[pkgsrc/pkgsrc-2008Q2]: pkgsrc/databases/phpmyadmin pullup ticket #2451 reque...

[rtr <rtr%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/a1dcdbbb9776
branches:  pkgsrc-2008Q2
changeset: 544186:a1dcdbbb9776
user:      rtr <rtr%pkgsrc.org@localhost>
date:      Fri Jul 18 10:05:00 2008 +0000

description:
pullup ticket #2451 requested by tron
phpmyadmin: package update for bug and security fixes

revisions pulled up:
pkgsrc/databases/phpmyadmin/Makefile    1.73
pkgsrc/databases/phpmyadmin/distinfo    1.36

Module Name:    pkgsrc
Committed By:   tron
Date:           Thu Jul 17 15:55:16 UTC 2008

   Modified Files:
        pkgsrc/databases/phpmyadmin: Makefile distinfo

   Log Message:
   Updatep "phpmyadmin" package to version 2.11.7.1. Changes since 2.11.7:
   - bug #1908719 [interface] New field cannot be auto-increment and
     primary key
   - [dbi] Incorrect interpretation for some mysqli field flags
   - bug #1910621 [display] part 1: do not display a TEXT utf8_bin
     as BLOB (fixed for mysqli extension only)
   - [interface] sanitize the after_field parameter,
     thanks to Norman Hippert
   - [structure] do not remove the BINARY attribute in drop-down
   - bug #1955386 [session] Overriding session.hash_bits_per_character
   - [interface] sanitize the table comments in table print view,
     thanks to Norman Hippert
   - bug #1939031 Auto_Increment selected for TimeStamp by Default
   - patch #1957998 [display] No tilde for InnoDB row counter when
     we know it for sure, thanks to Vladyslav Bakayev - dandy76
   - bug #1955572 [display] alt text causes duplicated strings
   - bug #1762029 [interface] Cannot upload BLOB into existing row
   - bug #1981043 [export] HTML in exports getting corrupted,
     thanks to Jason Judge - jasonjudge
   - bug #1936761 [interface] BINARY not treated as BLOB:
     update/delete issues
   - protection against XSS when register_globals is on and .htaccess
     has no effect, thanks to Tim Starling
   - bug #1996943 [export] Firefox 3 and .sql.gz (corrupted);
     detect Gecko 1.9, thanks to Juergen Wind
   - (2.11.7.1)  [security] XSRF/CSRF by manipulating the db,
     convcharset and collation_connection parameters,
     thanks to YGN Ethical Hacker Group

   This update fixes the security vulnerability reported in PMASA-2008-5.

diffstat:

 databases/phpmyadmin/Makefile |  4 ++--
 databases/phpmyadmin/distinfo |  8 ++++----
 2 files changed, 6 insertions(+), 6 deletions(-)

diffs (31 lines):

diff -r 49a1a2bfa96d -r a1dcdbbb9776 databases/phpmyadmin/Makefile
--- a/databases/phpmyadmin/Makefile     Fri Jul 18 09:15:24 2008 +0000
+++ b/databases/phpmyadmin/Makefile     Fri Jul 18 10:05:00 2008 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile,v 1.72 2008/06/28 11:11:15 tron Exp $
+# $NetBSD: Makefile,v 1.72.4.1 2008/07/18 10:05:00 rtr Exp $
 
 DISTNAME=      phpMyAdmin-${DIST_VERSION}-all-languages
 PKGNAME=       phpmyadmin-${DIST_VERSION:S/-//}
@@ -22,7 +22,7 @@
 USE_TOOLS+=    perl:run
 
 CONF_INC_PHP=  ${PREFIX}/share/phpmyadmin/config.inc.php
-DIST_VERSION=  2.11.7
+DIST_VERSION=  2.11.7.1
 DOC_FILES=     CREDITS ChangeLog \
                Documentation.txt INSTALL LICENSE README \
                RELEASE-DATE-${DIST_VERSION} TODO
diff -r 49a1a2bfa96d -r a1dcdbbb9776 databases/phpmyadmin/distinfo
--- a/databases/phpmyadmin/distinfo     Fri Jul 18 09:15:24 2008 +0000
+++ b/databases/phpmyadmin/distinfo     Fri Jul 18 10:05:00 2008 +0000
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.35 2008/06/28 11:11:15 tron Exp $
+$NetBSD: distinfo,v 1.35.4.1 2008/07/18 10:05:00 rtr Exp $
 
-SHA1 (phpMyAdmin-2.11.7-all-languages.tar.bz2) = 4663b6cd45471ba8547e35e47b10fc8fd1622052
-RMD160 (phpMyAdmin-2.11.7-all-languages.tar.bz2) = 117ce8dd3a6f932e80a2355a221623d68e38eb36
-Size (phpMyAdmin-2.11.7-all-languages.tar.bz2) = 3098110 bytes
+SHA1 (phpMyAdmin-2.11.7.1-all-languages.tar.bz2) = 1e5b4e6b1127b41ebbd986b030b4dda00fe90edc
+RMD160 (phpMyAdmin-2.11.7.1-all-languages.tar.bz2) = 2e9adb438c9212ae4e1be44ed9d10f8b981d8b6e
+Size (phpMyAdmin-2.11.7.1-all-languages.tar.bz2) = 3098663 bytes