Matthew Seaman
a288fb10c5
Security update to 4.8.5
...
This fixes arbitrary file disclosure and sql injection vulnerabilities.
ChangeLog: https://www.phpmyadmin.net/files/4.8.5/
MFH: 2019Q1
Security: 111aefca-2213-11e9-9c8d-6805ca0b3d42
2019-01-27 09:27:21 +00:00
Matthew Seaman
e61f499ad6
Security update to 4.8.4
...
Addresses three security advisories: PMASA-2018-06, PMASA-2018-07,
PMASA-2018-08.
Also includes additional non-security related code updates.
ChangeLog: https://www.phpmyadmin.net/files/4.8.4/
PR: 233953
MFH: 2018Q4
Security: ed10ed3f-fddc-11e8-94cf-6805ca0b3d42
2018-12-12 07:24:04 +00:00
Matthew Seaman
e8bb7fade8
Update to 4.8.3; includes a security update for PMASA-2018-5
...
MFH: 2018Q3
Security: 9e205ef5-a649-11e8-b1f6-6805ca0b3d42
2018-08-22 22:22:16 +00:00
Matthew Seaman
0d3274953a
Security update to 4.8.2
...
ChangeLog: https://www.phpmyadmin.net/files/4.8.2/
MFH: 2018Q2
Security: 17cb6ff3-7670-11e8-8854-6805ca0b3d42
2018-06-22 23:44:13 +00:00
Matthew Seaman
13fc326e18
Update to 4.8.1
...
ChangeLog: https://www.phpmyadmin.net/files/4.8.1/
2018-05-25 07:51:05 +00:00
Matthew Seaman
5bb623bf7f
* Review port dependencies based on composer.json files included in
...
the source
- Add hash as a required dependency [1]
- Move xml from optional to required
- Add curl, gmp, opcache and sodium as optional dependencies: all of
these default to off. sodium only works with php >= 7.2, but
there is no mechanism for modifying options dependent on flavour
settings at the moment.
- Move mbstring from required to optional dependency: defaults to on
* Sort lists of options
* Remove references to the redundant 'OPTIONS_MULTI_DB_connect': this
was a remnant from an earlier version of the port which allowed
switching between the old 'mysql' and the current 'mysqli' modules.
* Add an empty %%WWWDIR%%/tmp directory to the plist: this is
referenced in the configuration defaults [2]. Make this writable by
the www group.
PR: 227803
Submitted by: marko.cupac@mimar.rs [1]
Reported by: marko.cupac@mimar.rs [2]
2018-04-28 11:24:17 +00:00
Matthew Seaman
414f7a8d27
Security Update to 4.8.0.1
...
Fixes: CSRF vulnerability allowing arbitrary SQL execution present in
4.8.0
Release Notes: https://www.phpmyadmin.net/files/4.8.0.1/
MFH: 2018Q2
Security: ac7da39b-4405-11e8-afbe-6805ca0b3d42
2018-04-19 19:20:40 +00:00
Matthew Seaman
73e4c3e15f
Upgrade to 4.8.0
...
ChangeLog: https://www.phpmyadmin.net/files/4.8.0/
2018-04-08 10:54:05 +00:00
Mathieu Arnold
8d91fc67d5
Add PHP flavors to phpMyAdmin.
...
Approved by: matthew
Sponsored by: Absolight
Differential Revision: https://reviews.freebsd.org/D14970
2018-04-05 13:16:25 +00:00
Matthew Seaman
947798a65f
Update to 4.7.9
...
Release Notes: https://www.phpmyadmin.net/files/4.7.9/
2018-03-06 07:32:34 +00:00
Matthew Seaman
fa6b538abb
Security update to 4.7.8
...
Advisory: https://www.phpmyadmin.net/security/PMASA-2018-1/
ChangeLog: https://www.phpmyadmin.net/files/4.7.8/
MFH: 2018Q1
Security: 261ca31c-179f-11e8-b8b9-6805ca0b3d42
2018-02-22 07:19:39 +00:00
Matthew Seaman
6cd6e75770
Security Upate to 4.7.7
...
This includes a fix for a critical XSRF/CSRF security bug.
ChangeLog: https://www.phpmyadmin.net/files/4.7.7/
MFH: 2017Q4
Security: 63eb2b11-e802-11e7-a58c-6805ca0b3d42
2017-12-23 19:33:01 +00:00
Matthew Seaman
291a06448f
Upgrade to 4.7.6
...
Release notes: https://www.phpmyadmin.net/files/4.7.6/
2017-12-01 07:06:55 +00:00
Matthew Seaman
ded7e7e79b
Update to 4.7.5
...
Chagenlog: https://www.phpmyadmin.net/files/4.7.5/
2017-10-23 21:48:51 +00:00
Matthew Seaman
2cf209ef90
Drop the MCRYPT option. MCRYPT has been deprecated by upstream PHP
...
and the mcrypt project itself is abandonware.
PR: 222290
Reported by: olivierw1+bugzilla-freebsd@hotmail.com
2017-09-13 21:15:27 +00:00
Matthew Seaman
39cd12d5aa
Update to 4.7.4
...
ChangeLog: https://www.phpmyadmin.net/files/4.7.4/
2017-08-24 21:34:14 +00:00
Matthew Seaman
585cd7c8fb
Update URL -- http redirects to https
2017-08-01 15:53:00 +00:00
Matthew Seaman
aa430690d4
Update to 4.7.3
...
This is a routine maintenance release.
ChangeLog: https://www.phpmyadmin.net/files/4.7.3/
2017-07-21 17:32:58 +00:00
Matthew Seaman
38b64349d9
Update to 4.7.2
...
ChangeLog: https://github.com/phpmyadmin/phpmyadmin/blob/RELEASE_4_7_2/ChangeLog
2017-06-30 07:12:54 +00:00
Matthew Seaman
b053a55ab3
Upgrade to 4.7.1
...
ChangeLog: https://www.phpmyadmin.net/files/4.7.1/
2017-05-27 10:48:24 +00:00
Matthew Seaman
efc6a75775
Security Update to 4.7.0
...
As well as being the first stable release from the 4.7 branch, this
includes fixes for PMASA-2017-8 where it can be possible to bypass a
configuration restriction forbidding password-less accounts. This
depends on the upstream PHP version -- sites using php-7 are not
vulnerable, sites using php-5.6 are.
ChangeLog: https://www.phpmyadmin.net/files/4.7.0/
MFH: 2017Q1
Security: 68611303-149e-11e7-b9bb-6805ca0b3d42
2017-03-29 16:55:12 +00:00
Matthew Seaman
df6a9f0f03
Update to 4.6.6
...
This includes a number of security fixes
MFH: 2017Q1
Security: 7721562b-e20a-11e6-b2e2-6805ca0b3d42
2017-01-24 12:15:42 +00:00
Matthew Seaman
558f3e2d00
Update to 4.6.5.2
...
ChangeLog: https://www.phpmyadmin.net/files/4.6.5.2/
2016-12-06 08:16:50 +00:00
Matthew Seaman
9c8c9cf763
Update to 4.6.5.1
...
ChangeLog: https://github.com/phpmyadmin/phpmyadmin/blob/master/ChangeLog
PR: 214905
2016-11-28 20:24:36 +00:00
Matthew Seaman
b4bf24d419
Security Update to 4.6.5
...
This update includes fixes for 14 security issues, as well as ordinary
bug fixes and improvements.
ChangeLog: https://github.com/phpmyadmin/phpmyadmin/blob/master/ChangeLog
MFH: 2016Q4
Security: 6fe72178-b2e3-11e6-8b2a-6805ca0b3d42
2016-11-25 08:19:42 +00:00
Rene Ladan
4a577e2d5d
Now that PHP 5.5 is removed from the Ports Tree, clean up any stale
...
IGNORE_WITH_PHP values (5, 52, 54, 55)
2016-10-24 19:39:05 +00:00
Steve Wills
149ba7338a
Unmark broken on powerpc64
...
These ports built successfully
2016-09-15 01:41:28 +00:00
Matthew Seaman
4c75a7d5b4
Fix build -- the shebang files have been removed[1].
...
Placate portlint
Reported by: Walter Schwarzenfeld [1]
2016-08-17 13:10:27 +00:00
Matthew Seaman
ee79a89f14
Security update to 4.6.4
...
This includes 26 security advisories of various severities up to
'critical', as well as bug-fix updates.
ChangeLog: https://www.phpmyadmin.net/files/4.6.4/
MFH: 2016Q3
Security: ef70b201-645d-11e6-9cdc-6805ca0b3d42
2016-08-17 11:05:42 +00:00
Matthew Seaman
352365dbbb
Security update to 4.6.3
...
See: PMSA-2016-19 -- PMSA-2016-28 inclusive
https://www.phpmyadmin.net/security/
vuXML to follow
MFH: 2016Q2
2016-06-23 07:28:35 +00:00
Matthew Seaman
0cb12deae6
Security update to 4.6.2
...
ChangeLog: https://www.phpmyadmin.net/files/4.6.2/
MFH: 2016Q2
Security: 00ec1be1-22bb-11e6-9ead-6805ca0b3d42
2016-05-25 21:10:39 +00:00
Dmitry Marakasov
e87a8bd319
- Fix trailing whitespace in pkg-messages
...
Approved by: portmgr blanket
2016-05-19 11:09:14 +00:00
Matthew Seaman
fc317575d6
Update to 4.6.1
...
This is a routine bug-fix update.
ChangeLog: https://www.phpmyadmin.net/files/4.6.1/
2016-05-03 07:27:13 +00:00
Steve Wills
86cd4fbe5a
many ports: mark broken on powerpc64
2016-04-21 16:43:14 +00:00
Matthew Seaman
7660fb8453
Update to 4.6.0
...
ChangeLog: https://www.phpmyadmin.net/files/4.6.0/
2016-03-22 21:14:56 +00:00
Matthew Seaman
b62dc760ab
Security Update to 4.5.5.1
...
Multiple XSS vulnerabilities and a man-in-the-middle attack against
API calls to GitHub.
MFH: 2016Q1
Security: f682a506-df7c-11e5-81e4-6805ca0b3d42
2016-03-01 07:32:16 +00:00
Matthew Seaman
e8318643e9
Update to 4.5.5
...
This is a routine maintenance update.
ChangeLog: https://www.phpmyadmin.net/files/4.5.5/
2016-02-23 08:15:15 +00:00
Matthew Seaman
a4cffb9972
Update to 4.5.4.1
...
This is actually pretty much a no-op on FreeBSD: we're using the
bundled verion of phpseclib, and the regrssion fix does not apply to
the 4.5.x branch.
ChangeLog: https://www.phpmyadmin.net/files/4.5.4.1/
2016-01-29 16:26:41 +00:00
Matthew Seaman
569198a034
Security Update to 4.5.4
...
This is a combination of feature- and security- updates. The PMA
project has not yet published the relevant advisories, so there is
very little information available about what the vulnerabilities are
and what versions they affect. PMSA-2016-1 to PMSA-2016-9 are
expected to be available at https://www.phpmyadmin.net/security/
shortly.
[Security] Multiple full path disclosure vulnerabilities, see PMASA-2016-1
[Security] Unsafe generation of CSRF token, see PMASA-2016-2
[Security] Multiple XSS vulnerabilities, see PMASA-2016-3
[Security] Insecure password generation in JavaScript, see PMASA-2016-4
[Security] Unsafe comparison of CSRF token, see PMASA-2016-5
[Security] Multiple full path disclosure vulnerabilities, see PMASA-2016-6
[Security] XSS vulnerability in normalization page, see PMASA-2016-7
[Security] Full path disclosure vulnerability in SQL parser, see PMASA-2016-8
[Security] XSS vulnerability in SQL editor, see PMASA-2016-9
VuXML entries to follow once the advisories are available.
ChangeLog: https://www.phpmyadmin.net/files/4.5.4/
MFH: 2016Q1
Security: https://www.phpmyadmin.net/security/PMASA-2016-1/
Security: https://www.phpmyadmin.net/security/PMASA-2016-2/
Security: https://www.phpmyadmin.net/security/PMASA-2016-3/
Security: https://www.phpmyadmin.net/security/PMASA-2016-4/
Security: https://www.phpmyadmin.net/security/PMASA-2016-5/
Security: https://www.phpmyadmin.net/security/PMASA-2016-6/
Security: https://www.phpmyadmin.net/security/PMASA-2016-7/
Security: https://www.phpmyadmin.net/security/PMASA-2016-8/
Security: https://www.phpmyadmin.net/security/PMASA-2016-9/
2016-01-28 07:37:59 +00:00
Matthew Seaman
7b3aff160b
Security update to 4.5.3.1
...
This update fixes regressions in 4.5.3 and addresses a path disclosure
vulnerability.
MFH: 2015Q4
Security: 88f75070-abcf-11e5-83d3-6805ca0b3d42
2015-12-26 13:01:43 +00:00
Matthew Seaman
a4e2f225ff
Update to 4.5.3
...
ChangeLog: https://www.phpmyadmin.net/files/4.5.3/
2015-12-23 20:41:32 +00:00
Matthew Seaman
9d4bfb4404
Update to 4.5.2:
...
ChangeLog: https://www.phpmyadmin.net/files/4.5.2/
2015-11-23 14:55:59 +00:00
Matthew Seaman
525f891aa0
Remove outdated comment. pkg(8) handles empty dirs just fine, and the
...
code was changed long ago to account for that.
2015-11-22 15:17:40 +00:00
Matthew Seaman
794b971ea0
Remove the APC option
...
The pecl-APC extension is not currently supported at the moment in
PHP-5.5, which is the minimum PHP version required by phpMyAdmin.
Also the 'animated progress bar' support doesn't need APC with PHP
5.4.x or above. (See question 2.9 in the PMA FAQ:
https://phpmyadmin.readthedocs.org/en/latest/faq.html#configuration
)
PR: 204659
Submitted by: sirdice (at) gmail.com
2015-11-18 13:38:14 +00:00
Mathieu Arnold
f350434f97
IGNORE_WITH_PHP=54 does not do anything, php 5.4 is called 5 here, so
...
add 5 to the list.
Sponsored by: Absolight
2015-11-13 15:54:09 +00:00
Matthew Seaman
fd8f68033d
Security update to 4.5.1
...
See https://www.phpmyadmin.net/security/PMASA-2015-5/
MFH: 2015Q4
Security: 08d11134-79c5-11e5-8987-6805ca0b3d42
2015-10-23 20:41:24 +00:00
Matthew Seaman
79947ef895
Update to 4.5.0.2
...
Another quick fix for a regression in 4.5.0
ChangeLog: https://www.phpmyadmin.net/files/4.5.0.2/
2015-09-26 14:30:38 +00:00
Matthew Seaman
682e6df513
Update to 4.5.0.1
...
This is a fix for a regression in 4.5.0:
- issue #11492 AUTO_INCREMENT statements are partly missing from exports
ChangeLog: https://www.phpmyadmin.net/files/4.5.0.1/
2015-09-24 09:20:56 +00:00
Matthew Seaman
8c0ede0305
Update to 4.5.0
...
This is the first release from the 4.5 branch, and a major update.
With this release, the minimum required version of PHP is php-5.5
ChangeLog: https://www.phpmyadmin.net/files/4.5.0/
2015-09-24 06:35:40 +00:00
Matthew Seaman
2e809f613f
Update to 4.4.15
...
This is the last routine (ie. other than security patches) release
from the 4.4.x series. The next update will be a major jump to the
4.5.x series.
ChangeLog: https://www.phpmyadmin.net/files/4.4.15/
2015-09-20 13:01:28 +00:00