Accepting request 356793 from server:php:applications

1

OBS-URL: https://build.opensuse.org/request/show/356793
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/phpMyAdmin?expand=0&rev=120

phpMyAdmin-4.5.3.1-all-languages.tar.xz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:75be3589b5e4800afb21581761478ddc5b888d6a09d5235a0ba997401d04fc00
-size 5757736

phpMyAdmin-4.5.3.1-all-languages.tar.xz.asc

@@ -1,17 +0,0 @@
------BEGIN PGP SIGNATURE-----
-Version: GnuPG v1
-
-iQIcBAABAgAGBQJWfaJRAAoJEP78ZdGBr2RKy1QP/jjSHIKkyTX+RG6BFySayK02
-0kN2G4WS9BtcGCtwEVVo5HmnQ3+KRw8U03wIiDhK7aODKsZqfShSl/VHRFo1X2n3
-AGkcjtQ/bM8ClxF5RfvP5z22L9ChEGaN7To9xV3Xrq9v7KFA0GAQGtC6JojHqZn2
-diOxB6M7x2Uxa7faF4u+p5DQMzB7oyjDBwFcKTs26K3YNRXpOFVnQlt0jjGAQF3w
-LZByoXrx40CmIDgw88vPuQifHQKz/thA7PAPIrDGq8jyNXTAIncFChahqBbYUsFg
-RmSBe/2K0UYRd5HGUCA984r9TNbp4DAoA88SJf6rgzy2ZozXhXjW/M7k0OlBt4np
-W5SZ1RmrMdYStzAvSZ98zglXJr7uxEJxthGRZ8+QiUVt8IS5DGHHQmyg4Wc+xWWG
-BtLl2hPsm3QCy1dDIj5QUOcdCEESTFhZ0x/43vt8jGIlp6rCxA6j+Mi8cAcA8VSU
-qnN9BRs3PE3kU862EgTeTmQIMZL5Od2il3OHamXaaLD62DmbitjjnrbHXpP2AfML
-gUDr61AlmVBKhrlqVDwREsKwJgI3xXA3iWFdl+B8ixEyMvVLUbpALGk/CvzYJ5qp
-FIgsk6mfw/78JfBWd0eIgKMP6ICq9Og0ehVMsD1yIqnmQkaSdSENHb2Z4cGmeywa
-f2HteGhZ0/6wVFODnJF6
-=PNwT
------END PGP SIGNATURE-----

phpMyAdmin-4.5.4.1-all-languages.tar.xz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:4f79a1e3687ed6976903b0fab6a29f960e657e4eb4c9e8a9b92bcf4f1d57194d
+size 5810548

phpMyAdmin-4.5.4.1-all-languages.tar.xz.asc

@@ -0,0 +1,17 @@
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v1
+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+=Z4nD
+-----END PGP SIGNATURE-----

phpMyAdmin.changes

@@ -1,3 +1,26 @@
+-------------------------------------------------------------------
+Sat Jan 30 08:43:24 UTC 2016 - ecsos@opensuse.org
+
+- update to 4.5.4.1 (2016-01-28)
+  - gh#11892 Error with PMA 4.4.15.3
+  - gh#11896 Remove hard dependency on phpseclib
+
+-------------------------------------------------------------------
+Thu Jan 28 18:20:05 UTC 2016 - astieger@suse.com
+
+- phpMyAdmin 4.5.4
+  The followinng vulnerabilities were fixed: (boo#964024)
+  * CVE-2016-2038: Multiple full path disclosure vulnerabilities
+  * CVE-2016-2039: Unsafe generation of XSRF/CSRF token
+  * CVE-2016-2040: Multiple XSS vulnerabilities
+  * CVE-2016-1927: Insecure password generation in JavaScript
+  * CVE-2016-2041: Unsafe comparison of XSRF/CSRF token
+  * CVE-2016-2042: Multiple full path disclosure vulnerabilities
+  * CVE-2016-2043: XSS vulnerability in normalization page
+  * CVE-2016-2044: Full path disclosure vulnerability in SQL parser
+  * CVE-2016-2045: XSS vulnerability in SQL editor
+- update upstream singing keyring
+
 -------------------------------------------------------------------
 Sun Jan 10 23:40:38 UTC 2016 - astieger@suse.com
 

phpMyAdmin.spec

@@ -29,7 +29,7 @@
 %define ap_grp nogroup
 %endif
 Name:           phpMyAdmin
-Version:        4.5.3.1
+Version:        4.5.4.1
 Release:        0
 Summary:        Administration of MySQL over the web
 License:        GPL-2.0+
@@ -37,7 +37,8 @@ Group:          Productivity/Networking/Web/Frontends
 Url:            https://www.phpMyAdmin.net/
 Source0:        https://files.phpmyadmin.net/phpMyAdmin/%{version}/%{name}-%{version}-all-languages.tar.xz
 Source1:        https://files.phpmyadmin.net/phpMyAdmin/%{version}/%{name}-%{version}-all-languages.tar.xz.asc
-Source2:        %{name}.keyring
+# http://docs.phpmyadmin.net/en/latest/setup.html#verifying-phpmyadmin-releases
+Source2:        https://files.phpmyadmin.net/phpmyadmin.keyring#/%{name}.keyring
 Source3:        %{name}.http
 Source100:      %{name}-rpmlintrc
 # Fix-SuSE: provide useful default config