Ubuntu
phpmyadmin package

CVE-2011-0987 - SQL query could be executed under another user

Bug #721480 reported by Micah Gersten
258
This bug affects 1 person
Affects Status Importance Assigned to Milestone
phpmyadmin (Ubuntu)
Fix Released
Undecided
Unassigned
Hardy
Won't Fix
Medium
Unassigned
Karmic
Won't Fix
Medium
Unassigned
Lucid
Won't Fix
Medium
Unassigned
Maverick
Won't Fix
Medium
Unassigned

Bug Description

Binary package hint: phpmyadmin

http://www.phpmyadmin.net/home_page/security/PMASA-2011-2.php

CVE References

Revision history for this message
Micah Gersten (micahg) wrote :

This was fixed with the sync of 3.3.9.2-1 from Debian

visibility: private → public
Changed in phpmyadmin (Ubuntu):
status: New → Fix Released
Revision history for this message
Micah Gersten (micahg) wrote :

Maverick should be able to be fake sync'd from Debian (3.3.7-5 from stable-security)

Changed in phpmyadmin (Ubuntu Hardy):
importance: Undecided → Medium
status: New → Triaged
Changed in phpmyadmin (Ubuntu Karmic):
importance: Undecided → Medium
status: New → Triaged
Changed in phpmyadmin (Ubuntu Lucid):
importance: Undecided → Medium
status: New → Triaged
Changed in phpmyadmin (Ubuntu Maverick):
importance: Undecided → Medium
status: New → Confirmed
Revision history for this message
Jamie Strandboge (jdstrand) wrote :

Thank you for reporting this bug to Ubuntu. karmic has reached EOL
(End of Life) and is no longer supported. As a result, this bug
against karmic is being marked "Won't Fix". Please see
https://wiki.ubuntu.com/Releases for currently supported Ubuntu
releases.

Please feel free to report any other bugs you may find.

Changed in phpmyadmin (Ubuntu Karmic):
status: Triaged → Won't Fix
Revision history for this message
Jamie Strandboge (jdstrand) wrote :

Thank you for reporting this bug to Ubuntu. maverick has reached EOL
(End of Life) and is no longer supported. As a result, this bug
against maverick is being marked "Won't Fix". Please see
https://wiki.ubuntu.com/Releases for currently supported Ubuntu
releases.

Please feel free to report any other bugs you may find.

Changed in phpmyadmin (Ubuntu Maverick):
status: Confirmed → Won't Fix
Revision history for this message
Jamie Strandboge (jdstrand) wrote :

Thank you for reporting this bug to Ubuntu. hardy has reached EOL
(End of Life) and is no longer supported. As a result, this bug
against hardy is being marked "Won't Fix". Please see
https://wiki.ubuntu.com/Releases for currently supported Ubuntu
releases.

Please feel free to report any other bugs you may find.

Changed in phpmyadmin (Ubuntu Hardy):
status: Triaged → Won't Fix
Revision history for this message
Rolf Leggewie (r0lf) wrote :

lucid has seen the end of its life and is no longer receiving any updates. Marking the lucid task for this ticket as "Won't Fix".

Changed in phpmyadmin (Ubuntu Lucid):
status: Triaged → Won't Fix
To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.