{"id":"openSUSE-SU-2017:3448-1","aliases":[],"status":"published","title":"Security update for phpMyAdmin","description":"This update for phpMyAdmin to version 4.7.7 fixes a security issue and bugs.\n    \nThe following vulnerability was fixed:\n    \n- By deceiving a user to click on a crafted URL, it was possible to perform harmful database\n  operations (bsc#1074066, PMASA-2017-09)\n\nThis update also contains all upstream improvements and bugfixes in version 4.7.7:\n\n- various display and UI fixes\n- PHP error fixes\n- Improved deteciton of MySQL server needing SSL connections\n- Support JSON datatype on MariaDB 10.2.7 and newer\n- Fix constructing ALTER query with AFTER\n- Fix changing password on MariaDB cluster","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2017-12-29T16:35:29Z","modified":"2017-12-29T16:35:29Z","fixes":[{"ecosystem":"SUSE:Package Hub 12","package":"phpMyAdmin","fixed_in":["4.7.7-14.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"SUSE:Package Hub 12","package":"phpMyAdmin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.7.7-14.1"}]}]}],"references":[{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/S2TCUFEQYBD4YCQKKUHAYS7Z5HE727Z3/#S2TCUFEQYBD4YCQKKUHAYS7Z5HE727Z3","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1074066","tags":["report"]}],"sources":{"osv":[{"id":"openSUSE-SU-2017:3448-1","title":"Security update for phpMyAdmin","description":"This update for phpMyAdmin to version 4.7.7 fixes a security issue and bugs.\n    \nThe following vulnerability was fixed:\n    \n- By deceiving a user to click on a crafted URL, it was possible to perform harmful database\n  operations (bsc#1074066, PMASA-2017-09)\n\nThis update also contains all upstream improvements and bugfixes in version 4.7.7:\n\n- various display and UI fixes\n- PHP error fixes\n- Improved deteciton of MySQL server needing SSL connections\n- Support JSON datatype on MariaDB 10.2.7 and newer\n- Fix constructing ALTER query with AFTER\n- Fix changing password on MariaDB cluster\n","status":"published","published":"2017-12-29T16:35:29Z","modified":"2017-12-29T16:35:29Z","updated_at":"2026-11-02T16:58:30.39372Z"}]}}