Several issues have been fixed in phpMyAdmin, the web administration
tool for MySQL.
CVE-2014-8958 (Wheezy only)
Multiple cross-site scripting (XSS) vulnerabilities.
CVE-2014-9218 (Wheezy only)
Denial of service (resource consumption) via a long password.
Risk of BREACH attack due to reflected parameter.
XSRF/CSRF vulnerability in phpMyAdmin setup.
CVE-2015-3903 (Jessie only)
Vulnerability allowing man-in-the-middle attack on API call to GitHub.
CVE-2015-6830 (Jessie only)
Vulnerability that allows bypassing the reCaptcha test.
CVE-2015-7873 (Jessie only)
Content spoofing vulnerability when redirecting user to an
For the oldstable distribution (wheezy), these problems have been fixed
in version 4:184.108.40.206-2+deb7u2.
For the stable distribution (jessie), these problems have been fixed in
For the unstable distribution (sid), these problems have been fixed in
We recommend that you upgrade your phpmyadmin packages.
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/
Mailing list: [email protected]
Debian Security Advisory DSA-3382-1 [email protected]
https://www.debian.org/security/ Thijs Kinkhorst
October 28, 2015 https://www.debian.org/security/faq
CVE-2015-3903 CVE-2015-6830 CVE-2015-7873