Accepting request 307063 from home:ecsos:server

security issue
update to 4.4.6.1

OBS-URL: https://build.opensuse.org/request/show/307063
OBS-URL: https://build.opensuse.org/package/show/server:php:applications/phpMyAdmin?expand=0&rev=208

phpMyAdmin-4.4.6-all-languages.tar.bz2

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:ff27f8182cb460bd64099ba94cabd359490020816a0c432a5d433a2cf534bb27
-size 7615848

phpMyAdmin-4.4.6.1-all-languages.tar.bz2

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:44ad431a27ad4644745ad27fc3c290fe2b24cb550e385cb2647ccb076fcd2b00
+size 7615442

phpMyAdmin.changes

@@ -1,3 +1,17 @@
+-------------------------------------------------------------------
+Wed May 13 17:51:57 UTC 2015 - ecsos@opensuse.org
+
+- update 4.4.6.1 (2015-05-13)
+  This update fixes several vulnerabilities
+- Security fixes:
+  * PMASA-2015-2 (CVE-2015-3902, CWE-661 CWE-352)
+    http://www.phpmyadmin.net/home_page/security/PMASA-2015-2.php
+    - sf#4899 [security] CSRF vulnerability in setup
+  * PMASA-2015-3 ( CVE-2015-3903, CWE-661 CWE-295)
+    http://www.phpmyadmin.net/home_page/security/PMASA-2015-3.php
+    - sf#4900 [security] Vulnerability allowing man-in-the-middle 
+      attack
+
 -------------------------------------------------------------------
 Thu May  7 15:45:44 UTC 2015 - ecsos@opensuse.org
 

phpMyAdmin.spec

@@ -34,7 +34,7 @@ Name:           phpMyAdmin
 Summary:        Administration of MySQL over the web
 License:        GPL-2.0+
 Group:          Productivity/Networking/Web/Frontends
-Version:        4.4.6
+Version:        4.4.6.1
 Release:        0
 Url:            http://www.phpMyAdmin.net
 Source0:        http://sourceforge.net/projects/phpmyadmin/files/%{name}-%{version}-all-languages.tar.bz2