<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "http://bugs.gentoo.org/bugzilla.dtd">

<bugzilla version="2.22.7"
          urlbase="http://bugs.gentoo.org/"
          maintainer="bugzilla@gentoo.org"
>

    <bug>
          <bug_id>229095</bug_id>
          <alias>CVE-2008-2960</alias>
          <creation_ts>2008-06-23 18:08 0000</creation_ts>
          <short_desc>dev-db/phpmyadmin &lt;2.11.7: XSS (CVE-2008-2960)</short_desc>
          <delta_ts>2008-07-05 10:38:48 0000</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>Gentoo Security</product>
          <component>Vulnerabilities</component>
          <version>unspecified</version>
          <rep_platform>All</rep_platform>
          <op_sys>Linux</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          <bug_file_loc>http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2008-4</bug_file_loc>
          <status_whiteboard>C4 [noglsa]</status_whiteboard>
          
          <priority>P2</priority>
          <bug_severity>normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          
          <everconfirmed>1</everconfirmed>
          <reporter>hanno@gentoo.org</reporter>
          <assigned_to>security@gentoo.org</assigned_to>
          <cc>web-apps@gentoo.org</cc>

      

      
          <long_desc isprivate="0">
            <who>hanno@gentoo.org</who>
            <bug_when>2008-06-23 18:08:50 0000</bug_when>
            <thetext>See:
http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2008-4</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>hoffie@gentoo.org</who>
            <bug_when>2008-06-23 18:12:08 0000</bug_when>
            <thetext>/me swaps teh brackets ;)</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>wrobel@gentoo.org</who>
            <bug_when>2008-06-30 19:48:44 0000</bug_when>
            <thetext>phpmyadmin-2.11.7 is in the tree.

Targets:

 alpha amd64 hppa ppc ppc64 sparc x86
</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>rbu@gentoo.org</who>
            <bug_when>2008-06-30 21:22:54 0000</bug_when>
            <thetext>Arches, please test and mark stable:
=dev-db/phpmyadmin-2.11.7
Target keywords : &quot;alpha amd64 hppa ppc ppc64 sparc x86&quot;</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>corsair@gentoo.org</who>
            <bug_when>2008-07-01 05:39:35 0000</bug_when>
            <thetext>ppc64 stable</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>tanderson@gentoo.org</who>
            <bug_when>2008-07-01 13:08:55 0000</bug_when>
            <thetext>amd64 stable, works with my mysql server, no regressions.</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>jer@gentoo.org</who>
            <bug_when>2008-07-01 17:26:20 0000</bug_when>
            <thetext>Stable for HPPA.</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>armin76@gentoo.org</who>
            <bug_when>2008-07-01 18:15:15 0000</bug_when>
            <thetext>alpha/sparc/x86 stable</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>dertobi123@gentoo.org</who>
            <bug_when>2008-07-05 10:29:58 0000</bug_when>
            <thetext>ppc stable</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>keytoaster@gentoo.org</who>
            <bug_when>2008-07-05 10:38:48 0000</bug_when>
            <thetext>C4 doesn&apos;t require a vote. I would vote NO anyways.</thetext>
          </long_desc>
      
    </bug>

</bugzilla>