| [Security Announce] [ MDVSA-2008:131 ] - Updated phpMyAdmin packages fix multiple vulnerabilities |
|
|
|
| Écrit par Administrator |
| Vendredi, 04 Juillet 2008 22:46 |
|
_______________________________________________________________________ Mandriva Linux Security Advisory MDVSA-2008:131 http://www.mandriva.com/security/ _______________________________________________________________________ Package : phpMyAdmin Date : July 4, 2008 Affected: Corporate 4.0 _______________________________________________________________________ Problem Description: A few vulnerabilities and security-related issues have been fixed in phpMyAdmin since the 2.11.2.2 release. This update provides version 2.11.7 which is the latest stable release of phpMyAdmin and fixes CVE-2008-1149, CVE-2008-1567, CVE-2008-1924, and CVE-2008-2960. No configuration changes should be required since the previous update (version 2.11.2.2). If upgrading from older versions, it may be necessary to reconfigure phpMyAdmin. The configuration file is located in /etc/phpMyAdmin/. In most cases, it should be sufficient so simply replace config.default.php with config.default.php.rpmnew and make whatever modifications are necessary. _______________________________________________________________________ References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1149 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1567 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1924 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2960 _______________________________________________________________________ Updated Packages: Corporate 4.0: e0808e7ccb437c0da416c979605d0f9f corporate/4.0/i586/phpMyAdmin-2.11.7-0.1.20060mlcs4.noarch.rpm 31c0d1f53b3b9ca46cfb057fea859428 corporate/4.0/SRPMS/phpMyAdmin-2.11.7-0.1.20060mlcs4.src.rpm Corporate 4.0/X86_64: e0808e7ccb437c0da416c979605d0f9f corporate/4.0/x86_64/phpMyAdmin-2.11.7-0.1.20060mlcs4.noarch.rpm 31c0d1f53b3b9ca46cfb057fea859428 corporate/4.0/SRPMS/phpMyAdmin-2.11.7-0.1.20060mlcs4.src.rpm _______________________________________________________________________ To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing: gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98 You can view other update advisories for Mandriva Linux at: http://www.mandriva.com/security/advisories If you want to report vulnerabilities, please contact security_(at)_mandriva.com _______________________________________________________________________ |



























































