You are here
Home > Preporuke > Sigurnosni nedostatak programskog paketa php-udan11-sql-parser

Sigurnosni nedostatak programskog paketa php-udan11-sql-parser

  • Detalji os-a: WN7
  • Važnost: IMP
  • Operativni sustavi: L
  • Kategorije: LFE

——————————————————————————–
Fedora Update Notification
FEDORA-2015-5c06260c4b
2015-11-10 19:03:39.458781
——————————————————————————–

Name : php-udan11-sql-parser
Product : Fedora 21
Version : 3.0.4
Release : 1.fc21
URL : https://github.com/udan11/sql-parser
Summary : A validating SQL lexer and parser with a focus on MySQL dialect
Description :
A validating SQL lexer and parser with a focus on MySQL dialect.

This library was originally developed for phpMyAdmin during
the Google Summer of Code 2015.

To use this library, you just have to add, in your project:
require_once ‘/usr/share/php/SqlParser/autoload.php’;

——————————————————————————–
Update Information:

phpMyAdmin 4.5.1.0 (2015-10-23) =============================== – Invalid
argument supplied for foreach() – array_key_exists() expects parameter 2 to be
array – Notice Undefined index: drop_database – Server variable edition in
ANSI_QUOTES sql_mode: losing current value – Propose table structure broken –
phpMyAdmin suggests upgrading to newer version not usable on that system –
‘PMA_Microhistory’ is undefined – Incorrect definition for getTablesWhenOpen() –
Error when creating new user on MariaDB 10.0.21 – Notice on htmlspecialchars() –
Notice in Structure page of views – AUTO_INCREMENT always exported when IF NOT
EXISTS is on – Some partitions are missing in copied table – Notice of undefined
variable when performing SHOW CREATE – Error exporting sql query results with
table alias – SQL editing window does not recognise ‘OUTER’ keyword in ‘LEFT
OUTER JOIN’ – “NOT IN” clause not recognized (MySQL 5.6 and 5.7) – Yellow star
does not change in database Structure after add/remove from favorites – Invalid
SQL in table definition when exporting table – Foreign key to other database’s
tables fails – Bug while exporting results when a joined table field name is in
SELECT query – Strange behavior on table rename – Rename table does not result
in refresh in left panel – Missing arguments for PMA_Table::generateAlter() –
Notices about undefined indexes on structure pages of information_schema tables
– Change minimum PHP version for Composer – Import parser and backslash –
“Visualize GIS data” seems to be broken – Confirm box on “Reset slave” option –
Fix cookies clearing on version change – Cannot execute SQL with subquery –
Incorrect syntax creating a user using mysql_native_password with MariaDB –
Cannot use third party auth plugins
——————————————————————————–
References:

[ 1 ] Bug #1275108 – CVE-2015-7873 phpMyAdmin: Content spoofing on url.php (PMASA-2015-5)
https://bugzilla.redhat.com/show_bug.cgi?id=1275108
——————————————————————————–

This update can be installed with the “yum” update program. Use
su -c ‘yum update php-udan11-sql-parser’ at the command line.
For more information, refer to “Managing Software with yum”,
available at https://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce

——————————————————————————–
Fedora Update Notification
FEDORA-2015-287c164df5
2015-11-10 19:05:36.693179
——————————————————————————–

Name : php-udan11-sql-parser
Product : Fedora 23
Version : 3.0.4
Release : 1.fc23
URL : https://github.com/udan11/sql-parser
Summary : A validating SQL lexer and parser with a focus on MySQL dialect
Description :
A validating SQL lexer and parser with a focus on MySQL dialect.

This library was originally developed for phpMyAdmin during
the Google Summer of Code 2015.

To use this library, you just have to add, in your project:
require_once ‘/usr/share/php/SqlParser/autoload.php’;

——————————————————————————–
Update Information:

phpMyAdmin 4.5.1.0 (2015-10-23) =============================== – Invalid
argument supplied for foreach() – array_key_exists() expects parameter 2 to be
array – Notice Undefined index: drop_database – Server variable edition in
ANSI_QUOTES sql_mode: losing current value – Propose table structure broken –
phpMyAdmin suggests upgrading to newer version not usable on that system –
‘PMA_Microhistory’ is undefined – Incorrect definition for getTablesWhenOpen() –
Error when creating new user on MariaDB 10.0.21 – Notice on htmlspecialchars() –
Notice in Structure page of views – AUTO_INCREMENT always exported when IF NOT
EXISTS is on – Some partitions are missing in copied table – Notice of undefined
variable when performing SHOW CREATE – Error exporting sql query results with
table alias – SQL editing window does not recognise ‘OUTER’ keyword in ‘LEFT
OUTER JOIN’ – “NOT IN” clause not recognized (MySQL 5.6 and 5.7) – Yellow star
does not change in database Structure after add/remove from favorites – Invalid
SQL in table definition when exporting table – Foreign key to other database’s
tables fails – Bug while exporting results when a joined table field name is in
SELECT query – Strange behavior on table rename – Rename table does not result
in refresh in left panel – Missing arguments for PMA_Table::generateAlter() –
Notices about undefined indexes on structure pages of information_schema tables
– Change minimum PHP version for Composer – Import parser and backslash –
“Visualize GIS data” seems to be broken – Confirm box on “Reset slave” option –
Fix cookies clearing on version change – Cannot execute SQL with subquery –
Incorrect syntax creating a user using mysql_native_password with MariaDB –
Cannot use third party auth plugins
——————————————————————————–
References:

[ 1 ] Bug #1275108 – CVE-2015-7873 phpMyAdmin: Content spoofing on url.php (PMASA-2015-5)
https://bugzilla.redhat.com/show_bug.cgi?id=1275108
——————————————————————————–

This update can be installed with the “yum” update program. Use
su -c ‘yum update php-udan11-sql-parser’ at the command line.
For more information, refer to “Managing Software with yum”,
available at https://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce

AutorMarko Stanec
Cert idNCERT-REF-2015-11-0009-ADV
CveCERT-CVE-DUMMY
ID izvornikaCERT-ORIGID-DUMMY
ProizvodCERT-DUMMY-PRODUCT
Izvorhttp://www.adobe.com/
Top
More in Preporuke
Sigurnosni nedostatak programskog paketa phpMyAdmin

Otkriven je sigurnosni nedostatak u programskom paketu phpMyAdmin za operacijski sustav Fedora. Otkriveni nedostatak potencijalnim napadačima omogućuje preusmjeravanje korisnika na...

Close