Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Mageia 9: MGASA-2025-0023 critical: phpMyAdmin XSS and library issues

mageia
Calendar Grey January 24, 2025
Dist Mageia Esm H88
New phpMyAdmin updates for Mageia address several security flaws, such as XSS vulnerabilities and issues within libraries.
fix possible security issue with library code slim/psr7 (CVE-2023-30536) fix possible security issue relating to iconv (CVE-2024-2961, PMASA-2025-3) fix an XSS vulnerability in the...

Summary

fix possible security issue with library code slim/psr7 (CVE-2023-30536) fix possible security issue relating to iconv (CVE-2024-2961, PMASA-2025-3) fix an XSS vulnerability in the check tables feature (PMASA-2025-1) fix an XSS vulnerability in the Insert tab (PMASA-2025-2)

References

- https://bugs.mageia.org/show_bug.cgi?id=33948

- https://www.phpmyadmin.net/news/2025/1/21/phpMyAdmin-522-is-released/

- https://www.cve.org/CVERecord?id=CVE-2023-30536

- https://www.cve.org/CVERecord?id=CVE-2024-2961

Resolution

SRPMS

- 9/core/phpmyadmin-5.2.2-1.mga9

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 24 Jan 2025
URL: https://advisories.mageia.org/MGASA-2025-0023.html
Type: security
CVE: CVE-2023-30536, CVE-2024-2961

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here