Accepting request 247012 from server:php:applications

1

OBS-URL: https://build.opensuse.org/request/show/247012
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/phpMyAdmin?expand=0&rev=72
This commit is contained in:
Stephan Kulow 2014-09-03 16:22:38 +00:00 committed by Git OBS Bridge
commit 0cba7fa90c
4 changed files with 49 additions and 10 deletions

View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:4079ac9e5e51153682bba24a89d615043ae10d4d527d4dce73f18d5721d38c51
size 6707181

View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:f2cf7ae0d4cc2e38f5bac6dbcb281e56e9738a669f7952e0c79fb09309f9f349
size 6748400

View File

@ -1,3 +1,30 @@
-------------------------------------------------------------------
Sun Aug 31 21:52:38 UTC 2014 - ecsos@schirra.net
- update to 4.2.8 (2014-08-31)
- sf#4516 Odd export behavior
- sf#4519 Uncaught TypeError: Cannot read property 'success'
of null
- sf#4520 sql.js: cannot read property
- sf#4521 Initially allowed chart types do not match selected
data
- sf#4518 Export to SQL: CREATE TABLE option AUTO_INCREMENT
ignored
- sf#4522 Duplicate column names while assigning index
- sf#4487 Export of partitioned table does not import
- fix bug server_privileges.js: cannot read property
- sf#4527 Importing ODS files with column names having trailing
spaces fails
- sf#4413 Navigation Error in Nav Tree for Search Results Past
the First Page
- fix bug functions.js: Cannot read property 'replace' of undefined
-------------------------------------------------------------------
Fri Aug 29 14:58:31 UTC 2014 - chris@computersalat.de
- fix for bnc#894107
* fix post/postun for systemd
------------------------------------------------------------------- -------------------------------------------------------------------
Tue Aug 19 21:46:14 UTC 2014 - chris@computersalat.de Tue Aug 19 21:46:14 UTC 2014 - chris@computersalat.de
@ -9,14 +36,14 @@ Mon Aug 18 18:13:29 UTC 2014 - andreas.stieger@gmx.de
- fix for bnc#892401 - fix for bnc#892401
* update to 4.2.7.1 * update to 4.2.7.1
* PMASA-2014-8 ( CVE-2014-5273, CWE-661 CWE-79) * PMASA-2014-8 (CVE-2014-5273, CWE-661 CWE-79)
http://www.phpmyadmin.net/home_page/security/PMASA-2014-8.php http://www.phpmyadmin.net/home_page/security/PMASA-2014-8.php
- sf#4501 [security] XSS in table browse page - sf#4501 [security] XSS in table browse page
- sf#4502 [security] Self-XSS in enum value editor - sf#4502 [security] Self-XSS in enum value editor
- sf#4503 [security] Self-XSSes in monitor - sf#4503 [security] Self-XSSes in monitor
- sf#4504 [security] Self-XSS in query charts - sf#4504 [security] Self-XSS in query charts
- sf#4517 [security] XSS in relation view - sf#4517 [security] XSS in relation view
* PMASA-2014-9 ( CVE-2014-5274, CWE-661 CWE-79) * PMASA-2014-9 (CVE-2014-5274, CWE-661 CWE-79)
http://www.phpmyadmin.net/home_page/security/PMASA-2014-9.php http://www.phpmyadmin.net/home_page/security/PMASA-2014-9.php
- sf#4505 [security] XSS in view operations page - sf#4505 [security] XSS in view operations page
@ -51,18 +78,18 @@ Fri Jul 18 17:24:08 UTC 2014 - ecsos@schirra.net
creation creation
- sf#4459 First few characters of database name aren't - sf#4459 First few characters of database name aren't
clickable when expanded clickable when expanded
- fix for PMASA-2014-4 ( CVE-2014-4954, CWE-661, CWE-79 ) - fix for PMASA-2014-4 (CVE-2014-4954, CWE-661, CWE-79)
http://www.phpmyadmin.net/home_page/security/PMASA-2014-4.php http://www.phpmyadmin.net/home_page/security/PMASA-2014-4.php
* sf#4486 [security] XSS injection due to unescaped table * sf#4486 [security] XSS injection due to unescaped table
comment comment
- fix for PMASA-2014-5 ( CVE-2014-4955, CWE-661, CWE-79 ) - fix for PMASA-2014-5 (CVE-2014-4955, CWE-661, CWE-79)
http://www.phpmyadmin.net/home_page/security/PMASA-2014-5.php http://www.phpmyadmin.net/home_page/security/PMASA-2014-5.php
* sf#4488 [security] XSS injection due to unescaped table name * sf#4488 [security] XSS injection due to unescaped table name
(triggers) (triggers)
- fix for PMASA-2014-6 ( CVE-2014-4986, CWE-661, CWE-79 ) - fix for PMASA-2014-6 (CVE-2014-4986, CWE-661, CWE-79)
http://www.phpmyadmin.net/home_page/security/PMASA-2014-6.php http://www.phpmyadmin.net/home_page/security/PMASA-2014-6.php
* sf#4492 [security] XSS in AJAX confirmation messages * sf#4492 [security] XSS in AJAX confirmation messages
- fix for PMASA-2014-7 ( CVE-2014-4987, CWE-661 ) - fix for PMASA-2014-7 (CVE-2014-4987, CWE-661)
http://www.phpmyadmin.net/home_page/security/PMASA-2014-7.php http://www.phpmyadmin.net/home_page/security/PMASA-2014-7.php
* sf#4491 [security] Missing validation for accessing User * sf#4491 [security] Missing validation for accessing User
groups feature groups feature

View File

@ -31,10 +31,14 @@ Name: phpMyAdmin
%define ap_grp nogroup %define ap_grp nogroup
%endif %endif
%if 0%{?suse_version} >= 1210
%define has_systemd 1
%endif
Summary: Administration of MySQL over the web Summary: Administration of MySQL over the web
License: GPL-2.0+ License: GPL-2.0+
Group: Productivity/Networking/Web/Frontends Group: Productivity/Networking/Web/Frontends
Version: 4.2.7.1 Version: 4.2.8
Release: 0 Release: 0
Url: http://www.phpMyAdmin.net Url: http://www.phpMyAdmin.net
Source0: http://sourceforge.net/projects/phpmyadmin/files/%{name}-%{version}-all-languages.tar.bz2 Source0: http://sourceforge.net/projects/phpmyadmin/files/%{name}-%{version}-all-languages.tar.bz2
@ -151,10 +155,18 @@ popd
# set PmaAbsoluteUri ### generate blowfish secret # set PmaAbsoluteUri ### generate blowfish secret
%{__sed} -i -e "s,@FQDN@,$(cat /etc/HOSTNAME)," \ %{__sed} -i -e "s,@FQDN@,$(cat /etc/HOSTNAME)," \
-e "s/\\\$cfg\['blowfish_secret'\] = ''/\$cfg['blowfish_secret'] = '`pwgen -s -1 46`'/" %{pma_config} -e "s/\\\$cfg\['blowfish_secret'\] = ''/\$cfg['blowfish_secret'] = '`pwgen -s -1 46`'/" %{pma_config}
%if 0%{?has_systemd}
%service_add_post apache2.service
%else
%restart_on_update apache2 %restart_on_update apache2
%endif
%postun %postun
%if 0%{?has_systemd}
%service_del_postun apache2.service
%else
%restart_on_update apache2 %restart_on_update apache2
%endif
%clean %clean
%{__rm} -rf $RPM_BUILD_ROOT %{__rm} -rf $RPM_BUILD_ROOT