Control Web Panel

WebPanel => CentOS-WebPanel Bugs => Topic started by: n8v8r on January 27, 2018, 07:24:31 PM

Title: phpMyAdmin 4.6.6 outdated
Post by: n8v8r on January 27, 2018, 07:24:31 PM

CentOS Linux release 7.4.1708 (Core)
Kernel Version: 3.10.0-693.17.1.el7.x86_64
Apache version: Apache/2.4.29
PHP version: 5.6.30
MySQL version: 10.1.30-MariaDB
 
phpMyAdmin installed Version information: 4.6.6 , latest stable version: 4.7.7

Quote

phpMyAdmin 4.7.7
Released 2017-12-23.

Welcome to phpMyAdmin 4.7.7, a regular maintenance release containing bug fixes and a security fix.

The security vulnerability is a XSRF/CSRF flaw; you can read more at https://www.phpmyadmin.net/security/PMASA-2017-9/
As a result of this, we recommend all users upgrade immediately.

Title: Re: phpMyAdmin 4.6.6 outdated
Post by: bullten on January 27, 2018, 07:31:42 PM

Why not manually updating it?

Title: Re: phpMyAdmin 4.6.6 outdated
Post by: n8v8r on January 27, 2018, 07:34:39 PM

why not automatically updated by CWP, or at least adding the repo automatically and let yum-cron take care? ???

Title: Re: phpMyAdmin 4.6.6 outdated
Post by: n8v8r on January 29, 2018, 08:34:21 PM

phpMyAdmin is apparently not a yum package but a scripted installation by CWP. Hence it can be expected that CWP feeds those apps installed by script frequently, in particular with security patches

Title: Re: phpMyAdmin 4.6.6 outdated
Post by: bullten on January 29, 2018, 09:20:06 PM

Once can create a bash script to install phpmyadmin auomatically

Quote

yum install composer -y
git clone https://github.com/phpmyadmin/phpmyadmin.git
cd phpmyadmin
yes | cp -rv * /usr/local/cwpsrv/var/services/pma/
cd /usr/local/cwpsrv/var/services/pma/
chown -R cwpsvc:cwpsvc *
composer update
service cwp-phpfpm restart

Title: Re: phpMyAdmin 4.6.6 outdated
Post by: n8v8r on January 29, 2018, 10:04:35 PM

yes indeed, that did the update  :D Thank you

Is the git clone permanent on the hard disk somewhere because I cannot trace it now? Ran git clone from / but it does not show there or in /root and I would like to exercise some sanity on the disk

Title: Re: phpMyAdmin 4.6.6 outdated
Post by: bullten on January 29, 2018, 10:07:39 PM

cd /root/phpmyadmin

Title: Re: phpMyAdmin 4.6.6 outdated
Post by: n8v8r on January 30, 2018, 05:23:04 AM

Maybe this could offered as option in the GUI (script via cron) to run monthly, basically a set and forget for the user

Title: Re: phpMyAdmin 4.6.6 outdated
Post by: n8v8r on February 08, 2018, 07:23:12 PM

As suggested by @bullten running it as as script through cron bi-weekly. Would be good to have an update option incorporated into the SQL section of the root panel