[phpMyAdmin Developers] phpMyAdmin 4.8.2 released: important security fix

The phpMyAdmin team is pleased to announce the release of phpMyAdmin
version 4.8.2. Among other bug fixes, this contains an important
security update and it is highly recommended that all users upgrade
immediately.

The urgent vulnerability allows an authenticated attacker to exploit a
phpMyAdmin feature to show and potentially execute files on the server.
PHP open_basedir restrictions mitigate the effect of this flaw. For
further details, see the PMASA announcement
<https://www.phpmyadmin.net/security/PMASA-2018-4/>.

A second flaw was also fixed allowing an attacker to use a specially
crafted database name to trick a user in to executing a cross-site
scripting (XSS) attack in the Designer feature
<https://www.phpmyadmin.net/security/PMASA-2018-3/>.

In addition to the security fixes, this release also includes these bug
fixes as part of our regular release cycle:

* WHERE 0 clause causes a fatal error
* Fix missing "INDEX" icon

Downloads are available at https://www.phpmyadmin.net/downloads/

_______________________________________________
Developers mailing list
[email protected]
https://lists.phpmyadmin.net/mailman/listinfo/developers

-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - https://gpgtools.org
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=UmlT
-----END PGP SIGNATURE-----