Advisories » MGASA-2016-0092

Updated phpmyadmin packages fix security vulnerabilities

Publication date: 02 Mar 2016
Modification date: 02 Mar 2016
Type: security
Affected Mageia releases : 5
CVE: CVE-2016-2560 , CVE-2016-2561

Description

Updated phpmyadmin package fixes security vulnerabilities:

Multiple cross-site scripting (XSS) issues in phpMyAdmin before 4.4.15.5
(CVE-2016-2560, CVE-2016-2561).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=17849
• https://www.phpmyadmin.net/security/PMASA-2016-11/
• https://www.phpmyadmin.net/security/PMASA-2016-12/
• https://www.phpmyadmin.net/files/4.4.15.5/
• https://www.phpmyadmin.net/news/2016/2/29/phpmyadmin-401015-44155-and-4551-are-released/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2560
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2561

SRPMS

5/core

• phpmyadmin-4.4.15.5-1.2.mga5