Hello community,
here is the log from the commit of package phpMyAdmin for openSUSE:Factory
checked in at 2020-10-12 13:59:32
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/phpMyAdmin (Old)
and /work/SRC/openSUSE:Factory/.phpMyAdmin.new.3486 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "phpMyAdmin"
Mon Oct 12 13:59:32 2020 rev:168 rq:841132 version:4.9.6
Changes:
--------
--- /work/SRC/openSUSE:Factory/phpMyAdmin/phpMyAdmin.changes 2020-05-03
22:47:35.423198129 +0200
+++ /work/SRC/openSUSE:Factory/.phpMyAdmin.new.3486/phpMyAdmin.changes
2020-10-12 14:00:12.422238420 +0200
@@ -1,0 +2,10 @@
+Mon Oct 12 06:25:53 UTC 2020 - ecsos <ec...@opensuse.org>
+
+- Update to 4.9.6
+ This is a security release.
+- Fix boo#1177561 (CVE-2020-26934, PMASA-2020-5) XSS relating to
+ the transformation feature
+- Fix boo#1177562 (CVE-2020-26935, PMASA-2020-6) SQL injection
+ vulnerability in SearchController
+
+-------------------------------------------------------------------
Old:
----
phpMyAdmin-4.9.5-all-languages.tar.xz
phpMyAdmin-4.9.5-all-languages.tar.xz.asc
New:
----
phpMyAdmin-4.9.6-all-languages.tar.xz
phpMyAdmin-4.9.6-all-languages.tar.xz.asc
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ phpMyAdmin.spec ++++++
--- /var/tmp/diff_new_pack.o0hDoG/_old 2020-10-12 14:00:13.270238774 +0200
+++ /var/tmp/diff_new_pack.o0hDoG/_new 2020-10-12 14:00:13.274238775 +0200
@@ -30,7 +30,7 @@
%define ap_grp nogroup
%endif
Name: phpMyAdmin
-Version: 4.9.5
+Version: 4.9.6
Release: 0
Summary: Administration of MySQL over the web
License: GPL-2.0-or-later
@@ -206,7 +206,7 @@
a2enflag %{name}
fi
fi
-# We changed ap_docroot from %{ap_docroot_old} to %{ap_docroot}
(/srv/www/htdocs to /usr/share)
+# We changed ap_docroot from %%{ap_docroot_old} to %%{ap_docroot}
(/srv/www/htdocs to /usr/share)
# If someone did 'manually' change the config file it won't be replaced by rpm
# Hence we backup the existing and place the new one
find=0
++++++ phpMyAdmin-4.9.5-all-languages.tar.xz ->
phpMyAdmin-4.9.6-all-languages.tar.xz ++++++
++++ 144189 lines of diff (skipped)
