mirror of
https://github.com/openembedded/meta-openembedded.git
synced 2026-06-14 05:49:57 +00:00
Roy Li
59b1d88761
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.2, 4.1.x before 4.1.14.3, and 4.2.x before 4.2.7.1 allow remote authenticated users to inject arbitrary web script or HTML via the (1) browse table page, related to js/sql.js; (2) ENUM editor page, related to js/functions.js; (3) monitor page, related to js/server_status_monitor.js; (4) query charts page, related to js/tbl_chart.js; or (5) table relations page, related to libraries/tbl_relation.lib.php. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-5273 Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
34 lines
1.2 KiB
BlitzBasic
34 lines
1.2 KiB
BlitzBasic
SUMMARY = "Web-based MySQL administration interface"
|
|
HOMEPAGE = "http://www.phpmyadmin.net"
|
|
# Main code is GPLv2, libraries/tcpdf is under LGPLv3, js/jquery is under MIT
|
|
LICENSE = "GPLv2 & LGPLv3 & MIT"
|
|
LIC_FILES_CHKSUM = "file://LICENSE;md5=eb723b61539feef013de476e68b5c50a \
|
|
file://libraries/tcpdf/LICENSE.TXT;md5=5c87b66a5358ebcc495b03e0afcd342c"
|
|
|
|
SRC_URI = "${SOURCEFORGE_MIRROR}/phpmyadmin/phpMyAdmin/${PV}/phpMyAdmin-${PV}-all-languages.tar.xz \
|
|
file://0001-bug-4504-security-Self-XSS-in-query-charts.patch \
|
|
file://apache.conf"
|
|
|
|
SRC_URI[md5sum] = "0dcd755450dac819f33502590c88ad29"
|
|
SRC_URI[sha256sum] = "5d101dd88a99a869bc0c684a7f687cf290abc4bf306daac73337cbde2d7743e4"
|
|
|
|
S = "${WORKDIR}/phpMyAdmin-${PV}-all-languages"
|
|
|
|
inherit allarch
|
|
|
|
do_install() {
|
|
install -d ${D}${datadir}/${BPN}
|
|
cp -a * ${D}${datadir}/${BPN}
|
|
|
|
install -d ${D}${sysconfdir}/apache2/conf.d
|
|
install -m 0644 ${WORKDIR}/apache.conf ${D}${sysconfdir}/apache2/conf.d/phpmyadmin.conf
|
|
|
|
# Remove a few scripts that explicitly require bash (!)
|
|
rm -f ${D}${datadir}/phpmyadmin/libraries/transformations/*.sh
|
|
}
|
|
|
|
FILES_${PN} = "${datadir}/${BPN} \
|
|
${sysconfdir}/apache2/conf.d"
|
|
|
|
RDEPENDS_${PN} += "bash"
|