+
_PMA_GID!= ${PW} group show -n ${PMA_GRP} | ${CUT} -d : -f 3
.if empty(_PMA_GID)
_PMA_GID= 80
diff -Nur /usr/ports/databases/phpmyadmin211/distinfo phpmyadmin211/distinfo
--- /usr/ports/databases/phpmyadmin211/distinfo 2008-11-01 16:09:55.000000000 +0000
+++ phpmyadmin211/distinfo 2008-12-09 19:12:45.000000000 +0000
@@ -1,3 +1,3 @@
-MD5 (phpMyAdmin-2.11.9.3-all-languages.tar.bz2) = 8b0fecb839b1adb8e5b676cc7eb0ef34
-SHA256 (phpMyAdmin-2.11.9.3-all-languages.tar.bz2) = 7cff2852bda3754b1c5caba9b2eb2c7e59054730792ea3a6aa11fd1664528890
-SIZE (phpMyAdmin-2.11.9.3-all-languages.tar.bz2) = 3110391
+MD5 (phpMyAdmin-2.11.9.4-all-languages.tar.bz2) = 726fc2d02fe84b46ce769f538755778a
+SHA256 (phpMyAdmin-2.11.9.4-all-languages.tar.bz2) = b8ce88e8b78fb6f2f1830d2bcef1c69eab1b676630a78cc0960509c50cc27cb0
+SIZE (phpMyAdmin-2.11.9.4-all-languages.tar.bz2) = 3110278
--- phpmyadmin211.diff ends here ---
>Release-Note:
>Audit-Trail:
>Unformatted:
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200812091941.mB9Jfv4v054878>