Bug 229095 - dev-db/phpmyadmin <2.11.7: XSS (CVE-2008-2960)
Bug#: 229095 (CVE-2008-2960) Product:  Gentoo Security Version: unspecified Platform: All
OS/Version: Linux Status: RESOLVED Severity: normal Priority: P2
Resolution: FIXED Assigned To: security@gentoo.org Reported By: hanno@gentoo.org
Component: Vulnerabilities
URL:  http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2008-4
Summary: dev-db/phpmyadmin <2.11.7: XSS (CVE-2008-2960)
Keywords:  
Status Whiteboard: C4 [noglsa]
Opened: 2008-06-23 18:08 0000
Description:   Opened: 2008-06-23 18:08 0000 
See:
http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2008-4

------- Comment #1 From Christian Hoffmann 2008-06-23 18:12:08 0000 ------- 
/me swaps teh brackets ;)

------- Comment #2 From Gunnar Wrobel 2008-06-30 19:48:44 0000 ------- 
phpmyadmin-2.11.7 is in the tree.

Targets:

 alpha amd64 hppa ppc ppc64 sparc x86

------- Comment #3 From Robert Buchholz 2008-06-30 21:22:54 0000 ------- 
Arches, please test and mark stable:
=dev-db/phpmyadmin-2.11.7
Target keywords : "alpha amd64 hppa ppc ppc64 sparc x86"

------- Comment #4 From Markus Rothe 2008-07-01 05:39:35 0000 ------- 
ppc64 stable

------- Comment #5 From Thomas Anderson (tanderson) 2008-07-01 13:08:55 0000 ------- 
amd64 stable, works with my mysql server, no regressions.

------- Comment #6 From Jeroen Roovers 2008-07-01 17:26:20 0000 ------- 
Stable for HPPA.

------- Comment #7 From Raúl Porcel 2008-07-01 18:15:15 0000 ------- 
alpha/sparc/x86 stable

------- Comment #8 From Tobias Scherbaum 2008-07-05 10:29:58 0000 ------- 
ppc stable

------- Comment #9 From Tobias Heinlein 2008-07-05 10:38:48 0000 ------- 
C4 doesn't require a vote. I would vote NO anyways.