Advisories » MGASA-2020-0150

Updated phpmyadmin packages fix security vulnerability

Publication date: 01 Apr 2020
Modification date: 01 Apr 2020
Type: security
Affected Mageia releases : 7
CVE: CVE-2020-10802 , CVE-2020-10803 , CVE-2020-10804

Description

Some SQL injections via table names and parameters were fixed.
                

References

• https://bugs.mageia.org/show_bug.cgi?id=26372
• https://www.phpmyadmin.net/news/2020/3/21/phpmyadmin-495-and-502-are-released/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10802
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10803
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10804

SRPMS

7/core

• phpmyadmin-4.9.5-1.mga7