Oval Definition:oval:org.opensuse.security:def:74786
Revision Date:2020-12-01Version:1
Title:Security update for phpMyAdmin (Moderate)
Description:

This update for phpMyAdmin to version 4.9.5 fixes the following issues:

- phpmyadmin was updated to 4.9.5:

- CVE-2020-10804: Fixed an SQL injection in the user accounts page, particularly when changing a password (boo#1167335 PMASA-2020-2). - CVE-2020-10802: Fixed an SQL injection in the search feature (boo#1167336 PMASA-2020-3). - CVE-2020-10803: Fixed an SQL injection and XSS when displaying results (boo#1167337 PMASA-2020-4). - Removed the 'options' field for the external transformation.
Family:unixClass:patch
Status:Reference(s):1160398
1167335
1167336
1167337
1169511
1171352
CVE-2020-10802
CVE-2020-10803
CVE-2020-10804
CVE-2020-2754
CVE-2020-2755
CVE-2020-2756
CVE-2020-2757
CVE-2020-2773
CVE-2020-2781
CVE-2020-2800
CVE-2020-2803
CVE-2020-2805
CVE-2020-2830
openSUSE-SU-2020:0405-1
openSUSE-SU-2020:0800-1
Platform(s):openSUSE Leap 15.1
Product(s):
Definition Synopsis
  • openSUSE Leap 15.1 is installed
  • AND phpMyAdmin-4.9.5-43 is installed
  • BACK