Bug 27742

Summary: phpmyadmin: broken two factor authentication
Product: Mageia Reporter: Marc Krämer <mageia>
Component: RPM PackagesAssignee: QA Team <qa-bugs>
Status: RESOLVED FIXED QA Contact:
Severity: normal    
Priority: Normal CC: andrewsfarm, mageia, ouaurelien, sysadmin-bugs
Version: 7Keywords: advisory, validated_update
Target Milestone: ---   
Hardware: All   
OS: Linux   
URL: https://www.phpmyadmin.net/news/2020/10/15/phpmyadmin-497-and-504-are-released/
Whiteboard: MGA7-64-OK
Source RPM: phpmyadmin-4.9.6-1.mga7.src.rpm CVE:
Status comment:

Description Marc Krämer 2020-12-04 15:55:57 CET
in current release two factor authentication is broken
Marc Krämer 2020-12-04 15:56:29 CET

URL: (none) => https://www.phpmyadmin.net/news/2020/10/15/phpmyadmin-497-and-504-are-released/

Comment 1 Marc Krämer 2020-12-21 16:43:28 CET
Updated package phpmyadmin

In the last release the package does not provide the required sources for 2 factor authorisation.


References:
https://www.phpmyadmin.net/news/2020/10/15/phpmyadmin-497-and-504-are-released/

--------------------------------------------------------
Updates in core/updates_testing

SRPM:
phpmyadmin-4.9.7-1.mga7.src.rpm

RPM:
phpmyadmin-4.9.7-1.mga7.noarch.rpm

Assignee: mageia => qa-bugs

Comment 2 PC LX 2020-12-22 12:48:29 CET
Installed and tested without issues.

Before this update the following message was shown:
"Two-factor authentication is not available, please install optional dependencies to enable authentication backends."

After the update the 2FA configuration form is shown and have tested it using the FreeOTP Android application. It worked without issues.


System: Mageia 7, x86_64, PHP in FPM mode, Intel CPU.


$ uname -a
Linux marte 5.7.19-desktop-3.mga7 #1 SMP Sun Oct 18 15:46:00 UTC 2020 x86_64 x86_64 x86_64 GNU/Linux
$ rpm -q phpmyadmin
phpmyadmin-4.9.7-1.mga7
$ php --version
PHP 7.3.23 (cli) (built: Sep 29 2020 12:13:58) ( NTS )
Copyright (c) 1997-2018 The PHP Group
Zend Engine v3.3.23, Copyright (c) 1998-2018 Zend Technologies

CC: (none) => mageia

Comment 3 PC LX 2020-12-28 12:53:34 CET
This update has been working without issues for over a week so I'm marking it as OK for x86_64. Please, undo if you think it needs more testing.

Whiteboard: (none) => MGA7-64-OK

Comment 4 Thomas Andrews 2020-12-28 23:07:12 CET
Validating. Advisory information in Comment 1.

CC: (none) => andrewsfarm, sysadmin-bugs
Keywords: (none) => validated_update

Comment 5 Aurelien Oudelet 2020-12-29 11:26:49 CET
Advisory pushed to SVN.

CC: (none) => ouaurelien
Keywords: (none) => advisory
Source RPM: phpmyadmin => phpmyadmin-4.9.6-1.mga7.src.rpm

Comment 6 Mageia Robot 2020-12-29 12:58:34 CET
An update for this issue has been pushed to the Mageia Updates repository.

https://advisories.mageia.org/MGAA-2020-0249.html

Resolution: (none) => FIXED
Status: NEW => RESOLVED