FEDORA-EPEL-2011-3910 — security update for phpMyAdmin

stable

phpMyAdmin-3.4.3.2-1.el6

FEDORA-EPEL-2011-3910 created by robert 12 years ago for Fedora EPEL 6

Changes for 3.4.3.2 (2011-07-23)

[PMASA-2011-9] XSS in table Print view (http://www.phpmyadmin.net/home_page/security/PMASA-2011-9.php)
[PMASA-2011-10] Local file inclusion via a crafted MIME-type transformation parameter (http://www.phpmyadmin.net/home_page/security/PMASA-2011-10.php)
[PMASA-2011-11] Local file inclusion vulnerability and code execution (http://www.phpmyadmin.net/home_page/security/PMASA-2011-11.php)
[PMASA-2011-12] Possible superglobal and local variables manipulation in swekey authentication (http://www.phpmyadmin.net/home_page/security/PMASA-2011-12.php)

This update has been submitted for testing by robert.

12 years ago

This update has been pushed to testing

12 years ago

athmane commented & provided feedback 12 years ago

karma

No regression noted.

This update has reached 14 days in testing and can be pushed to stable now if the maintainer wishes

12 years ago

This update has been submitted for stable by robert.

12 years ago

This update has been pushed to stable

12 years ago

Please login to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

None

Builds

phpMyAdmin-3.4.3.2-1.el6

Settings

Unstable by Karma

-3

Stable by Karma

disabled

Stable by Time

disabled

Dates

submitted

12 years ago

in testing

12 years ago

in stable

12 years ago

BZ#725377 phpMyAdmin-3.4.3.2 is available

BZ#725381 CVE-2011-2642 phpMyAdmin: v3.3.10.3, v3.4.3.2: XSS in table Print view (PMASA-2011-9)

BZ#725382 CVE-2011-2643 phpMyAdmin: v3.3.10.3, v3.4.3.2: Local file inclusion via a crafted MIME-type transformation parameter (PMASA-2011-10)

BZ#725383 CVE-2011-2718 phpMyAdmin: v3.3.10.3, v3.4.3.2: Local file inclusion and code execution in 'relational schema' code (PMASA-2011-11)

BZ#725384 CVE-2011-2719 phpMyAdmin: v3.3.10.3, v3.4.3.2: Possible session manipulation in Swekey extention authentication (PMASA-2011-12)

BZ#725385 CVE-2011-2642 CVE-2011-2643 phpMyAdmin various flaws [fedora-all]

BZ#725386 CVE-2011-2643 phpMyAdmin various flaws [epel-6]

phpMyAdmin-3.4.3.2-1.el6

Automated Test Results

None