Bug 108014 - [maintainer] databases/phpmyadmin security upgrade to 2.9.2
Summary: [maintainer] databases/phpmyadmin security upgrade to 2.9.2
Status: Closed FIXED
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: Normal Affects Only Me
Assignee: Cheng-Lung Sung
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2007-01-16 20:40 UTC by Matthew Seaman
Modified: 2007-01-17 02:50 UTC (History)
1 user (show)

See Also:


Attachments
phpmyadmin.diff (1.30 KB, patch)
2007-01-16 20:40 UTC, Matthew Seaman
no flags Details | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Matthew Seaman 2007-01-16 20:40:21 UTC
This is the final release of version 2.9.2, which is actually unchanged
from the preliminary 2.9.2.rc1 currently in ports.  That release was a
fast reaction to the vulnerabilities more fully documented with this
release.

Release Announcement: 

phpMyAdmin 2.9.2 - January 16, 2007
======================================

A set of PHP-scripts to administrate MySQL over the Web.
--------------------------------------------------------

Announcement
------------

The phpMyAdmin Project announces the immediate availability
of phpMyAdmin 2.9.2, a bugfix-only release containing security fixes.
See the Security section of phpmyadmin.net for details.

phpMyAdmin is a web administration tool for MySQL databases, intended to
handle a whole database server as well as a single database. Over the
years, it has become the most popular Web GUI for MySQL.


Fixes
-----
      * improved support for web clusters
      * deleting a user under MySQL 4.1.x
      * DELIMITER in export no longer commented out
      * export of query results and procedure definitions
      * detection of a binary column
      * problem on 64-bit systems
      * granting all privileges on a wildcard name
      * verification on encrypted zip files
      * security fixes

ChangeLog:

https://sourceforge.net/project/shownotes.php?release_id=478992
or
http://www.phpmyadmin.net/ChangeLog.txt

Advisories:

http://www.securityfocus.com/archive/1/453432
http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2007-1
http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2007-2

Note: 2.9.2.rc1 is also not vulnerable to the problems covered in
these advisories.  2.9.1.1 and earlier are.
Comment 1 Cheng-Lung Sung freebsd_committer freebsd_triage 2007-01-17 00:39:22 UTC
Responsible Changed
From-To: freebsd-ports-bugs->clsung

I'll take it.
Comment 2 dfilter service freebsd_committer freebsd_triage 2007-01-17 02:44:20 UTC
clsung      2007-01-17 02:44:14 UTC

  FreeBSD ports repository

  Modified files:
    databases/phpmyadmin Makefile distinfo 
  Log:
  - This is the final release of version 2.9.2, which is actually unchanged
    from the preliminary 2.9.2.rc1 currently in ports. That release was a
    fast reaction to the vulnerabilities more fully documented with this
    release.
  
  Fixes
  -----
  * improved support for web clusters
  * deleting a user under MySQL 4.1.x
  * DELIMITER in export no longer commented out
  * export of query results and procedure definitions
  * detection of a binary column
  * problem on 64-bit systems
  * granting all privileges on a wildcard name
  * verification on encrypted zip files
  * security fixes
  
  ChangeLog:      http://www.phpmyadmin.net/ChangeLog.txt
  PR:             ports/108014
  Submitted by:   maintainer (Matthew Seaman)
  Security:       http://www.securityfocus.com/archive/1/453432
  Security:       http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2007-1
  Security:       http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2007-2
  
  Revision  Changes    Path
  1.63      +2 -2      ports/databases/phpmyadmin/Makefile
  1.51      +3 -3      ports/databases/phpmyadmin/distinfo
_______________________________________________
cvs-all@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/cvs-all
To unsubscribe, send any mail to "cvs-all-unsubscribe@freebsd.org"
Comment 3 Cheng-Lung Sung freebsd_committer freebsd_triage 2007-01-17 02:44:26 UTC
State Changed
From-To: open->closed

Committed. Thank You.