Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 464
Alerts This Week
Warning Icon 1 464

Mageia 9: MGASA-2025-0023 critical: phpMyAdmin XSS and library issues

mageia
Calendar Grey January 24, 2025
Scroller Mageia
New phpMyAdmin updates for Mageia address several security flaws, such as XSS vulnerabilities and issues within libraries.
fix possible security issue with library code slim/psr7 (CVE-2023-30536) fix possible security issue relating to iconv (CVE-2024-2961, PMASA-2025-3) fix an XSS vulnerability in the...

Summary

fix possible security issue with library code slim/psr7 (CVE-2023-30536) fix possible security issue relating to iconv (CVE-2024-2961, PMASA-2025-3) fix an XSS vulnerability in the check tables feature (PMASA-2025-1) fix an XSS vulnerability in the Insert tab (PMASA-2025-2)

References

- https://bugs.mageia.org/show_bug.cgi?id=33948

- https://www.phpmyadmin.net/news/2025/1/21/phpMyAdmin-522-is-released/

- https://www.cve.org/CVERecord?id=CVE-2023-30536

- https://www.cve.org/CVERecord?id=CVE-2024-2961

Topics%20covered

Topics Covered

security advisory update XSS phpMyAdmin Mageia iconv library code

Resolution

SRPMS

- 9/core/phpmyadmin-5.2.2-1.mga9

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 24 Jan 2025
URL: https://advisories.mageia.org/MGASA-2025-0023.html
Type: security
CVE: CVE-2023-30536, CVE-2024-2961

Topics%20covered

Topics Covered

security advisory update XSS phpMyAdmin Mageia iconv library code

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.