Several issues have been fixed in phpMyAdmin, the web administration tool for MySQL. CVE-2014-8958 (Wheezy only) Multiple cross-site scripting (XSS) vulnerabilities. CVE-2014-9218 (Wheezy only) Denial of service (resource consumption) via a long password. CVE-2015-2206 Risk of BREACH attack due to reflected parameter. CVE-2015-3902 XSRF/CSRF vulnerability in phpMyAdmin setup. CVE-2015-3903 (Jessie only) Vulnerability allowing man-in-the-middle attack on API call to GitHub. CVE-2015-6830 (Jessie only) Vulnerability that allows bypassing the reCaptcha test. CVE-2015-7873 (Jessie only) Content spoofing vulnerability when redirecting user to an external site. For the oldstable distribution (wheezy), these problems have been fixed in version 4:3.4.11.1-2+deb7u2. For the stable distribution (jessie), these problems have been fixed in version 4:4.2.12-2+deb8u1. For the unstable distribution (sid), these problems have been fixed in version 4:4.5.1-1. We recommend that you upgrade your phpmyadmin packages.
Several issues have been fixed in phpMyAdmin, the web administration tool for MySQL.
Multiple cross-site scripting (XSS) vulnerabilities.
Denial of service (resource consumption) via a long password.
Risk of BREACH attack due to reflected parameter.
XSRF/CSRF vulnerability in phpMyAdmin setup.
Vulnerability allowing man-in-the-middle attack on API call to GitHub.
Vulnerability that allows bypassing the reCaptcha test.
Content spoofing vulnerability when redirecting user to an external site.
For the oldstable distribution (wheezy), these problems have been fixed in version 4:3.4.11.1-2+deb7u2.
For the stable distribution (jessie), these problems have been fixed in version 4:4.2.12-2+deb8u1.
For the unstable distribution (sid), these problems have been fixed in version 4:4.5.1-1.
We recommend that you upgrade your phpmyadmin packages.