kpriv/pkgsrc
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Updatep "phpmyadmin" package to version 2.11.7.1. Changes since 2.11.7:

Browse source 
- bug #1908719 [interface] New field cannot be auto-increment and
  primary key
- [dbi] Incorrect interpretation for some mysqli field flags
- bug #1910621 [display] part 1: do not display a TEXT utf8_bin
  as BLOB (fixed for mysqli extension only)
- [interface] sanitize the after_field parameter,
  thanks to Norman Hippert
- [structure] do not remove the BINARY attribute in drop-down
- bug #1955386 [session] Overriding session.hash_bits_per_character
- [interface] sanitize the table comments in table print view,
  thanks to Norman Hippert
- bug #1939031 Auto_Increment selected for TimeStamp by Default
- patch #1957998 [display] No tilde for InnoDB row counter when
  we know it for sure, thanks to Vladyslav Bakayev - dandy76
- bug #1955572 [display] alt text causes duplicated strings
- bug #1762029 [interface] Cannot upload BLOB into existing row
- bug #1981043 [export] HTML in exports getting corrupted,
  thanks to Jason Judge - jasonjudge
- bug #1936761 [interface] BINARY not treated as BLOB:
  update/delete issues
- protection against XSS when register_globals is on and .htaccess
  has no effect, thanks to Tim Starling
- bug #1996943 [export] Firefox 3 and .sql.gz (corrupted);
  detect Gecko 1.9, thanks to Juergen Wind
- (2.11.7.1)  [security] XSRF/CSRF by manipulating the db,
  convcharset and collation_connection parameters,
  thanks to YGN Ethical Hacker Group

This update fixes the security vulnerability reported in PMASA-2008-5.
This commit is contained in:
tron 2008-07-17 15:55:16 +00:00
parent 8f2f449c33
commit c6300a127c
2 changed files with 6 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
databases/phpmyadmin/Makefile
View file

@ -1,4 +1,4 @@
# $NetBSD: Makefile,v 1.72 2008/06/28 11:11:15 tron Exp $
# $NetBSD: Makefile,v 1.73 2008/07/17 15:55:16 tron Exp $
DISTNAME= phpMyAdmin-${DIST_VERSION}-all-languages
PKGNAME= phpmyadmin-${DIST_VERSION:S/-//}
@ -22,7 +22,7 @@ MESSAGE_SUBST+= CONF_INC_PHP=${CONF_INC_PHP} PMCONFFILE=${PMCONFFILE:Q} \
USE_TOOLS+= perl:run
CONF_INC_PHP= ${PREFIX}/share/phpmyadmin/config.inc.php
DIST_VERSION= 2.11.7
DIST_VERSION= 2.11.7.1
DOC_FILES= CREDITS ChangeLog \
Documentation.txt INSTALL LICENSE README \
RELEASE-DATE-${DIST_VERSION} TODO

8
databases/phpmyadmin/distinfo
View file

@ -1,5 +1,5 @@
$NetBSD: distinfo,v 1.35 2008/06/28 11:11:15 tron Exp $
$NetBSD: distinfo,v 1.36 2008/07/17 15:55:16 tron Exp $
SHA1 (phpMyAdmin-2.11.7-all-languages.tar.bz2) = 4663b6cd45471ba8547e35e47b10fc8fd1622052
RMD160 (phpMyAdmin-2.11.7-all-languages.tar.bz2) = 117ce8dd3a6f932e80a2355a221623d68e38eb36
Size (phpMyAdmin-2.11.7-all-languages.tar.bz2) = 3098110 bytes
SHA1 (phpMyAdmin-2.11.7.1-all-languages.tar.bz2) = 1e5b4e6b1127b41ebbd986b030b4dda00fe90edc
RMD160 (phpMyAdmin-2.11.7.1-all-languages.tar.bz2) = 2e9adb438c9212ae4e1be44ed9d10f8b981d8b6e
Size (phpMyAdmin-2.11.7.1-all-languages.tar.bz2) = 3098663 bytes