Accepting request 257926 from home:AndreasStieger:branches:server:php:applications

phpMyAdmin 4.2.10.1 [boo#902154] [CVE-2014-8326]

OBS-URL: https://build.opensuse.org/request/show/257926
OBS-URL: https://build.opensuse.org/package/show/server:php:applications/phpMyAdmin?expand=0&rev=149

phpMyAdmin-4.2.10-all-languages.tar.bz2

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:0421bbc29cb8308fb5f0e754f6a00db492c09d004fafd8518433ad1cb10406f6
-size 6751219

phpMyAdmin-4.2.10.1-all-languages.tar.bz2

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:4d4cad2ec35a7fee20cd08840930e2aa1a671a8fae52dd1d4a5c6931fad72550
+size 6980093

phpMyAdmin.changes

@@ -1,3 +1,13 @@
+-------------------------------------------------------------------
+Tue Oct 21 22:59:45 UTC 2014 - andreas.stieger@gmx.de
+
+- phpMyAdmin 4.2.10.1 [boo#902154] [CVE-2014-8326]
+  This release fixes cross-site scripting vulnerabilities in the
+  SQL debug output and server monitor pages. This developer option
+  is not enabled by default.
+  - sf#4562 [security] XSS in debug SQL output
+  - sf#4563 [security] XSS in monitor query analyzer
+
 -------------------------------------------------------------------
 Sat Oct 11 15:34:28 UTC 2014 - ecsos@schirra.net
 

phpMyAdmin.spec

@@ -34,7 +34,7 @@ Name:           phpMyAdmin
 Summary:        Administration of MySQL over the web
 License:        GPL-2.0+
 Group:          Productivity/Networking/Web/Frontends
-Version:        4.2.10
+Version:        4.2.10.1
 Release:        0
 Url:            http://www.phpMyAdmin.net
 Source0:        http://sourceforge.net/projects/phpmyadmin/files/%{name}-%{version}-all-languages.tar.bz2