Advisories » MGASA-2016-0211

Updated phpmyadmin package fixes CVE-2016-5099

Publication date: 29 May 2016
Type: security
Affected Mageia releases : 5
CVE: CVE-2016-5099

Description

In phpMyAdmin before 4.4.15.6, a specially crafted attack could allow for
special HTML characters to be passed as URL encoded values and displayed
back as special characters in the page (CVE-2016-5099).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=18541
• https://www.phpmyadmin.net/security/PMASA-2016-16/
• https://www.phpmyadmin.net/files/4.4.15.6/
• https://www.phpmyadmin.net/news/2016/5/26/phpmyadmin-security-notifications-and-44156-released/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5099

SRPMS

5/core

• phpmyadmin-4.4.15.6-1.mga5