Advisories » MGASA-2016-0002

Updated phpmyadmin packages fix security vulnerability

Publication date: 09 Jan 2016
Modification date: 09 Jan 2016
Type: security
Affected Mageia releases : 5
CVE: CVE-2015-8669

Description

By calling some scripts that are part of phpMyAdmin in an unexpected way,
it is possible to trigger phpMyAdmin to display a PHP error message which
contains the full path of the directory where phpMyAdmin is installed
(CVE-2015-8669).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=17402
• https://www.phpmyadmin.net/security/PMASA-2015-6/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8669

SRPMS

5/core

• phpmyadmin-4.2.13.3-1.3.mga5