Security update for phpMyAdmin
phpMyAdmin was updated to fix four security issues.
For openSUSE 12.3 and 13.1, phpMyAdmin was updated to 4.1.14.7.
For openSUSE 13.2, phpMyAdmin was updated to to 4.2.12.
These security issues were fixed:
- XSS vulnerability in error reporting functionality (CVE-2014-8960).
- Local file inclusion vulnerability (CVE-2014-8959).
- Multiple XSS vulnerabilities (CVE-2014-8958).
- Leakage of line count of an arbitrary file (CVE-2014-8961).
-
Submitted by
Andreas Stieger (AndreasStieger)
Fixed bugs
bnc#906487
VUL-0: CVE-2014-8960: phpMyAdmin: XSS vulnerability in error reporting functionality.
bnc#906486
VUL-0: CVE-2014-8959: phpMyAdmin: Local file inclusion vulnerability.
bnc#906485
VUL-0: CVE-2014-8958: phpMyAdmin: Multiple XSS vulnerabilities..
bnc#906488
VUL-0: CVE-2014-8961: phpMyAdmin: Leakage of line count of an arbitrary file
