www/kanboard: update to 1.2.31

ChangeLog: https://github.com/kanboard/kanboard/releases/tag/v1.2.31

Security Fixes:

 * CVE-2023-36813: Avoid potential SQL injections without breaking compatibility
   with plugins

Other fixes and updates:

 * Run tests with PHP 8 on GitHub Actions
 * Bump Symfony dependencies
 * Update Composer dependencies to be able to run tests with PHP 8.2
 * Add /usr/bin/php symlink in the Docker image
 * Replace usage of at() matcher with alternatives in unit tests
 * Adjust plugin directory test case to work on released versions
 * Fix incorrect background dynamic property in captcha library
 * Update translations

Reported by:	portscout
MFH:		2023Q3 (security fix)
Security:	CVE-2023-36813
This commit is contained in:
Fernando Apesteguía 2023-07-04 11:48:08 +02:00
parent 4426adf7a8
commit a4f1bfb9fb
3 changed files with 72 additions and 7 deletions

View file

@ -1,6 +1,6 @@
PORTNAME= kanboard
DISTVERSIONPREFIX= v
DISTVERSION= 1.2.30
DISTVERSION= 1.2.31
CATEGORIES= www
PKGNAMEPREFIX= ${PHP_PKGNAMEPREFIX}

View file

@ -1,3 +1,3 @@
TIMESTAMP = 1685946635
SHA256 (kanboard-kanboard-v1.2.30_GH0.tar.gz) = cf7b8437053ac29323523841a224f43c4859e1a6440347ccd78095dfda8788d2
SIZE (kanboard-kanboard-v1.2.30_GH0.tar.gz) = 3253809
TIMESTAMP = 1688464043
SHA256 (kanboard-kanboard-v1.2.31_GH0.tar.gz) = 3ad58bea8160f71fc7a6681659b0c4073a7044816d4a0a00e08b5d2253d7bc93
SIZE (kanboard-kanboard-v1.2.31_GH0.tar.gz) = 3349887

View file

@ -1842,6 +1842,11 @@
%%WWWDIR%%/vendor/psr/container/src/ContainerExceptionInterface.php
%%WWWDIR%%/vendor/psr/container/src/ContainerInterface.php
%%WWWDIR%%/vendor/psr/container/src/NotFoundExceptionInterface.php
%%WWWDIR%%/vendor/psr/event-dispatcher/.editorconfig
%%WWWDIR%%/vendor/psr/event-dispatcher/LICENSE
%%WWWDIR%%/vendor/psr/event-dispatcher/src/EventDispatcherInterface.php
%%WWWDIR%%/vendor/psr/event-dispatcher/src/ListenerProviderInterface.php
%%WWWDIR%%/vendor/psr/event-dispatcher/src/StoppableEventInterface.php
%%WWWDIR%%/vendor/psr/log/LICENSE
%%WWWDIR%%/vendor/psr/log/Psr/Log/AbstractLogger.php
%%WWWDIR%%/vendor/psr/log/Psr/Log/InvalidArgumentException.php
@ -1855,15 +1860,28 @@
%%WWWDIR%%/vendor/psr/log/Psr/Log/Test/LoggerInterfaceTest.php
%%WWWDIR%%/vendor/psr/log/Psr/Log/Test/TestLogger.php
%%WWWDIR%%/vendor/symfony/console/Application.php
%%WWWDIR%%/vendor/symfony/console/Attribute/AsCommand.php
%%WWWDIR%%/vendor/symfony/console/CHANGELOG.md
%%WWWDIR%%/vendor/symfony/console/CI/GithubActionReporter.php
%%WWWDIR%%/vendor/symfony/console/Color.php
%%WWWDIR%%/vendor/symfony/console/Command/Command.php
%%WWWDIR%%/vendor/symfony/console/Command/CompleteCommand.php
%%WWWDIR%%/vendor/symfony/console/Command/DumpCompletionCommand.php
%%WWWDIR%%/vendor/symfony/console/Command/HelpCommand.php
%%WWWDIR%%/vendor/symfony/console/Command/LazyCommand.php
%%WWWDIR%%/vendor/symfony/console/Command/ListCommand.php
%%WWWDIR%%/vendor/symfony/console/Command/LockableTrait.php
%%WWWDIR%%/vendor/symfony/console/Command/SignalableCommandInterface.php
%%WWWDIR%%/vendor/symfony/console/CommandLoader/CommandLoaderInterface.php
%%WWWDIR%%/vendor/symfony/console/CommandLoader/ContainerCommandLoader.php
%%WWWDIR%%/vendor/symfony/console/CommandLoader/FactoryCommandLoader.php
%%WWWDIR%%/vendor/symfony/console/Completion/CompletionInput.php
%%WWWDIR%%/vendor/symfony/console/Completion/CompletionSuggestions.php
%%WWWDIR%%/vendor/symfony/console/Completion/Output/BashCompletionOutput.php
%%WWWDIR%%/vendor/symfony/console/Completion/Output/CompletionOutputInterface.php
%%WWWDIR%%/vendor/symfony/console/Completion/Suggestion.php
%%WWWDIR%%/vendor/symfony/console/ConsoleEvents.php
%%WWWDIR%%/vendor/symfony/console/Cursor.php
%%WWWDIR%%/vendor/symfony/console/DependencyInjection/AddConsoleCommandPass.php
%%WWWDIR%%/vendor/symfony/console/Descriptor/ApplicationDescription.php
%%WWWDIR%%/vendor/symfony/console/Descriptor/Descriptor.php
@ -1875,6 +1893,7 @@
%%WWWDIR%%/vendor/symfony/console/Event/ConsoleCommandEvent.php
%%WWWDIR%%/vendor/symfony/console/Event/ConsoleErrorEvent.php
%%WWWDIR%%/vendor/symfony/console/Event/ConsoleEvent.php
%%WWWDIR%%/vendor/symfony/console/Event/ConsoleSignalEvent.php
%%WWWDIR%%/vendor/symfony/console/Event/ConsoleTerminateEvent.php
%%WWWDIR%%/vendor/symfony/console/EventListener/ErrorListener.php
%%WWWDIR%%/vendor/symfony/console/Exception/CommandNotFoundException.php
@ -1885,6 +1904,8 @@
%%WWWDIR%%/vendor/symfony/console/Exception/MissingInputException.php
%%WWWDIR%%/vendor/symfony/console/Exception/NamespaceNotFoundException.php
%%WWWDIR%%/vendor/symfony/console/Exception/RuntimeException.php
%%WWWDIR%%/vendor/symfony/console/Formatter/NullOutputFormatter.php
%%WWWDIR%%/vendor/symfony/console/Formatter/NullOutputFormatterStyle.php
%%WWWDIR%%/vendor/symfony/console/Formatter/OutputFormatter.php
%%WWWDIR%%/vendor/symfony/console/Formatter/OutputFormatterInterface.php
%%WWWDIR%%/vendor/symfony/console/Formatter/OutputFormatterStyle.php
@ -1906,6 +1927,7 @@
%%WWWDIR%%/vendor/symfony/console/Helper/SymfonyQuestionHelper.php
%%WWWDIR%%/vendor/symfony/console/Helper/Table.php
%%WWWDIR%%/vendor/symfony/console/Helper/TableCell.php
%%WWWDIR%%/vendor/symfony/console/Helper/TableCellStyle.php
%%WWWDIR%%/vendor/symfony/console/Helper/TableRows.php
%%WWWDIR%%/vendor/symfony/console/Helper/TableSeparator.php
%%WWWDIR%%/vendor/symfony/console/Helper/TableStyle.php
@ -1934,26 +1956,31 @@
%%WWWDIR%%/vendor/symfony/console/Question/ConfirmationQuestion.php
%%WWWDIR%%/vendor/symfony/console/Question/Question.php
%%WWWDIR%%/vendor/symfony/console/Resources/bin/hiddeninput.exe
%%WWWDIR%%/vendor/symfony/console/Resources/completion.bash
%%WWWDIR%%/vendor/symfony/console/SignalRegistry/SignalRegistry.php
%%WWWDIR%%/vendor/symfony/console/SingleCommandApplication.php
%%WWWDIR%%/vendor/symfony/console/Style/OutputStyle.php
%%WWWDIR%%/vendor/symfony/console/Style/StyleInterface.php
%%WWWDIR%%/vendor/symfony/console/Style/SymfonyStyle.php
%%WWWDIR%%/vendor/symfony/console/Terminal.php
%%WWWDIR%%/vendor/symfony/console/Tester/ApplicationTester.php
%%WWWDIR%%/vendor/symfony/console/Tester/CommandCompletionTester.php
%%WWWDIR%%/vendor/symfony/console/Tester/CommandTester.php
%%WWWDIR%%/vendor/symfony/console/Tester/Constraint/CommandIsSuccessful.php
%%WWWDIR%%/vendor/symfony/console/Tester/TesterTrait.php
%%WWWDIR%%/vendor/symfony/deprecation-contracts/CHANGELOG.md
%%WWWDIR%%/vendor/symfony/deprecation-contracts/LICENSE
%%WWWDIR%%/vendor/symfony/deprecation-contracts/function.php
%%WWWDIR%%/vendor/symfony/event-dispatcher-contracts/CHANGELOG.md
%%WWWDIR%%/vendor/symfony/event-dispatcher-contracts/Event.php
%%WWWDIR%%/vendor/symfony/event-dispatcher-contracts/EventDispatcherInterface.php
%%WWWDIR%%/vendor/symfony/event-dispatcher-contracts/LICENSE
%%WWWDIR%%/vendor/symfony/event-dispatcher/Attribute/AsEventListener.php
%%WWWDIR%%/vendor/symfony/event-dispatcher/CHANGELOG.md
%%WWWDIR%%/vendor/symfony/event-dispatcher/Debug/TraceableEventDispatcher.php
%%WWWDIR%%/vendor/symfony/event-dispatcher/Debug/TraceableEventDispatcherInterface.php
%%WWWDIR%%/vendor/symfony/event-dispatcher/Debug/WrappedListener.php
%%WWWDIR%%/vendor/symfony/event-dispatcher/DependencyInjection/AddEventAliasesPass.php
%%WWWDIR%%/vendor/symfony/event-dispatcher/DependencyInjection/RegisterListenersPass.php
%%WWWDIR%%/vendor/symfony/event-dispatcher/Event.php
%%WWWDIR%%/vendor/symfony/event-dispatcher/EventDispatcher.php
%%WWWDIR%%/vendor/symfony/event-dispatcher/EventDispatcherInterface.php
%%WWWDIR%%/vendor/symfony/event-dispatcher/EventSubscriberInterface.php
@ -1961,7 +1988,6 @@
%%WWWDIR%%/vendor/symfony/event-dispatcher/ImmutableEventDispatcher.php
%%WWWDIR%%/vendor/symfony/event-dispatcher/LICENSE
%%WWWDIR%%/vendor/symfony/event-dispatcher/LegacyEventDispatcherProxy.php
%%WWWDIR%%/vendor/symfony/event-dispatcher/LegacyEventProxy.php
%%WWWDIR%%/vendor/symfony/finder/CHANGELOG.md
%%WWWDIR%%/vendor/symfony/finder/Comparator/Comparator.php
%%WWWDIR%%/vendor/symfony/finder/Comparator/DateComparator.php
@ -1987,6 +2013,23 @@
%%WWWDIR%%/vendor/symfony/finder/Iterator/VcsIgnoredFilterIterator.php
%%WWWDIR%%/vendor/symfony/finder/LICENSE
%%WWWDIR%%/vendor/symfony/finder/SplFileInfo.php
%%WWWDIR%%/vendor/symfony/polyfill-ctype/Ctype.php
%%WWWDIR%%/vendor/symfony/polyfill-ctype/LICENSE
%%WWWDIR%%/vendor/symfony/polyfill-ctype/bootstrap.php
%%WWWDIR%%/vendor/symfony/polyfill-ctype/bootstrap80.php
%%WWWDIR%%/vendor/symfony/polyfill-intl-grapheme/Grapheme.php
%%WWWDIR%%/vendor/symfony/polyfill-intl-grapheme/LICENSE
%%WWWDIR%%/vendor/symfony/polyfill-intl-grapheme/bootstrap.php
%%WWWDIR%%/vendor/symfony/polyfill-intl-grapheme/bootstrap80.php
%%WWWDIR%%/vendor/symfony/polyfill-intl-normalizer/LICENSE
%%WWWDIR%%/vendor/symfony/polyfill-intl-normalizer/Normalizer.php
%%WWWDIR%%/vendor/symfony/polyfill-intl-normalizer/Resources/stubs/Normalizer.php
%%WWWDIR%%/vendor/symfony/polyfill-intl-normalizer/Resources/unidata/canonicalComposition.php
%%WWWDIR%%/vendor/symfony/polyfill-intl-normalizer/Resources/unidata/canonicalDecomposition.php
%%WWWDIR%%/vendor/symfony/polyfill-intl-normalizer/Resources/unidata/combiningClass.php
%%WWWDIR%%/vendor/symfony/polyfill-intl-normalizer/Resources/unidata/compatibilityDecomposition.php
%%WWWDIR%%/vendor/symfony/polyfill-intl-normalizer/bootstrap.php
%%WWWDIR%%/vendor/symfony/polyfill-intl-normalizer/bootstrap80.php
%%WWWDIR%%/vendor/symfony/polyfill-mbstring/LICENSE
%%WWWDIR%%/vendor/symfony/polyfill-mbstring/Mbstring.php
%%WWWDIR%%/vendor/symfony/polyfill-mbstring/Resources/unidata/lowerCase.php
@ -2007,6 +2050,9 @@
%%WWWDIR%%/vendor/symfony/polyfill-php80/Resources/stubs/UnhandledMatchError.php
%%WWWDIR%%/vendor/symfony/polyfill-php80/Resources/stubs/ValueError.php
%%WWWDIR%%/vendor/symfony/polyfill-php80/bootstrap.php
%%WWWDIR%%/vendor/symfony/service-contracts/Attribute/Required.php
%%WWWDIR%%/vendor/symfony/service-contracts/Attribute/SubscribedService.php
%%WWWDIR%%/vendor/symfony/service-contracts/CHANGELOG.md
%%WWWDIR%%/vendor/symfony/service-contracts/LICENSE
%%WWWDIR%%/vendor/symfony/service-contracts/ResetInterface.php
%%WWWDIR%%/vendor/symfony/service-contracts/ServiceLocatorTrait.php
@ -2014,6 +2060,25 @@
%%WWWDIR%%/vendor/symfony/service-contracts/ServiceSubscriberInterface.php
%%WWWDIR%%/vendor/symfony/service-contracts/ServiceSubscriberTrait.php
%%WWWDIR%%/vendor/symfony/service-contracts/Test/ServiceLocatorTest.php
%%WWWDIR%%/vendor/symfony/string/AbstractString.php
%%WWWDIR%%/vendor/symfony/string/AbstractUnicodeString.php
%%WWWDIR%%/vendor/symfony/string/ByteString.php
%%WWWDIR%%/vendor/symfony/string/CHANGELOG.md
%%WWWDIR%%/vendor/symfony/string/CodePointString.php
%%WWWDIR%%/vendor/symfony/string/Exception/ExceptionInterface.php
%%WWWDIR%%/vendor/symfony/string/Exception/InvalidArgumentException.php
%%WWWDIR%%/vendor/symfony/string/Exception/RuntimeException.php
%%WWWDIR%%/vendor/symfony/string/Inflector/EnglishInflector.php
%%WWWDIR%%/vendor/symfony/string/Inflector/FrenchInflector.php
%%WWWDIR%%/vendor/symfony/string/Inflector/InflectorInterface.php
%%WWWDIR%%/vendor/symfony/string/LICENSE
%%WWWDIR%%/vendor/symfony/string/LazyString.php
%%WWWDIR%%/vendor/symfony/string/Resources/data/wcswidth_table_wide.php
%%WWWDIR%%/vendor/symfony/string/Resources/data/wcswidth_table_zero.php
%%WWWDIR%%/vendor/symfony/string/Resources/functions.php
%%WWWDIR%%/vendor/symfony/string/Slugger/AsciiSlugger.php
%%WWWDIR%%/vendor/symfony/string/Slugger/SluggerInterface.php
%%WWWDIR%%/vendor/symfony/string/UnicodeString.php
%%WWWDIR%%/web.config
@dir %%WWWDIR%%/plugins
@owner