Date: Tue, 5 Apr 2005 14:14:54 +0100 (BST) From: Matthew Seaman <m.seaman@infracaninophile.co.uk> To: FreeBSD-gnats-submit@FreeBSD.org Cc: security-team@FreeBSD.org Subject: ports/79558: [ maintainer ] databases/phpmyadmin -- security update to 2.6.2.r1 Message-ID: <200504051314.j35DEsMu047463@gravitas.thebunker.net> Resent-Message-ID: <200504051320.j35DK9be002103@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 79558
>Category: ports
>Synopsis: [ maintainer ] databases/phpmyadmin -- security update to 2.6.2.r1
>Confidential: no
>Severity: serious
>Priority: medium
>Responsible: freebsd-ports-bugs
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: maintainer-update
>Submitter-Id: current-users
>Arrival-Date: Tue Apr 05 13:20:06 GMT 2005
>Closed-Date:
>Last-Modified:
>Originator: Matthew Seaman
>Release: FreeBSD 5.4-PRERELEASE i386
>Organization:
Infracaninophile
>Environment:
System: FreeBSD gravitas.thebunker.net 5.4-PRERELEASE FreeBSD 5.4-PRERELEASE #10: Sat Mar 26 15:08:59 GMT 2005 root@gravitas.thebunker.net:/usr/obj/usr/src/sys/GRAVITAS i386
>Description:
Update to phpmyadmin-2.6.2-rc1 to solve XSS problem
See phpMyAdmin security announcement PMASA-2005-3
http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2005-3
http://www.arrelnet.com/advisories/adv20050403.html
Release announcement is at:
http://www.phpmyadmin.net/home_page/downloads.php?relnotes=1
>How-To-Repeat:
>Fix:
--- phpmyadmin.diff begins here ---
diff -Nur /usr/ports/databases/phpmyadmin/Makefile phpmyadmin/Makefile
--- /usr/ports/databases/phpmyadmin/Makefile Mon Mar 7 08:47:10 2005
+++ phpmyadmin/Makefile Tue Apr 5 13:57:03 2005
@@ -6,12 +6,12 @@
#
PORTNAME= phpMyAdmin
-PORTVERSION= 2.6.1.3
-#DISTVERSION= 2.6.1-pl3
+#PORTVERSION= 2.6.2.r1
+DISTVERSION= 2.6.2-rc1
CATEGORIES= databases www
MASTER_SITES= ${MASTER_SITE_SOURCEFORGE}
MASTER_SITE_SUBDIR= phpmyadmin
-DISTNAME= ${PORTNAME}-${PORTVERSION:C/\.(.)$/-pl\1/}
+#DISTNAME= ${PORTNAME}-${PORTVERSION:C/\.(.)$/-pl\1/}
MAINTAINER= m.seaman@infracaninophile.co.uk
COMMENT= A set of PHP-scripts to manage MySQL over the web
diff -Nur /usr/ports/databases/phpmyadmin/distinfo phpmyadmin/distinfo
--- /usr/ports/databases/phpmyadmin/distinfo Mon Mar 7 08:47:10 2005
+++ phpmyadmin/distinfo Tue Apr 5 13:57:34 2005
@@ -1,2 +1,2 @@
-MD5 (phpMyAdmin-2.6.1-pl3.tar.bz2) = 77b97c6212ee9322db0aea6ba00e305c
-SIZE (phpMyAdmin-2.6.1-pl3.tar.bz2) = 1543219
+MD5 (phpMyAdmin-2.6.2-rc1.tar.bz2) = 20093576299c6cc1468aa67b3dcedf50
+SIZE (phpMyAdmin-2.6.2-rc1.tar.bz2) = 1638568
--- phpmyadmin.diff ends here ---
>Release-Note:
>Audit-Trail:
>Unformatted:
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200504051314.j35DEsMu047463>