ALT-PU-2016-1758: package phpMyAdmin update to version 4.6.3-alt1
Описание
This update upgrades phpMyAdmin to version 4.6.3-alt1.
Устраненные уязвимости15
Ссылки13
GHSA-2p7v-jm8m-g3qq
https://github.com/advisories/GHSA-2p7v-jm8m-g3qqGHSA-3q28-xfw3-2q35
https://github.com/advisories/GHSA-3q28-xfw3-2q35GHSA-44vv-mm86-7cg6
https://github.com/advisories/GHSA-44vv-mm86-7cg6GHSA-6q2j-8h8q-46mr
https://github.com/advisories/GHSA-6q2j-8h8q-46mrGHSA-9rmm-8fp4-26hv
https://github.com/advisories/GHSA-9rmm-8fp4-26hvGHSA-cr65-p662-fx5c
https://github.com/advisories/GHSA-cr65-p662-fx5cGHSA-gcvp-cwgw-wx8j
https://github.com/advisories/GHSA-gcvp-cwgw-wx8jGHSA-mwm8-36c5-j5cf
https://github.com/advisories/GHSA-mwm8-36c5-j5cfGHSA-rh74-5835-jpxp
https://github.com/advisories/GHSA-rh74-5835-jpxpGHSA-rv57-479x-x4qv
https://github.com/advisories/GHSA-rv57-479x-x4qvGHSA-wm9c-vcv2-vpqc
https://github.com/advisories/GHSA-wm9c-vcv2-vpqcGHSA-xqw9-ffx7-g998
https://github.com/advisories/GHSA-xqw9-ffx7-g998Связанные уязвимости
phpMyAdmin before 4.6.2 places tokens in query strings and does not arrange for them to be stripped before external navigation, which allows remote attackers to obtain sensitive information by reading (1) HTTP requests or (2) server logs.
phpMyAdmin before 4.6.2 places tokens in query strings and does not arrange for them to be stripped before external navigation, which allows remote attackers to obtain sensitive information by reading (1) HTTP requests or (2) server logs.
phpMyAdmin before 4.6.2 places tokens in query strings and does not ar ...
phpMyAdmin before 4.6.2 places tokens in query strings and does not arrange for them to be stripped before external navigation, which allows remote attackers to obtain sensitive information by reading (1) HTTP requests or (2) server logs.
Cross-site scripting (XSS) vulnerability in phpMyAdmin 4.4.x before 4.4.15.6 and 4.6.x before 4.6.2 allows remote attackers to inject arbitrary web script or HTML via special characters that are mishandled during double URL decoding.