Security and bug-fix update to version 3.4.4 From the announce message: "Welcome to phpMyAdmin 3.4.4, a bugfix and security release, and to phpMyAdmin 3.3.10.4, a security release. Please refer to the upcoming PMASA-2011-13 announcements on http://www.phpmyadmin.net/home_page/security. Details will appear on http://phpmyadmin.net. In a hurry? you can visit http://sourceforge.net/projects/phpmyadmin to download. Marc Delisle, for the team" Security problem (CVE-2011-3181) is "Multiple XSS in the Tracking feature." ChangeLog: http://sourceforge.net/projects/phpmyadmin/files/phpMyAdmin/3.4.4/phpMyAdmin-3.4.4.html/download Welcome to phpMyAdmin 3.4.4, a bugfix and security release. 3.4.4.0 (2011-08-24) - bug #3323060 [parser] SQL parser breaks AJAX requests if query has unclosed qu otes - bug #3323101 [parser] Invalid escape sequence in SQL parser - bug #3348995 [config] $cfg['Export']['asfile'] set to false does not select as Text option - bug #3340151 [export] Working SQL query exports error page - bug #3353649 [interface] "Create an index on X columns" form not validated - bug #3350790 [interface] JS error in Table->Structure->Index->Edit - bug #3353811 [interface] Info message has "error" class - bug #3357837 [interface] TABbing through a NULL field in the inline mode reset s NULL - remove version number in /setup - bug #3367993 [usability] Missing "Generate Password" button - bug #3363221 [display] Missing Server Parameter on inline sql query - bug #3367986 [navi] Drop field -> lost active table - remove misleading comment on the "Rename database" interface - bug #3374374 [interface] Fix footnote for inexact count while browsing - bug #3372807 [interface] Fix security warning link in setup - bug #3374347 [display] Backquotes in normal text on import page - bug #3358750 [core] With Suhosin, urls are too long in edit links - [security] Missing sanitization on the table, column and index names leads to XSS vulnerabilities, see PMASA-2011-13
dougb 2011-08-24 21:04:45 UTC FreeBSD ports repository Modified files: databases/phpmyadmin Makefile distinfo Log: Security and bug-fix update to version 3.4.4 From the announce message: Welcome to phpMyAdmin 3.4.4, a bugfix and security release Please refer to the upcoming PMASA-2011-13 announcements on http://www.phpmyadmin.net/home_page/security. Security problem (CVE-2011-3181) is "Multiple XSS in the Tracking feature." ChangeLog: http://sourceforge.net/projects/phpmyadmin/files/phpMyAdmin/3.4.4/phpMyAdmin-3.4.4.html/download PR: ports/160156 Submitted by: maintainer Revision Changes Path 1.141 +1 -1 ports/databases/phpmyadmin/Makefile 1.118 +2 -2 ports/databases/phpmyadmin/distinfo _______________________________________________ cvs-all@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/cvs-all To unsubscribe, send any mail to "cvs-all-unsubscribe@freebsd.org"
State Changed From-To: open->closed Committed, thanks for being so quick on this one. :)
Responsible Changed From-To: freebsd-ports-bugs->dougb I committed the change.