From 6b530d936fcbf48bfe4a621d0ad2b3e61e728945 Mon Sep 17 00:00:00 2001 From: Roy Li Date: Thu, 30 Oct 2014 13:37:27 +0800 Subject: phpmyadmin: fix for Security Advisory CVE-2014-7217 Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.4, 4.1.x before 4.1.14.5, and 4.2.x before 4.2.9.1 allow remote authenticated users to inject arbitrary web script or HTML via a crafted ENUM value that is improperly handled during rendering of the (1) table search or (2) table structure page, related to libraries/TableSearch.class.php and libraries/Util.class.php. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-7217 Signed-off-by: Roy Li --- meta-webserver/recipes-php/phpmyadmin/phpmyadmin_4.2.7.bb | 1 + 1 file changed, 1 insertion(+) (limited to 'meta-webserver/recipes-php/phpmyadmin/phpmyadmin_4.2.7.bb') diff --git a/meta-webserver/recipes-php/phpmyadmin/phpmyadmin_4.2.7.bb b/meta-webserver/recipes-php/phpmyadmin/phpmyadmin_4.2.7.bb index 447b77884d..49ca7da4f0 100644 --- a/meta-webserver/recipes-php/phpmyadmin/phpmyadmin_4.2.7.bb +++ b/meta-webserver/recipes-php/phpmyadmin/phpmyadmin_4.2.7.bb @@ -8,6 +8,7 @@ LIC_FILES_CHKSUM = "file://LICENSE;md5=eb723b61539feef013de476e68b5c50a \ SRC_URI = "${SOURCEFORGE_MIRROR}/phpmyadmin/phpMyAdmin/${PV}/phpMyAdmin-${PV}-all-languages.tar.xz \ file://0001-bug-4504-security-Self-XSS-in-query-charts.patch \ file://0001-bug-4505-security-XSS-in-view-operations-page.patch \ + file://0001-Bug-4544-additional-fix-for-4.2.x.patch \ file://apache.conf" SRC_URI[md5sum] = "0dcd755450dac819f33502590c88ad29" -- cgit v1.2.3-54-g00ecf