dev-db/phpmyadmin: Security bump to release 4.8.2 - fixes bug 658742.
authorJorge Manuel B. S. Vicetto (jmbsvicetto) <jmbsvicetto@gentoo.org>
Fri, 22 Jun 2018 22:33:39 +0000 (22:33 +0000)
committerJorge Manuel B. S. Vicetto (jmbsvicetto) <jmbsvicetto@gentoo.org>
Fri, 22 Jun 2018 22:33:39 +0000 (22:33 +0000)
Fixes security issues PMASA-2018-3 and PMASA-2018-4.

Package-Manager: Portage-2.3.33, Repoman-2.3.9

dev-db/phpmyadmin/Manifest
dev-db/phpmyadmin/phpmyadmin-4.8.2.ebuild [new file with mode: 0644]

index fce6d6a54114eee80a12d5e136e5c640c09bcd5b..c5b868a4418f0d96580b382bb88a4dd2a82dac53 100644 (file)
@@ -5,3 +5,4 @@ DIST phpMyAdmin-4.7.8-all-languages.tar.xz 6218056 BLAKE2B 879ef6703711725781fcf
 DIST phpMyAdmin-4.7.9-all-languages.tar.xz 6370604 BLAKE2B 28ae240ffe092eac1d1226d37c520417c2949b548fa3b3f7ebe93f26d113b3518cad28f28feb8c47446ecc4573dfe32cec747dd1eedf5a9862a70bfcfaafbd4e SHA512 8788beb62e8a049197e52dc75a797705a7aec9fa748a00f858ecd6d912aa5907f5d9de042d50880c5ab55b7479f194d32dbb6c01706130e70fec5c95c51ca08d
 DIST phpMyAdmin-4.8.0.1-all-languages.tar.xz 5926908 BLAKE2B 4209d6d5e57c1757a232c8a765d45ef5e8384d99cd94a389593080d6f1bfb2a64295acaa092f9fc435a7d4853ae553762721ddd4e69cb67de651a42376657c3c SHA512 4849ee320caaaa9a6af4d1cfba3fba32089b3bd932c89dcef3823a441691c52c722818099b7f4f5e1713bb3a38f55a6c9b6706ab5a12f131dda97172513d8549
 DIST phpMyAdmin-4.8.1-all-languages.tar.xz 5916536 BLAKE2B 3263b66d52eb0b5d8795ade2a6700738c797181e6efaa89516b73a7d3fca1db02c5aff6d26898cfbc23c9458f6579ba4f252699c79ef7643aa89700c0ef02946 SHA512 93f04c76b8a0a73ff61dbe3edb9df8b1536eb18f5b5944c2f5eb0e8f5eddb183497c4c2e4a3d290f70422a49027c1de220630bdce731a6b7315b1d3295641d0c
+DIST phpMyAdmin-4.8.2-all-languages.tar.xz 5914400 BLAKE2B 3a2bbef5cba6583e5b8a2409647a6657fcc54041213ad26143e6ca6ab58a7550d94c65afc9dac8f5751c31072748b7183ba255b4aebe047c10b06dc6efdbed16 SHA512 32c5f048b31089ea6a6bc0212b32f01eb842eddc323a9729b98a693d96d38b0ef091b4521381dae432d2482bf0214ad65ffaa13c925b0dca5dcb645e2987eb33
diff --git a/dev-db/phpmyadmin/phpmyadmin-4.8.2.ebuild b/dev-db/phpmyadmin/phpmyadmin-4.8.2.ebuild
new file mode 100644 (file)
index 0000000..f89f833
--- /dev/null
@@ -0,0 +1,61 @@
+# Copyright 1999-2018 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI="5"
+
+inherit eutils webapp
+
+MY_PV=${PV/_/-}
+MY_PN="phpMyAdmin"
+MY_P="${MY_PN}-${MY_PV}-all-languages"
+
+DESCRIPTION="Web-based administration for MySQL database in PHP"
+HOMEPAGE="https://www.phpmyadmin.net/"
+SRC_URI="https://files.phpmyadmin.net/${MY_PN}/${MY_PV}/${MY_P}.tar.xz"
+
+LICENSE="GPL-2"
+KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86 ~x86-fbsd ~ppc-macos ~x64-macos ~x86-macos"
+IUSE="setup"
+
+RDEPEND="
+       dev-lang/php[ctype,filter,json,session,unicode]
+       || (
+               dev-lang/php[mysqli]
+               dev-lang/php[mysql]
+       )
+       virtual/httpd-php:*
+"
+
+need_httpd_cgi
+
+S="${WORKDIR}"/${MY_P}
+
+pkg_setup() {
+       webapp_pkg_setup
+}
+
+src_install() {
+       webapp_src_preinst
+
+       dodoc README RELEASE-DATE-${MY_PV} ChangeLog || die
+       rm -f LICENSE README* RELEASE-DATE-${MY_PV}
+
+       if ! use setup; then
+               rm -rf setup || die "Cannot remove setup utility"
+               elog "The phpMyAdmin setup utility has been removed."
+               elog "It is a regular target of various exploits. If you need it, set USE=setup."
+       else
+               elog "You should consider disabling the setup USE flag"
+               elog "to exclude the setup utility if you don't use it."
+               elog "It regularly is the target of various exploits."
+       fi
+
+       insinto "${MY_HTDOCSDIR#${EPREFIX}}"
+       doins -r .
+
+       webapp_configfile "${MY_HTDOCSDIR#${EPREFIX}}"/libraries/config.default.php
+       webapp_serverowned "${MY_HTDOCSDIR#${EPREFIX}}"/libraries/config.default.php
+
+       webapp_postinst_txt en "${FILESDIR}"/postinstall-en-3.1.txt
+       webapp_src_install
+}