openSUSE-SU-2017:3448-1
Security update for phpMyAdmin
No scoreFix available
This update for phpMyAdmin to version 4.7.7 fixes a security issue and bugs.
The following vulnerability was fixed:
- By deceiving a user to click on a crafted URL, it was possible to perform harmful database operations (bsc#1074066, PMASA-2017-09)
This update also contains all upstream improvements and bugfixes in version 4.7.7:
- various display and UI fixes
- PHP error fixes
- Improved deteciton of MySQL server needing SSL connections
- Support JSON datatype on MariaDB 10.2.7 and newer
- Fix constructing ALTER query with AFTER
- Fix changing password on MariaDB cluster
What each source reports
OSVNo score
Security update for phpMyAdmin
This update for phpMyAdmin to version 4.7.7 fixes a security issue and bugs.
The following vulnerability was fixed:
- By deceiving a user to click on a crafted URL, it was possible to perform harmful database operations (bsc#1074066, PMASA-2017-09)
This update also contains all upstream improvements and bugfixes in version 4.7.7:
- various display and UI fixes
- PHP error fixes
- Improved deteciton of MySQL server needing SSL connections
- Support JSON datatype on MariaDB 10.2.7 and newer
- Fix constructing ALTER query with AFTER
- Fix changing password on MariaDB cluster
- Record
openSUSE-SU-2017:3448-1- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
phpMyAdminSUSE:Package Hub 12 | before 4.7.7-14.1 | 4.7.7-14.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
openSUSE-SU-2017:3448-1 is a vulnerability with no CVSS score yet in phpMyAdmin, published December 29, 2017. No source lists public exploit code. Fixed in phpMyAdmin 4.7.7-14.1.