Welcome to the release of phpMyAdmin 5.2.3, a bugfix release. Please note that we are working towards the release of phpMyAdmin 6, which is expected to require PHP 8.2.0 or newer and MySQL 5.5 or newer or MariaDB 5.5 or newer. New releases and support for phpMyAdmin 5 is expected to end in the near future. Some notable fixes in this release include: Fixed "Delete" button not asking for…
Welcome to the release of phpMyAdmin version 5.2.2, the "I should have released this sooner" release. This is primarily a bugfix release but also contains a few security fixes as noted below. fix possible security issue in sql-parser which could cause long execution times that could create a DOS attack (thanks to Maximilian Krög https://github.com/MoonE ) fix an XSS vulnerability in the check…
The phpMyAdmin team is pleased to announce the release of phpMyAdmin version 5.2.1. This is a bugfix release that also contains a security fix for an XSS vulnerability in the drag-and-drop upload functionality (PMASA-2023-01). We are also releasing version 4.9.11 which exclusively fixes the XSS vulnerability. This release of 5.2.1 contains many bug fixes. Some highlights include: - issue #17506…
Welcome to the release of phpMyAdmin version 5.2.0. This release contains many new features and quite a few bug fixes. We are simultaneously releasing phpMyAdmin 5.1.4, which is the last release of the 5.1 line and is mostly intended to help downstream packaging teams. Most users should migrate to 5.2.0. Most notably, these releases resolve a networking error when exporting a file (…
The phpMyAdmin team announces the release of versions 4.9.10 and 5.1.3. These versions primarily address a regression that caused the navigation pane to not function correctly when multiple pages of tables were shown. Version 5.1.3 includes a security hardening improvement. The issue, reported by Rafael Pedrero, could allow users to cause an error that would reveal the path on disk where…
Welcome to the release of phpMyAdmin version 4.9.9. This is a release to fix two issues with the 4.9.8 release. We apologize for the inconvenience. Fixed since phpMyAdmin 4.9.8: Fix a syntax error preventing use with PHP 5 An error was shown regarding the new "hide_configuration_errors" directive when a controluser is set Fixed in phpMyAdmin 4.9.8: Fix for a user potentially being able to disable…
The phpMyAdmin project announces several new releases: 4.9.8, which fixes some security flaws 5.1.2, which fixes some security flaws and contains many bug fixes including better PHP 8.0 and 8.1 compatibility 5.2.0-rc1, a testing version introducing many new features Security fixes (affected versions as noted) A flaw was identified in how phpMyAdmin processes two factor authentication; a user could…
The infrastructure team would like to acknowledge the work of security researcher Joël Aviad Ossi from pentest in helping us improve some security weaknesses in our infrastructure. No user data was at risk nor were our downloads vulnerable at any time; this is simply a note of appreciation rather than a disclosure. Thanks Joël for your assistance. Anyone with security concerns about the project is…
We at the phpMyAdmin project are pleased to release phpMyAdmin 5.1.1, a bugfix release. There are many new bug fixes; a few highlights include: Fixes for several PHP errors Fixes for "$cfg['DefaultTabDatabase']" and other related configuration directives not working properly Fix Yaml export to quote strings even when they are numeric Fix TCPDF open_basedir issue due to internal guessing code from…
We at the phpMyAdmin project are pleased to publish phpMyAdmin 5.1.0. There are many new features and bug fixes; a few highlights include: Improve virtuality dropdown for MariaDB > 10.1 Added an option to perform ALTER ONLINE (ALGORITHM=INPLACE) when editing a table structure Added ip2long transformation Improvements to linking to MySQL and MariaDB documentation Add "Preview SQL" option on Index…