SOLVED [CPANEL-25286] Updating phpMyAdmin

[fdnven]

Hi Client sent over info on current vulnerability.

Security - PMASA-2019-1
Security - PMASA-2019-2

Is there a way to update phpMYAdmin. Or do we stand by for patches?

Currently running Version information: 4.8.3

Thanks
Frank

 

[cPanelLauren]

Hi @fdnven


We are indeed addressing this with a patch that will be released soon we have CPANEL-25286 in which we'll be implementing the patch for both of these in v76 and v78 of cPanel/WHM

This only affects the "Designer View" which isn't actually enabled on cPanel's installation of PHPmyAdmin by default.


We'll update this thread when the fix for the case is updated.


Thanks!

 

[cPanelMichael]

Hello,

To follow-up, here's the entry in the Version 78 Change Log noting the fix was published on 2019-02-08:

[security] Fixed case CPANEL-25286: Update to cpanel-phpmyadmin to 4.8.3-6 to address CVE-2019-6798 and CVE-2019-6799.

You can see which versions are published to each Release Tier on the link below:

Latest cPanel & WHM Builds

Thank you.