Ubuntu
phpmyadmin package

  1. Bug #696857
  2. Comment #5

Comment 5 for bug 696857

Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package phpmyadmin - 4:3.3.9-1ubuntu1

---------------
phpmyadmin (4:3.3.9-1ubuntu1) natty; urgency=low

  * SECURITY UPDATE: Unvalidated input on error page (LP: #696857)
    - debian/patches/CVE-2010-4480.patch: Don't use a redirect to the error page
    - CVE-2010-4480
  * SECURITY UPDATE: Possible information disclosure of phpinfo (same bug)
    - debian/patches/CVE-2010-4481.patch: Don't skip authentication for
      PMA_MINIMUM_COMMON
    - CVE-2010-4481

phpmyadmin (4:3.3.9-1) experimental; urgency=low

  * New upstream release.
  * Fix connection settings when using dbconfig with remote MySQL server.
  * Log when dbconfig generated settings are not accessible.
  * Add Slovak debconf translation (Closes: #608702).
  * Update Danish debconf translation (Closes: #608941).
 -- Micah Gersten <email address hidden> Wed, 05 Jan 2011 23:42:17 -0600