2 Commits

Author SHA1 Message Date
Wenzong Fan
b12220887e phpmyadmin: fix CVE-2015-7873
The redirection feature in url.php in phpMyAdmin 4.4.x before 4.4.15.1
and 4.5.x before 4.5.1 allows remote attackers to spoof content via the
url parameter.

Backport upstream commit to fix it:
cd09765675

Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-12-18 12:44:42 +01:00
Kai Kang
4e8d16ea6e phpmyadmin: 4.4.9 -> 4.5.0.2
Upgrade phpmyadmin from 4.4.9 to 4.5.0.2 and SRC_URI is updated.

Accoring to release note, there is NO API changes for 4.5.0.x serial. So
upgrade to 4.5.0.2 rather than 4.4.15 which will only support for
security fixes only.

And license file has some text update. See:
9d080a482f

Change files owner to fix [host-user-contaminated] warnings.

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-10-23 12:53:23 +02:00