United States : 
Unknown Browser
www.ltdw.net 
Articles Sécurité Mandriva Security [Security Announce] [ MDVSA-2008:202 ] phpMyAdmin
Articles Sécurité Mandriva Security [Security Announce] [ MDVSA-2008:202 ] phpMyAdmin
| [Security Announce] [ MDVSA-2008:202 ] phpMyAdmin |
 |
 |
 |
(0 Votes)| Écrit par Administrator |
| Mardi, 23 Septembre 2008 21:28 |
|
_______________________________________________________________________ Mandriva Linux Security Advisory MDVSA-2008:202 http://www.mandriva.com/security/ _______________________________________________________________________ Package : phpMyAdmin Date : September 23, 2008 Affected: Corporate 4.0 _______________________________________________________________________ Problem Description: A few vulnerabilities and security-related issues have been fixed in phpMyAdmin since the 2.11.7 release. This update provides version 2.11.9.2 which is the latest stable release of phpMyAdmin and fixes CVE-2008-3197, CVE-2008-3456, CVE-2008-3457, and CVE-2008-4096. No configuration changes should be required since the previous update (version 2.11.7). If upgrading from older versions, it may be necessary to reconfigure phpMyAdmin. The configuration file is located in /etc/phpMyAdmin/. In most cases, it should be sufficient so simply replace config.default.php with config.default.php.rpmnew and make whatever modifications are necessary. _______________________________________________________________________ References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3197 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3456 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3457 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4096 _______________________________________________________________________ Updated Packages: Corporate 4.0: 0635e45206bbef765fc28f767b192fb8 corporate/4.0/i586/phpMyAdmin-2.11.9.2-0.1.20060mlcs4.noarch.rpm a77e1ee58cee71ce8ed5cfc4e41388e5 corporate/4.0/SRPMS/phpMyAdmin-2.11.9.2-0.1.20060mlcs4.src.rpm Corporate 4.0/X86_64: ff48721fe14c94775082b32e1173bc43 corporate/4.0/x86_64/phpMyAdmin-2.11.9.2-0.1.20060mlcs4.noarch.rpm a77e1ee58cee71ce8ed5cfc4e41388e5 corporate/4.0/SRPMS/phpMyAdmin-2.11.9.2-0.1.20060mlcs4.src.rpm _______________________________________________________________________ To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing: gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98 You can view other update advisories for Mandriva Linux at: http://www.mandriva.com/security/advisories If you want to report vulnerabilities, please contact security_(at)_mandriva.com _______________________________________________________________________ 
|