Path to this page:
Subject: CVS commit: [pkgsrc-2020Q1] pkgsrc/databases/phpmyadmin
From: Benny Siegert
Date: 2020-04-22 11:52:05
Message id: 20200422095206.05E5FFB27@cvs.NetBSD.org
Log Message:
Pullup ticket #6163 - requested by taca
databases/phpmyadmin: security fix
Revisions pulled up:
- databases/phpmyadmin/Makefile 1.163
- databases/phpmyadmin/PLIST 1.51
- databases/phpmyadmin/distinfo 1.113
---
Module Name: pkgsrc
Committed By: tm
Date: Wed Apr 1 08:36:16 UTC 2020
Modified Files:
pkgsrc/databases/phpmyadmin: Makefile PLIST distinfo
Log Message:
phpmyadmin: update to 4.9.5
4.9.5 (2020-03-20)
- issue [security] Fix SQL injection with certain usernames (PMASA-2020-2)
- issue [security] Fix SQL injection in particular search situations \
(PMASA-2020-3)
- issue [security] Fix SQL injection and XSS flaw (PMASA-2020-4)
- issue Deprecate "options" for the external transformation; \
options must now be hard-coded along with the program name directly in the file.
Files: