Stay Secure with the Latest Linux Advisories

security advisorysecurity issueFedora

Fedora 23: 2015-deb2bbdde0 Critical: phpMyAdmin Path Exposure

phpMyAdmin 4.5.3.1 (2015-12-25) offset 2 - [Security] Path disclosure, see PMASA-2015-6 ---- phpMyAdmin 4.5.3.0 (2015-12-23) UNION ALL - MATCH AGAINST keywords not recognized - syntax verifier is not knowing "STRAIGHT_JOIN" - REPLACE() function confused with REPLACE statement -. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2015-deb2bbdde0 2015-12-30 21:36:00.625352 -------------------------------------------------------------------------------- Name : phpMyAdmin Product : Fedora 23 Version : 4.5.3.1 Release : 1.fc23 URL : https://www.phpmyadmin.net/ Summary : Handle the administration of MySQL over the World Wide Web Description : phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the World Wide Web. Most frequently used operations are supported by the user interface (managing databases, tables, fields, relations, indexes, users, permissions), while you still have the ability to directly execute any SQL statement. Features include an intuitive web interface, support for most MySQL features (browse and drop databases, tables, views, fields and indexes, create, copy, drop, rename and alter databases, tables, fields and indexes, maintenance server, databases and tables, with proposals on server configuration, execute, edit and bookmark any SQL-statement, even batch-queries, manage MySQL usersand privileges, manage stored procedures and triggers), import data from CSV and SQL, export data to various formats: CSV, SQL, XML, PDF, OpenDocument Text and Spreadsheet, Word, Excel, LATEX and others, administering multiple servers, creating PDF graphics of your database layout, creating complex queries using Query-by-example (QBE), searching globally in a database or a subset of it, transforming stored data into any format using a set of predefined functions, like displaying BLOB-data as image or download-link and muchmore... -------------------------------------------------------------------------------- Update Information: phpMyAdmin 4.5.3.1 (2015-12-25) =============================== - Undefined offset 2 - [Security] Path disclosure, see PMASA-2015-6 ---- phpMyAdmin 4.5.3.0 (2015-12-23) =============================== - Incomplete results of UNION ALL - MATCH AGAINST keywords not recognized - syntax verifier is not knowing "STRAIGHT_JOIN" - REPLACE() function confused with REPLACE statement - FLUSH word not recognized by parser - Online syntax verifier bug - "IF" on SELECT statement - Format breaks query with COUNT() - Undefinex index: SendErrorReports - Incorrect script name in include - Warning: Invalid argument supplied for foreach() - Delimiter missing while exporting multiple db routines - mysql_native_password with MariaDB bug - Flush privileges overusage - related to #11597 - Query was empty on creating User in 4.5.2 - PMA_getDataForDeleteUsers() warning - Cannot create user on Percona Server - Properly report error on connecting - Database export template not saving compression option - Fix single quote export for servers in ANSI_QUOTES mode - Avoid duplicite fetching of table information - Temporary fix for live data edit of big sets is not working - IE 8 compatibility in console - Exporting feature does not work with union table - CSV import skip row count after - Cannot export results of some queries - Message "An account already exists..." incorrectly displayed - Missing quoting of table in ALTER CONVERT query - PMA 4.5.2 breaks MySQL Master-Master Cluster - Export and preview show different SQL for character set - Fix possible undefined variables in table operations -------------------------------------------------------------------------------- References: [ 1 ] Bug #1294254 - PMASA-2015-6 phpMyAdmin: Path disclosure https://bugzilla.redhat.com/show_bug.cgi?id=1294254 -------------------------------------------------------------------------------- This update can be installed with the "yum"update program. Use su -c 'yum update phpMyAdmin' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://lists.fedoraproject.org/admin/lists/package-announce.lists.fedoraproject.org/ . Security patch addresses phpMyAdmin path leak vulnerability on Fedora 23. Utilize yum for installation to enhance security measures.. phpMyAdmin Update,Fedora Security Patch,Web Administration Tool. . Severity: Critical. LinuxSecurity.com Team

Dec 31, 2015 •Critical Fedora