Accepting request 253563 from home:AndreasStieger:branches:server:php:applications

phpMyAdmin 4.2.9.1 [bnc#899452] [CVE-2014-7217]

OBS-URL: https://build.opensuse.org/request/show/253563
OBS-URL: https://build.opensuse.org/package/show/server:php:applications/phpMyAdmin?expand=0&rev=145

phpMyAdmin-4.2.9-all-languages.tar.bz2

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:2800abb255157c5bd2c6845a2ad6864a8743cc2abcb899c58df1d02dfa6716fe
-size 6750322

phpMyAdmin-4.2.9.1-all-languages.tar.bz2

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:f43a43facf36ef72a6b2989da39d131a4e2467ad06597e820cbfc6fa3327abbc
+size 6969152

phpMyAdmin.changes

@@ -1,3 +1,13 @@
+-------------------------------------------------------------------
+Wed Oct  1 20:26:14 UTC 2014 - andreas.stieger@gmx.de
+
+- phpMyAdmin 4.2.9.1 [bnc#899452] [CVE-2014-7217]
+  Contains a fix for a cross-site scripting vulnerability in the
+  table search and table structure pages which could be trigged
+  with a crafted ENUM value 
+  - sf#4544 [security] XSS vulnerabilities in table search and
+    table structure pages
+
 -------------------------------------------------------------------
 Sat Sep 20 12:12:53 UTC 2014 - ecsos@schirra.net
 

phpMyAdmin.spec

@@ -34,7 +34,7 @@ Name:           phpMyAdmin
 Summary:        Administration of MySQL over the web
 License:        GPL-2.0+
 Group:          Productivity/Networking/Web/Frontends
-Version:        4.2.9
+Version:        4.2.9.1
 Release:        0
 Url:            http://www.phpMyAdmin.net
 Source0:        http://sourceforge.net/projects/phpmyadmin/files/%{name}-%{version}-all-languages.tar.bz2