From owner-svn-ports-all@freebsd.org Wed Mar 29 16:55:13 2017 Return-Path: Delivered-To: svn-ports-all@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id DEEFDD2480A; Wed, 29 Mar 2017 16:55:13 +0000 (UTC) (envelope-from matthew@FreeBSD.org) Received: from repo.freebsd.org (repo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 91C513C2F; Wed, 29 Mar 2017 16:55:13 +0000 (UTC) (envelope-from matthew@FreeBSD.org) Received: from repo.freebsd.org ([127.0.1.37]) by repo.freebsd.org (8.15.2/8.15.2) with ESMTP id v2TGtCcq076093; Wed, 29 Mar 2017 16:55:12 GMT (envelope-from matthew@FreeBSD.org) Received: (from matthew@localhost) by repo.freebsd.org (8.15.2/8.15.2/Submit) id v2TGtC6p076091; Wed, 29 Mar 2017 16:55:12 GMT (envelope-from matthew@FreeBSD.org) Message-Id: <201703291655.v2TGtC6p076091@repo.freebsd.org> X-Authentication-Warning: repo.freebsd.org: matthew set sender to matthew@FreeBSD.org using -f From: Matthew Seaman Date: Wed, 29 Mar 2017 16:55:12 +0000 (UTC) To: ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-head@freebsd.org Subject: svn commit: r437214 - head/databases/phpmyadmin X-SVN-Group: ports-head MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-ports-all@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: SVN commit messages for the ports tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Mar 2017 16:55:14 -0000 Author: matthew Date: Wed Mar 29 16:55:12 2017 New Revision: 437214 URL: https://svnweb.freebsd.org/changeset/ports/437214 Log: Security Update to 4.7.0 As well as being the first stable release from the 4.7 branch, this includes fixes for PMASA-2017-8 where it can be possible to bypass a configuration restriction forbidding password-less accounts. This depends on the upstream PHP version -- sites using php-7 are not vulnerable, sites using php-5.6 are. ChangeLog: https://www.phpmyadmin.net/files/4.7.0/ MFH: 2017Q1 Security: 68611303-149e-11e7-b9bb-6805ca0b3d42 Modified: head/databases/phpmyadmin/Makefile head/databases/phpmyadmin/distinfo Modified: head/databases/phpmyadmin/Makefile ============================================================================== --- head/databases/phpmyadmin/Makefile Wed Mar 29 16:48:14 2017 (r437213) +++ head/databases/phpmyadmin/Makefile Wed Mar 29 16:55:12 2017 (r437214) @@ -2,7 +2,7 @@ # $FreeBSD$ PORTNAME= phpMyAdmin -DISTVERSION= 4.6.6 +DISTVERSION= 4.7.0 CATEGORIES= databases www MASTER_SITES= https://files.phpmyadmin.net/${PORTNAME}/${DISTVERSION}/ DISTNAME= ${PORTNAME}-${DISTVERSION}-all-languages @@ -67,8 +67,9 @@ post-patch: ${FIND} . ! -type d ! -name ${CFG_FILE}.sample ! -name '*.bak' | \ ${SORT} | ${SED} -e "s,^\.,%%WWWDIR%%," >${PLIST} ; \ ${CAT} ${PKGDIR}/pkg-plist-chunk >>${PLIST} ; \ - for emptydir in $$( ${FIND} . -type d -empty -print ) ; do \ - ${ECHO} "@dir(,,)$${emptydir}" >>${PLIST} ; \ + for emptydir in $$( ${FIND} . -type d -empty -print | \ + ${SED} -e "s,^\.,%%WWWDIR%%," ) ; do \ + ${ECHO} "@dir $${emptydir}" >>${PLIST} ; \ done ; \ do-install: Modified: head/databases/phpmyadmin/distinfo ============================================================================== --- head/databases/phpmyadmin/distinfo Wed Mar 29 16:48:14 2017 (r437213) +++ head/databases/phpmyadmin/distinfo Wed Mar 29 16:55:12 2017 (r437214) @@ -1,3 +1,3 @@ -TIMESTAMP = 1485244457 -SHA256 (phpMyAdmin-4.6.6-all-languages.tar.xz) = b7b9e0f88ca740fcba249e7e3e7d51d1923b038b7742cde72de193a2b0a2654f -SIZE (phpMyAdmin-4.6.6-all-languages.tar.xz) = 6147904 +TIMESTAMP = 1490802948 +SHA256 (phpMyAdmin-4.7.0-all-languages.tar.xz) = 6378d1f45f5356fda2d18a923c56a495e03bc1e7694e7b7c004dd688d2178f90 +SIZE (phpMyAdmin-4.7.0-all-languages.tar.xz) = 7600296