From 7ed8b2119db38dcf6e3b6b2fd35f79b68c9c4ecca9d3feff99e0600d3098bfe2 Mon Sep 17 00:00:00 2001 From: Andreas Stieger Date: Sat, 28 May 2016 15:42:38 +0000 Subject: [PATCH] OBS-URL: https://build.opensuse.org/package/show/server:php:applications/phpMyAdmin?expand=0&rev=259 --- phpMyAdmin.changes | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/phpMyAdmin.changes b/phpMyAdmin.changes index dc79b8c..85e8038 100644 --- a/phpMyAdmin.changes +++ b/phpMyAdmin.changes @@ -23,11 +23,11 @@ Sat May 28 07:33:29 UTC 2016 - ecsos@opensuse.org - remove PmaAbsoluteUri from phpMyAdmin-config.patch because since version 4.6.0 it is remove - Security fixes: - * PMASA-2016-14 (CVE-2016-5097, CWE-661) + * PMASA-2016-14 (CVE-2016-5097, CWE-661, boo#982126) https://www.phpmyadmin.net/security/PMASA-2016-14/ - User SQL queries can be revealed through URL GET parameters, see PMASA-2016-14 - * PMASA-2016-16 (CVE-2016-5099, CWE-661) + * PMASA-2016-16 (CVE-2016-5099, CWE-661, boo#982128) https://www.phpmyadmin.net/security/PMASA-2016-16/ - Self XSS vulneratbility, see PMASA-2016-16