summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorJochen Neumeister <joneum@FreeBSD.org>2019-12-06 20:22:53 +0000
committerJochen Neumeister <joneum@FreeBSD.org>2019-12-06 20:22:53 +0000
commit69ceced024a8e0b73f1dc2e456b173b37c4bb878 (patch)
treeb188e0326959afd5071eb009adc5dc572bc1e5cd
parentUpdate to 8.5.49 (diff)
Add entry for phpmyadmin
Sponsored by: Netzkommune GmbH
Notes
Notes: svn path=/head/; revision=519163
-rw-r--r--security/vuxml/vuln.xml27
1 files changed, 27 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml
index 593dbee4daa2..5cdae1500e90 100644
--- a/security/vuxml/vuln.xml
+++ b/security/vuxml/vuln.xml
@@ -58,6 +58,33 @@ Notes:
* Do not forget port variants (linux-f10-libxml2, libxml2, etc.)
-->
<vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
+ <vuln vid="ca3fe5b3-185e-11ea-9673-4c72b94353b5">
+ <topic>phpmyadmin -- multiple vulnerabilities</topic>
+ <affects>
+ <package>
+ <name>phpmyadmin</name>
+ <range><lt>4.9.2</lt></range>
+ </package>
+ </affects>
+ <description>
+ <body xmlns="http://www.w3.org/1999/xhtml">
+ <p>the phpmyadmin team reports:</p>
+ <blockquote cite="https://www.phpmyadmin.net/news/2019/11/22/phpmyadmin-492-released/">
+ <p>This security fix is part of an ongoing effort to improve the security of the Designer feature
+ and is designated PMASA-2019-5. There is also an improvement for how we sanitize git version
+ information shown on the home page.</p>
+ </blockquote>
+ </body>
+ </description>
+ <references>
+ <url>https://www.phpmyadmin.net/news/2019/11/22/phpmyadmin-492-released/</url>
+ </references>
+ <dates>
+ <discovery>2019-11-22</discovery>
+ <entry>2019-12-06</entry>
+ </dates>
+ </vuln>
+
<vuln vid="4e3fa78b-1577-11ea-b66e-080027bdabe8">
<topic>Django -- multiple vulnerabilities</topic>
<affects>