This update for phpMyAdmin fixes multiple issues.
Security issues fixed:
* CVE-2018-12613: File inclusion and remote code execution attack
(boo#1098751)
* CVE-2018-12581: XSS in Designer feature (boo#1098752)
This update to version 4.8.2 also contains number of upstream bug fixes
and improvements.
Patch Instructions:
To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
- SUSE Package Hub for SUSE Linux Enterprise 12:
zypper in -t patch openSUSE-2018-669=1
- SUSE Package Hub for SUSE Linux Enterprise 12 (noarch):
phpMyAdmin-4.8.2-23.1
https://www.suse.com/security/cve/CVE-2018-12581.html
https://www.suse.com/security/cve/CVE-2018-12613.html
https://bugzilla.suse.com/1098751
https://bugzilla.suse.com/1098752
--
Get the latest Linux and open source security news straight to your inbox.