- Git - lists.phpmyadmin.net

[Phpmyadmin-git] [SCM] phpMyAdmin branch, unittesting, created. RELEASE_3_4_3_1-6549-gd17aab5
by Herman van Rink 05 Jul '11

05 Jul '11

The branch, unittesting has been created at d17aab53e4fd3a9f45428e86864c8a985e2a0100 (commit) - Log ----------------------------------------------------------------- commit d17aab53e4fd3a9f45428e86864c8a985e2a0100 Author: Herman van Rink <rink(a)initfour.nl> Date: Tue Jul 5 08:36:18 2011 +0200 Disabled two blowfish tests due to differences in the initialization factor between systems commit cf5d62b7ca87c463d831ad0a8c2c31aca5c0b606 Author: Herman van Rink <rink(a)initfour.nl> Date: Tue Jul 5 08:35:15 2011 +0200 Code style commit 0c5c137403311e0e34f9ca32eea6f9f6672f4ed6 Merge: 9e8e70f0a1d21eaab1b3256c2249721150a93c7e 7087e74c63dd4460e3dff2d8986978aa014ce23b Author: Herman van Rink <rink(a)initfour.nl> Date: Tue Jul 5 08:24:41 2011 +0200 Merge remote-tracking branch 'zarubin/master' into unittesting commit 7087e74c63dd4460e3dff2d8986978aa014ce23b Merge: e31ee99f7e1f3a2ddde3cdca06af6ab0fa437ece 64e4f9fe0ed661e16172cc354e5dfd0b9111342e Author: Zarubin Stas <zarubin(a)zsv.org.ua> Date: Mon Jul 4 04:02:38 2011 +0300 Merge remote-tracking branch 'upstream/master' commit e31ee99f7e1f3a2ddde3cdca06af6ab0fa437ece Merge: f05749656d8aad37cf52c11fc9fa5d187c3f8f8c d5dd8a2d37f0fab931df449d4c6a744821a78afb Author: Zarubin Stas <zarubin.stas(a)gmail.com> Date: Fri Jul 1 22:39:49 2011 +0300 Merge remote-tracking branch 'upstream/master' commit f05749656d8aad37cf52c11fc9fa5d187c3f8f8c Author: Zarubin Stas <zarubin.stas(a)gmail.com> Date: Fri Jul 1 22:36:54 2011 +0300 Fix for PMA_headerLocation_test commit 0e2e973f6c91418b26e65e639d597e56bf5cfde9 Author: Zarubin Stas <zarubin.stas(a)gmail.com> Date: Fri Jul 1 18:53:24 2011 +0300 Set is_ajax_request to true to avoid notice - "Automatically appended backtick to the end of query!" for queries with unclosed quotes commit d8372daa55fc91ee035a07dcef83dd96d1ace837 Author: Zarubin Stas <zarubin.stas(a)gmail.com> Date: Wed Jun 29 20:20:27 2011 +0300 Add Apache Ant build configuration. commit 52b0206a0c910f90e298613d0037646e43045c12 Merge: f7d7102d2fc595f837f778fe18488251bf980229 46c40093d7f21906e8c92cf1c5de7f1f2936ff35 Author: Zarubin Stas <zarubin.stas(a)gmail.com> Date: Wed Jun 29 20:10:05 2011 +0300 Merge remote-tracking branch 'upstream/master' commit f7d7102d2fc595f837f778fe18488251bf980229 Author: Zarubin Stas <zarubin.stas(a)gmail.com> Date: Wed Jun 29 20:06:27 2011 +0300 - Unit Test grouped by library directory - Added configuration file phpunit.xml.dist and bootstraper-dist.php - Ignoring phpunit.xml, bootstraper.php and build/ ----------------------------------------------------------------------- hooks/post-receive -- phpMyAdmin

1 0

[Phpmyadmin-git] [SCM] phpMyAdmin branch, master, updated. RELEASE_3_4_3_1-6543-ga88054d
by Rouslan Placella 04 Jul '11

04 Jul '11

The branch, master has been updated via a88054dae9a969c0c9ec6477fce130b70a777749 (commit) via 39cb4d4798f495db25bf65dda95fc8c4e9893367 (commit) from 064d399d878f36a0a26f6db890b947bccb3ef8ab (commit) - Log ----------------------------------------------------------------- commit a88054dae9a969c0c9ec6477fce130b70a777749 Merge: 064d399d878f36a0a26f6db890b947bccb3ef8ab 39cb4d4798f495db25bf65dda95fc8c4e9893367 Author: Rouslan Placella <rouslan(a)placella.com> Date: Mon Jul 4 19:04:29 2011 +0100 Merge branch 'QA_3_4' ----------------------------------------------------------------------- Summary of changes: ChangeLog | 1 + tbl_indexes.php | 10 ++++------ 2 files changed, 5 insertions(+), 6 deletions(-) diff --git a/ChangeLog b/ChangeLog index 3842abc..ff4f0ae 100644 --- a/ChangeLog +++ b/ChangeLog @@ -40,6 +40,7 @@ phpMyAdmin - ChangeLog - bug #3340151 [export] Working SQL query exports error page - bug #3353649 [interface] "Create an index on X columns" form not validated - bug #3350790 [interface] JS error in Table->Structure->Index->Edit +- bug #3353811 [interface] Info message has "error" class 3.4.3.1 (2011-07-02) - [security] Fixed possible session manipulation in swekey authentication, see PMASA-2011-5 diff --git a/tbl_indexes.php b/tbl_indexes.php index 6491c10..7e9bec6 100644 --- a/tbl_indexes.php +++ b/tbl_indexes.php @@ -168,7 +168,9 @@ if (isset($_REQUEST['create_index'])) { } ?> </legend> - +<?php +PMA_Message::notice(__('("PRIMARY" <b>must</b> be the name of and <b>only of</b> a primary key!)'))->display(); +?> <div class="formelement"> <label for="input_index_name"><?php echo __('Index name:'); ?></label> <input type="text" name="index[Key_name]" id="input_index_name" size="25" @@ -183,11 +185,7 @@ if (isset($_REQUEST['create_index'])) { <?php echo PMA_showMySQLDocu('SQL-Syntax', 'ALTER_TABLE'); ?> </div> - -<br class="clearfloat" /> -<?php -PMA_Message::error(__('("PRIMARY" <b>must</b> be the name of and <b>only of</b> a primary key!)'))->display(); -?> +<br class="clearfloat" /><br /> <table id="index_columns"> <thead> hooks/post-receive -- phpMyAdmin

1 0

[Phpmyadmin-git] [SCM] phpMyAdmin branch, QA_3_4, updated. RELEASE_3_4_3_1-20-g39cb4d4
by Rouslan Placella 04 Jul '11

04 Jul '11

The branch, QA_3_4 has been updated via 39cb4d4798f495db25bf65dda95fc8c4e9893367 (commit) from 2ec0de3a9f8d77c750f02c27ba8d83b407a87ea5 (commit) - Log ----------------------------------------------------------------- ----------------------------------------------------------------------- Summary of changes: ChangeLog | 1 + tbl_indexes.php | 10 ++++------ 2 files changed, 5 insertions(+), 6 deletions(-) diff --git a/ChangeLog b/ChangeLog index 377449c..00f3ba4 100644 --- a/ChangeLog +++ b/ChangeLog @@ -8,6 +8,7 @@ phpMyAdmin - ChangeLog - bug #3340151 [export] Working SQL query exports error page - bug #3353649 [interface] "Create an index on X columns" form not validated - bug #3350790 [interface] JS error in Table->Structure->Index->Edit +- bug #3353811 [interface] Info message has "error" class 3.4.3.1 (2011-07-02) - [security] Fixed possible session manipulation in swekey authentication, see PMASA-2011-5 diff --git a/tbl_indexes.php b/tbl_indexes.php index e2ef288..54923a0 100644 --- a/tbl_indexes.php +++ b/tbl_indexes.php @@ -161,7 +161,9 @@ if (isset($_REQUEST['create_index'])) { } ?> </legend> - +<?php +PMA_Message::notice(__('("PRIMARY" <b>must</b> be the name of and <b>only of</b> a primary key!)'))->display(); +?> <div class="formelement"> <label for="input_index_name"><?php echo __('Index name:'); ?></label> <input type="text" name="index[Key_name]" id="input_index_name" size="25" @@ -176,11 +178,7 @@ if (isset($_REQUEST['create_index'])) { <?php echo PMA_showMySQLDocu('SQL-Syntax', 'ALTER_TABLE'); ?> </div> - -<br class="clearfloat" /> -<?php -PMA_Message::error(__('("PRIMARY" <b>must</b> be the name of and <b>only of</b> a primary key!)'))->display(); -?> +<br class="clearfloat" /><br /> <table> <thead> hooks/post-receive -- phpMyAdmin

1 0

[Phpmyadmin-git] [SCM] phpMyAdmin branch, master, updated. RELEASE_3_4_3_1-6541-g064d399
by Rouslan Placella 04 Jul '11

04 Jul '11

The branch, master has been updated via 064d399d878f36a0a26f6db890b947bccb3ef8ab (commit) via 2ec0de3a9f8d77c750f02c27ba8d83b407a87ea5 (commit) from 9e8e70f0a1d21eaab1b3256c2249721150a93c7e (commit) - Log ----------------------------------------------------------------- commit 064d399d878f36a0a26f6db890b947bccb3ef8ab Merge: 9e8e70f0a1d21eaab1b3256c2249721150a93c7e 2ec0de3a9f8d77c750f02c27ba8d83b407a87ea5 Author: Rouslan Placella <rouslan(a)placella.com> Date: Mon Jul 4 13:03:14 2011 +0100 Merge branch 'QA_3_4' Conflicts: tbl_indexes.php ----------------------------------------------------------------------- Summary of changes: ChangeLog | 1 + js/indexes.js | 12 ++++++------ tbl_indexes.php | 4 ++-- 3 files changed, 9 insertions(+), 8 deletions(-) diff --git a/ChangeLog b/ChangeLog index 312e148..3842abc 100644 --- a/ChangeLog +++ b/ChangeLog @@ -39,6 +39,7 @@ phpMyAdmin - ChangeLog - bug #3348995 [config] $cfg['Export']['asfile'] set to false does not select asText option - bug #3340151 [export] Working SQL query exports error page - bug #3353649 [interface] "Create an index on X columns" form not validated +- bug #3350790 [interface] JS error in Table->Structure->Index->Edit 3.4.3.1 (2011-07-02) - [security] Fixed possible session manipulation in swekey authentication, see PMASA-2011-5 diff --git a/js/indexes.js b/js/indexes.js index 9b64d92..ef6f877 100644 --- a/js/indexes.js +++ b/js/indexes.js @@ -17,24 +17,24 @@ function checkIndexName() } // Gets the elements pointers - var the_idx_name = document.forms['index_frm'].elements['index']; - var the_idx_type = document.forms['index_frm'].elements['index_type']; + var the_idx_name = document.forms['index_frm'].elements['index[Key_name]']; + var the_idx_type = document.forms['index_frm'].elements['index[Index_type]']; // Index is a primary key if (the_idx_type.options[0].value == 'PRIMARY' && the_idx_type.options[0].selected) { - document.forms['index_frm'].elements['index'].value = 'PRIMARY'; + document.forms['index_frm'].elements['index[Key_name]'].value = 'PRIMARY'; if (typeof(the_idx_name.disabled) != 'undefined') { - document.forms['index_frm'].elements['index'].disabled = true; + document.forms['index_frm'].elements['index[Key_name]'].disabled = true; } } // Other cases else { if (the_idx_name.value == 'PRIMARY') { - document.forms['index_frm'].elements['index'].value = ''; + document.forms['index_frm'].elements['index[Key_name]'].value = ''; } if (typeof(the_idx_name.disabled) != 'undefined') { - document.forms['index_frm'].elements['index'].disabled = false; + document.forms['index_frm'].elements['index[Key_name]'].disabled = false; } } diff --git a/tbl_indexes.php b/tbl_indexes.php index 995ee24..6491c10 100644 --- a/tbl_indexes.php +++ b/tbl_indexes.php @@ -140,8 +140,8 @@ if (isset($_REQUEST['index']) && is_array($_REQUEST['index'])) { ?> <form action="./tbl_indexes.php" method="post" name="index_frm" id="index_frm" <?php echo ($GLOBALS['cfg']['AjaxEnable'] ? ' class="ajax"' : ''); ?> - onsubmit="if (typeof(this.elements['index'].disabled) != 'undefined') { - this.elements['index'].disabled = false}"> + onsubmit="if (typeof(this.elements['index[Key_name]'].disabled) != 'undefined') { + this.elements['index[Key_name]'].disabled = false}"> <?php $form_params = array( 'db' => $db, hooks/post-receive -- phpMyAdmin

1 0

[Phpmyadmin-git] [SCM] phpMyAdmin branch, QA_3_4, updated. RELEASE_3_4_3_1-19-g2ec0de3
by Rouslan Placella 04 Jul '11

04 Jul '11

The branch, QA_3_4 has been updated via 2ec0de3a9f8d77c750f02c27ba8d83b407a87ea5 (commit) from c4ecddb5a2df58f26675f0162d8f2335b71bfbd5 (commit) - Log ----------------------------------------------------------------- ----------------------------------------------------------------------- Summary of changes: ChangeLog | 1 + js/indexes.js | 12 ++++++------ tbl_indexes.php | 4 ++-- 3 files changed, 9 insertions(+), 8 deletions(-) diff --git a/ChangeLog b/ChangeLog index 459bd1f..377449c 100644 --- a/ChangeLog +++ b/ChangeLog @@ -7,6 +7,7 @@ phpMyAdmin - ChangeLog - bug #3348995 [config] $cfg['Export']['asfile'] set to false does not select asText option - bug #3340151 [export] Working SQL query exports error page - bug #3353649 [interface] "Create an index on X columns" form not validated +- bug #3350790 [interface] JS error in Table->Structure->Index->Edit 3.4.3.1 (2011-07-02) - [security] Fixed possible session manipulation in swekey authentication, see PMASA-2011-5 diff --git a/js/indexes.js b/js/indexes.js index a15b249..c7bed94 100644 --- a/js/indexes.js +++ b/js/indexes.js @@ -17,24 +17,24 @@ function checkIndexName() } // Gets the elements pointers - var the_idx_name = document.forms['index_frm'].elements['index']; - var the_idx_type = document.forms['index_frm'].elements['index_type']; + var the_idx_name = document.forms['index_frm'].elements['index[Key_name]']; + var the_idx_type = document.forms['index_frm'].elements['index[Index_type]']; // Index is a primary key if (the_idx_type.options[0].value == 'PRIMARY' && the_idx_type.options[0].selected) { - document.forms['index_frm'].elements['index'].value = 'PRIMARY'; + document.forms['index_frm'].elements['index[Key_name]'].value = 'PRIMARY'; if (typeof(the_idx_name.disabled) != 'undefined') { - document.forms['index_frm'].elements['index'].disabled = true; + document.forms['index_frm'].elements['index[Key_name]'].disabled = true; } } // Other cases else { if (the_idx_name.value == 'PRIMARY') { - document.forms['index_frm'].elements['index'].value = ''; + document.forms['index_frm'].elements['index[Key_name]'].value = ''; } if (typeof(the_idx_name.disabled) != 'undefined') { - document.forms['index_frm'].elements['index'].disabled = false; + document.forms['index_frm'].elements['index[Key_name]'].disabled = false; } } diff --git a/tbl_indexes.php b/tbl_indexes.php index 46e5e1c..e2ef288 100644 --- a/tbl_indexes.php +++ b/tbl_indexes.php @@ -133,8 +133,8 @@ if (isset($_REQUEST['index']) && is_array($_REQUEST['index'])) { ?> <form action="./tbl_indexes.php" method="post" name="index_frm" - onsubmit="if (typeof(this.elements['index'].disabled) != 'undefined') { - this.elements['index'].disabled = false}"> + onsubmit="if (typeof(this.elements['index[Key_name]'].disabled) != 'undefined') { + this.elements['index[Key_name]'].disabled = false}"> <?php $form_params = array( 'db' => $db, hooks/post-receive -- phpMyAdmin

1 0

[Phpmyadmin-git] [SCM] phpMyAdmin branch, master, updated. RELEASE_3_4_3_1-6539-g9e8e70f
by Rouslan Placella 04 Jul '11

04 Jul '11

The branch, master has been updated via 9e8e70f0a1d21eaab1b3256c2249721150a93c7e (commit) via c4ecddb5a2df58f26675f0162d8f2335b71bfbd5 (commit) from bc828427c771ccf1197b2e0295dbd4f968e5752c (commit) - Log ----------------------------------------------------------------- commit 9e8e70f0a1d21eaab1b3256c2249721150a93c7e Merge: bc828427c771ccf1197b2e0295dbd4f968e5752c c4ecddb5a2df58f26675f0162d8f2335b71bfbd5 Author: Rouslan Placella <rouslan(a)placella.com> Date: Mon Jul 4 12:32:23 2011 +0100 Merge branch 'QA_3_4' ----------------------------------------------------------------------- Summary of changes: ChangeLog | 1 + tbl_structure.php | 8 ++------ 2 files changed, 3 insertions(+), 6 deletions(-) diff --git a/ChangeLog b/ChangeLog index 25516fe..312e148 100644 --- a/ChangeLog +++ b/ChangeLog @@ -38,6 +38,7 @@ phpMyAdmin - ChangeLog - bug #3323101 [parser] Invalid escape sequence in SQL parser - bug #3348995 [config] $cfg['Export']['asfile'] set to false does not select asText option - bug #3340151 [export] Working SQL query exports error page +- bug #3353649 [interface] "Create an index on X columns" form not validated 3.4.3.1 (2011-07-02) - [security] Fixed possible session manipulation in swekey authentication, see PMASA-2011-5 diff --git a/tbl_structure.php b/tbl_structure.php index 10cc8d3..afca2ea 100644 --- a/tbl_structure.php +++ b/tbl_structure.php @@ -723,7 +723,7 @@ if (! $tbl_is_view && ! $db_is_information_schema && 'ARCHIVE' != $tbl_type) { ?> </div> <form action="./tbl_indexes.php" method="post" - onsubmit="return checkFormElementInRange(this, 'idx_num_fields', + onsubmit="return checkFormElementInRange(this, 'added_fields', '<?php echo str_replace('\'', '\\\'', __('Column count has to be larger than zero.')); ?>', 1)"> <fieldset> @@ -732,11 +732,7 @@ if (! $tbl_is_view && ! $db_is_information_schema && 'ARCHIVE' != $tbl_type) { echo sprintf(__('Create an index on  %s columns'), '<input type="text" size="2" name="added_fields" value="1" />'); ?> - <input type="submit" name="create_index" value="<?php echo __('Go'); ?>" - onclick="return checkFormElementInRange(this.form, - 'idx_num_fields', - '<?php echo str_replace('\'', '\\\'', __('Column count has to be larger than zero.')); ?>', - 1)" /> + <input type="submit" name="create_index" value="<?php echo __('Go'); ?>" /> </fieldset> </form> <br /> hooks/post-receive -- phpMyAdmin

1 0

[Phpmyadmin-git] [SCM] phpMyAdmin branch, QA_3_4, updated. RELEASE_3_4_3_1-18-gc4ecddb
by Rouslan Placella 04 Jul '11

04 Jul '11

The branch, QA_3_4 has been updated via c4ecddb5a2df58f26675f0162d8f2335b71bfbd5 (commit) from 041cd7e7d2dfa95dd055da6fd2eb5308902fda95 (commit) - Log ----------------------------------------------------------------- ----------------------------------------------------------------------- Summary of changes: ChangeLog | 1 + tbl_structure.php | 8 ++------ 2 files changed, 3 insertions(+), 6 deletions(-) diff --git a/ChangeLog b/ChangeLog index 6bdeb8c..459bd1f 100644 --- a/ChangeLog +++ b/ChangeLog @@ -6,6 +6,7 @@ phpMyAdmin - ChangeLog - bug #3323101 [parser] Invalid escape sequence in SQL parser - bug #3348995 [config] $cfg['Export']['asfile'] set to false does not select asText option - bug #3340151 [export] Working SQL query exports error page +- bug #3353649 [interface] "Create an index on X columns" form not validated 3.4.3.1 (2011-07-02) - [security] Fixed possible session manipulation in swekey authentication, see PMASA-2011-5 diff --git a/tbl_structure.php b/tbl_structure.php index 7d380b4..4c0b185 100644 --- a/tbl_structure.php +++ b/tbl_structure.php @@ -680,7 +680,7 @@ if (! $tbl_is_view && ! $db_is_information_schema && 'ARCHIVE' != $tbl_type) { ?> <br /> <form action="./tbl_indexes.php" method="post" - onsubmit="return checkFormElementInRange(this, 'idx_num_fields', + onsubmit="return checkFormElementInRange(this, 'added_fields', '<?php echo str_replace('\'', '\\\'', __('Column count has to be larger than zero.')); ?>', 1)"> <fieldset> @@ -689,11 +689,7 @@ if (! $tbl_is_view && ! $db_is_information_schema && 'ARCHIVE' != $tbl_type) { echo sprintf(__('Create an index on  %s columns'), '<input type="text" size="2" name="added_fields" value="1" />'); ?> - <input type="submit" name="create_index" value="<?php echo __('Go'); ?>" - onclick="return checkFormElementInRange(this.form, - 'idx_num_fields', - '<?php echo str_replace('\'', '\\\'', __('Column count has to be larger than zero.')); ?>', - 1)" /> + <input type="submit" name="create_index" value="<?php echo __('Go'); ?>" /> </fieldset> </form> <br /> hooks/post-receive -- phpMyAdmin

1 0

[Phpmyadmin-git] [SCM] phpMyAdmin branch, master, updated. RELEASE_3_4_3_1-6537-gbc82842
by Marc Delisle 04 Jul '11

04 Jul '11

The branch, master has been updated via bc828427c771ccf1197b2e0295dbd4f968e5752c (commit) from 64e4f9fe0ed661e16172cc354e5dfd0b9111342e (commit) - Log ----------------------------------------------------------------- commit bc828427c771ccf1197b2e0295dbd4f968e5752c Author: Marc Delisle <marc(a)infomarc.info> Date: Mon Jul 4 07:28:36 2011 -0400 Missing ChangeLog entry ----------------------------------------------------------------------- Summary of changes: ChangeLog | 3 ++- 1 files changed, 2 insertions(+), 1 deletions(-) diff --git a/ChangeLog b/ChangeLog index 587922f..25516fe 100644 --- a/ChangeLog +++ b/ChangeLog @@ -27,10 +27,11 @@ phpMyAdmin - ChangeLog + [display] GIS data visualization + AJAX for table structure multiple-column change + AJAX for table structure index edit -+ Show/hide indexes in table structure ++ Show/hide indexes in table Structure + More compact navigation bar + Display direction (horizontal/vertical) no longer displayed by default + Shift/click support in database Structure ++ Show/hide column in table Browse 3.4.4.0 (not yet released) - bug #3323060 [parser] SQL parser breaks AJAX requests if query has unclosed quotes hooks/post-receive -- phpMyAdmin

1 0

[Phpmyadmin-git] [SCM] phpMyAdmin website branch, master, updated. 4058bd0bd23780d16eb957812f6296c512bf3762
by Marc Delisle 04 Jul '11

04 Jul '11

The branch, master has been updated via 4058bd0bd23780d16eb957812f6296c512bf3762 (commit) from 93b17ee20ed413d79e41250f1cc55ae9961f3123 (commit) - Log ----------------------------------------------------------------- commit 4058bd0bd23780d16eb957812f6296c512bf3762 Author: Marc Delisle <marc(a)infomarc.info> Date: Mon Jul 4 07:18:01 2011 -0400 Clarification about need for token ----------------------------------------------------------------------- Summary of changes: templates/security/PMASA-2011-7 | 4 +++- 1 files changed, 3 insertions(+), 1 deletions(-) diff --git a/templates/security/PMASA-2011-7 b/templates/security/PMASA-2011-7 index 294d7d7..a33048c 100644 --- a/templates/security/PMASA-2011-7 +++ b/templates/security/PMASA-2011-7 @@ -11,7 +11,7 @@ PMASA-2011-7 </py:def> <py:def function="announcement_updated"> -2011-07-03 +2011-07-04 </py:def> <py:def function="announcement_summary"> @@ -30,6 +30,8 @@ We consider this vulnerability to be serious. All PHP versions that were current at the time of the advisory (5.3.6, 5.2.17) on all OS are vulnerable, unless the Suhosin patch has been installed. + +An attacker must be logged in via phpMyAdmin to exploit this problem. </py:def> <py:def function="announcement_affected"> hooks/post-receive -- phpMyAdmin website

1 0

[Phpmyadmin-git] [SCM] phpMyAdmin website branch, master, updated. 93b17ee20ed413d79e41250f1cc55ae9961f3123
by Marc Delisle 03 Jul '11

03 Jul '11

The branch, master has been updated via 93b17ee20ed413d79e41250f1cc55ae9961f3123 (commit) from b5731f4ca159230c34db6ce111617ca27b1b2867 (commit) - Log ----------------------------------------------------------------- commit 93b17ee20ed413d79e41250f1cc55ae9961f3123 Author: Marc Delisle <marc(a)infomarc.info> Date: Sun Jul 3 09:58:15 2011 -0400 Clarify vulnerable PHP versions; new CWE ids ----------------------------------------------------------------------- Summary of changes: templates/security/PMASA-2011-5 | 6 +++++- templates/security/PMASA-2011-7 | 10 ++++++++-- 2 files changed, 13 insertions(+), 3 deletions(-) diff --git a/templates/security/PMASA-2011-5 b/templates/security/PMASA-2011-5 index 0661593..b21c291 100644 --- a/templates/security/PMASA-2011-5 +++ b/templates/security/PMASA-2011-5 @@ -10,6 +10,10 @@ PMASA-2011-5 2011-07-02 </py:def> +<py:def function="announcement_updated"> +2011-07-03 +</py:def> + <py:def function="announcement_summary"> Possible session manipulation in Swekey authentication. </py:def> @@ -43,7 +47,7 @@ This issue was found by Frans Pehrson from <a href="http://www.xxor.se">Xxor AB<  <py:def function="announcement_cve">CVE-2011-2505</py:def> -<py:def function="announcement_cwe">661</py:def> +<py:def function="announcement_cwe">473 661</py:def> <py:def function="announcement_commits"> 7ebd958b2bf59f96fecd5b3322bdbd0b244a7967 diff --git a/templates/security/PMASA-2011-7 b/templates/security/PMASA-2011-7 index 6a1aeb6..294d7d7 100644 --- a/templates/security/PMASA-2011-7 +++ b/templates/security/PMASA-2011-7 @@ -10,12 +10,16 @@ PMASA-2011-7 2011-07-02 </py:def> +<py:def function="announcement_updated"> +2011-07-03 +</py:def> + <py:def function="announcement_summary"> Regular expression quoting issue in Synchronize code. </py:def> <py:def function="announcement_description"> -Through a possible bug in PHP running on Windows systems a null byte can truncate the pattern string allowing an attacker to inject the /e modifier causing the preg_replace function to execute its second argument as PHP code. +Through a possible bug in PHP, a null byte can truncate the pattern string allowing an attacker to inject the /e modifier causing the preg_replace function to execute its second argument as PHP code. </py:def> <py:def function="announcement_severity"> @@ -23,7 +27,9 @@ We consider this vulnerability to be serious. </py:def> <py:def function="announcement_mitigation"> -Only PHP running on Windows has been found to be vulnerable, Linux and OpenBSD are not affected. +All PHP versions that were current at the time of the advisory (5.3.6, +5.2.17) on all OS are vulnerable, unless the Suhosin patch has been +installed. </py:def> <py:def function="announcement_affected"> hooks/post-receive -- phpMyAdmin website

1 0