Bug 495768 (CVE-2009-1285) - CVE-2009-1285 phpMyAdmin: Insufficient output sanitizing when generating configuration file fixed in 3.1.3.2 (PMASA-2009-4)
Summary: CVE-2009-1285 phpMyAdmin: Insufficient output sanitizing when generating conf...
Keywords:
Status: CLOSED ERRATA
Alias: CVE-2009-1285
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Red Hat Product Security
QA Contact:
URL: http://www.phpmyadmin.net/home_page/s...
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2009-04-14 17:52 UTC by Robert Scheck
Modified: 2009-04-18 13:03 UTC (History)
1 user (show)

Fixed In Version: 3.1.3.2-1
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2009-04-18 13:03:33 UTC
Embargoed:


Attachments (Terms of Use)

Description Robert Scheck 2009-04-14 17:52:49 UTC
Description of problem:
Welcome to phpMyAdmin 3.1.3.2, a security-fix version. Details will appear on 
http://phpmyadmin.net.

Version-Release number of selected component (if applicable):
For 3.x: versions before 3.1.3.2.

-> Affects all active Fedora branches.

Comment 1 Robert Scheck 2009-04-14 17:53:52 UTC
Date: Tue, 14 Apr 2009 12:48:53 -0400
Subject: [Phpmyadmin-news] phpMyAdmin 3.1.3.2 is released

Comment 2 Robert Scheck 2009-04-14 18:06:57 UTC
According to the phpMyAdmin changelog:

3.1.3.2 (2009-04-14)
- [security] Insufficient output sanitizing when generating configuration file

Comment 3 Robert Scheck 2009-04-14 18:07:25 UTC
Package: phpMyAdmin-3.1.3.2-1.fc11 Tag: dist-f11 Status: complete Built by: robert
Package: phpMyAdmin-3.1.3.2-1.fc9 Tag: dist-f9-updates-candidate Status: complete Built by: robert
Package: phpMyAdmin-3.1.3.2-1.fc10 Tag: dist-f10-updates-candidate Status: complete Built by: robert

Comment 4 Fedora Update System 2009-04-14 18:08:53 UTC
phpMyAdmin-3.1.3.2-1.fc10 has been submitted as an update for Fedora 10.
http://admin.fedoraproject.org/updates/phpMyAdmin-3.1.3.2-1.fc10

Comment 5 Fedora Update System 2009-04-14 18:08:58 UTC
phpMyAdmin-3.1.3.2-1.fc9 has been submitted as an update for Fedora 9.
http://admin.fedoraproject.org/updates/phpMyAdmin-3.1.3.2-1.fc9

Comment 7 Fedora Update System 2009-04-15 18:00:28 UTC
phpMyAdmin-3.1.3.2-1.fc9 has been pushed to the Fedora 9 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 8 Fedora Update System 2009-04-15 18:01:49 UTC
phpMyAdmin-3.1.3.2-1.fc10 has been pushed to the Fedora 10 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 9 Robert Scheck 2009-04-18 13:03:33 UTC
Everything done, closing now.


Note You need to log in before you can comment on or make changes to this bug.