FreshPorts -- The Place For Ports If you buy from Amazon USA, please support us by using this link.
Follow us
Blog
Twitter

I am looking for an LTO tape library. Do you have one to spare?
Commit found by message id
Sat, 26 Nov 2011
[ 09:14:38 dougb ] Original commit 
phpmyadmin databases files touched by this commit  An older version of this port was marked as vulnerable. Set of PHP-scripts to manage MySQL over the web
Security and bugfix update to 3.4.8-rc1

Announcement:

"Welcome to the first release candidate for phpMyAdmin 3.4.8, a bugfix
release with minor security corrections.

Please refer to the upcoming PMASA-2011-18 announcement on
http://www.phpmyadmin.net/home_page/security.

Marc Delisle, for the team"

Welcome to the first release candidate for phpMyAdmin 3.4.8, a bugfix
release with minor security corrections.

3.4.8.0 (not yet released)
- bug #3425230 [interface] enum data split at space char (more space to
  edit)
- bug #3426840 [interface] ENUM/SET editor can't handle commas in values
- bug #3427256 [interface] no links to browse/empty views and tables
- bug #3430377 [interface] Deleted search results remain visible
- bug #3428627 [import] ODS import ignores memory limits
- bug #3426836 [interface] Visual column separation
- bug #3428065 [parser] TRUE not recognized by parser
+ patch #3433770 [config] Make location of php-gettext configurable
- patch #3430291 [import] Handle conflicts in some open_basedir situations
- bug #3431427 [display] Dropdown results - setting NULL does not work
- patch #3428764 [edit] Inline edit on multi-server configuration
- patch #3437354 [core] Notice: Array to string conversion in PHP 5.4
- [interface] When ShowTooltipAliasTB is true, VIEW is wrongly shown as the
  view name in main panel db Structure page
- bug #3439292 [core] Fail to synchronize column with name of keyword
- bug #3425156 [interface] Add column after drop
- [interface] Avoid showing the password in phpinfo()'s output
- bug #3441572 [GUI] 'newer version of phpMyAdmin' message not shown in IE8
- bug #3407235 [interface] Entering the key through a lookup window does not
  reset NULL
- [security] Self-XSS on database names (Synchronize), see PMASA-2011-18
- [security] Self-XSS on database names (Operations/rename), see PMASA-2011-18
- [security] Self-XSS on column type (Create index), see PMASA-2011-18
- [security] Self-XSS on column type (table Search), see PMASA-2011-18
- [security] Self-XSS on invalid query (table overview), see PMASA-2011-18

PR:             ports/162873
Submitted by:   Matthew Seaman <m.seaman@infracaninophile.co.uk> (maintainer)
Feature safe:   yes

Number of ports [& non-ports] in this commit: 1

Showing files for just one port: databases/phpmyadmin

show all files

hide all files


2 files found
ActionRevisionLinksFile
modify 1.148 View diff View revision /ports/head/databases/phpmyadmin/Makefile
modify 1.124 View diff View revision /ports/head/databases/phpmyadmin/distinfo
Login
User Login
Create account

Servers and bandwidth provided by
New York Internet, SuperNews, and RootBSD

This site
What is FreshPorts?
About the authors
FAQ
How big is it?
The latest upgrade!
Privacy
Forums
Blog
Contact

Search
Enter Keywords:
 
more...

Latest Vulnerabilities
kdelibs3Jul 31
kdelibs4Jul 31
torJul 30
torJul 30
tor-develJul 30
i2pJul 28
i2pJul 28
i2pJul 28
bugzilla44Jul 25
apache22Jul 24
apache22-event-mpmJul 24
apache22-itk-mpmJul 24
apache22-peruser-mpmJul 24
apache22-worker-mpmJul 24
firefoxJul 23

11 vulnerabilities affecting 36 ports have been reported in the past 14 days

* - modified, not new

All vulnerabilities


Ports
Home
Categories
Deleted ports
Sanity Test Failures
Newsfeeds


Statistics
Graphs
NEW Graphs (Javascript)
Traffic

Calculated hourly:
Port count 24401
Broken 180
Deprecated 811
Ignore 515
Forbidden 16
Restricted 263
No CDROM 101
Vulnerable 27
Expired 5
Set to expire 798
Interactive 13
new 24 hours 5
new 48 hours9
new 7 days23
new fortnight37
new month112


Servers and bandwidth provided by
New York Internet, SuperNews, and RootBSD
Valid HTML, CSS, and RSS.
Copyright © 2000-2014 Dan Langille. All rights reserved.