Alerts This Week
Warning Icon 1 560
Alerts This Week
Warning Icon 1 560

openSUSE 12.3: SU-2013:1343-1 Critical: phpMyAdmin SQL Injection

opensuse
Calendar Grey August 14, 2013
Dist Opensuse Esm H88
New release of phpMyAdmin addresses severe vulnerabilities such as SQL injection and cross-site scripting (XSS) on openSUSE systems. Urgent steps advised.
An update that solves one vulnerability and has one errata An update that solves one vulnerability and has one errata An update that solves one vulnerability and has one errata is ...

Description

This version upgrade of phpMyAdmin fixed various security

issues (SQL injection, XSS, full path disclosure,

Clickjacking)

Patch

Patch Instructions:

To install this openSUSE Security Update use YaST online_update.

Alternatively you can run the command listed for your product:

- openSUSE 12.3:

zypper in -t patch openSUSE-2013-647

- openSUSE 12.2:

zypper in -t patch openSUSE-2013-647

To bring your system up-to-date, use "zypper patch".

Package List

- openSUSE 12.3 (noarch):

phpMyAdmin-4.0.5-1.8.1

- openSUSE 12.2 (noarch):

phpMyAdmin-4.0.5-1.16.1

References

https://www.suse.com/security/cve/CVE-2013-5029.html

Severity
critical
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2013:1343-1
Rating: important
Affected Products: openSUSE 12.3 openSUSE 12.2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here