From upstream announcement:
Security fix: phpMyAdmin 4.7.8 is released
Welcome to phpMyAdmin 4.7.8, a security releaes also containing regular maintenance bug fixes.
The security fix relates to a self-XSS vulnerability in the central columns feature that is reported as PMASA-2018-1 https://www.phpmyadmin.net/security/PMASA-2018-1/. Thanks to Mayur Udiniya https://www.linkedin.com/in/mayur-udiniya-09247b129/ for finding and responsibly disclosing this flaw.
We recommend all users upgrade to resolve this security problem.
A complete list of new features and bugs that have been fixed is available in the ChangeLog file or changelog.php included with this release.
Notable changes since 4.7.7:
Additionally, there have been continuous improvements to many of the translations. If you don't see your language or find a problem, you can contribute too; see https://www.phpmyadmin.net/translate/ for details.
Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:
sudo dnf upgrade --refresh --advisory=FEDORA-2018-a1650ed14fPlease login to add feedback.
This update has been submitted for testing by remi.
This update has been pushed to testing.
remi edited this update.
works
This update has been submitted for stable by bodhi.
This update has been pushed to stable.