Date: Tue, 30 Jun 2009 17:29:07 +0100 (BST) From: Matthew Seaman <m.seaman@infracaninophile.co.uk> To: FreeBSD-gnats-submit@FreeBSD.org Cc: secteam@FreeBSD.org Subject: ports/136189: [maintainer] databases/phpmyadmin -- security update to 3.2.0.1 Message-ID: <200906301629.n5UGT7Gr058831@happy-idiot-talk.infracaninophile.co.uk> Resent-Message-ID: <200906301630.n5UGU1mt047346@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 136189
>Category: ports
>Synopsis: [maintainer] databases/phpmyadmin -- security update to 3.2.0.1
>Confidential: no
>Severity: serious
>Priority: medium
>Responsible: freebsd-ports-bugs
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: maintainer-update
>Submitter-Id: current-users
>Arrival-Date: Tue Jun 30 16:30:01 UTC 2009
>Closed-Date:
>Last-Modified:
>Originator: Matthew Seaman
>Release: FreeBSD 7.2-STABLE i386
>Organization:
Infracaninophile
>Environment:
System: FreeBSD happy-idiot-talk.infracaninophile.co.uk 7.2-STABLE FreeBSD 7.2-STABLE #0: Sat Jun 13 17:37:55 BST 2009 root@happy-idiot-talk.infracaninophile.co.uk:/usr/obj/usr/src/sys/HAPPY-IDIOT-TALK i386
>Description:
Security update to version 3.2.0.1 due to a XSS vulnerability.
Announce message:
"Welcome to the first security release for phpMyAdmin 3.2.0.
Details will follow on http://phpmyadmin.net in the Security
section (see PMASA-2009-5).
In a hurry? you can visit
http://sourceforge.net/projects/phpmyadmin to download.
Marc Delisle, for the team"
Security Advisory:
http://www.phpmyadmin.net/home_page/security/PMASA-2009-5.php
Change Log:
http://sourceforge.net/project/shownotes.php?release_id=693468
>How-To-Repeat:
>Fix:
--- phpmyadmin.diff begins here ---
diff -Nur /usr/ports/databases/phpmyadmin/Makefile phpmyadmin/Makefile
--- /usr/ports/databases/phpmyadmin/Makefile 2009-06-16 06:33:53.000000000 +0100
+++ phpmyadmin/Makefile 2009-06-30 17:18:06.000000000 +0100
@@ -6,7 +6,7 @@
#
PORTNAME= phpMyAdmin
-DISTVERSION= 3.2.0
+DISTVERSION= 3.2.0.1
CATEGORIES= databases www
MASTER_SITES= SF/phpmyadmin
DISTNAME= ${PORTNAME}-${DISTVERSION}-all-languages
diff -Nur /usr/ports/databases/phpmyadmin/distinfo phpmyadmin/distinfo
--- /usr/ports/databases/phpmyadmin/distinfo 2009-06-16 06:33:53.000000000 +0100
+++ phpmyadmin/distinfo 2009-06-30 17:18:34.000000000 +0100
@@ -1,3 +1,3 @@
-MD5 (phpMyAdmin-3.2.0-all-languages.tar.bz2) = 54d398c505e36164edded0131df35f3f
-SHA256 (phpMyAdmin-3.2.0-all-languages.tar.bz2) = c47885dc902afa03268bcdb537799893e8f38e119c7a9327b596a6b1ac79cd08
-SIZE (phpMyAdmin-3.2.0-all-languages.tar.bz2) = 2687597
+MD5 (phpMyAdmin-3.2.0.1-all-languages.tar.bz2) = e6f19a8c286697c4dccfae574cd41826
+SHA256 (phpMyAdmin-3.2.0.1-all-languages.tar.bz2) = 222bf89da5bf58fd6abe0781c9a358f71baa473026fb0866ee24d3d720fb7132
+SIZE (phpMyAdmin-3.2.0.1-all-languages.tar.bz2) = 2688216
--- phpmyadmin.diff ends here ---
>Release-Note:
>Audit-Trail:
>Unformatted:
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200906301629.n5UGT7Gr058831>