- News - lists.phpmyadmin.net

phpMyAdmin 4.6.6, 4.4.15.10, and 4.0.10.19 are released
by Isaac Bennetch 23 Jan '17

23 Jan '17

The phpMyAdmin project is pleased to announce the release of phpMyAdmin versions 4.6.6 (including bug and security fixes), 4.4.15.10 (security fixes), and 4.0.10.19 (security fixes). We recommend all users update their phpMyAdmin installations. There have been changes in the behavior since previous version: * Changed the suggested text in the query window for delete queries to avoid accidental data loss * Re-introduce a page which shows the output of phpinfo() Aside from the changes and security improvements, many bugs have been fixed including: * Parsing of SQL queries with the BINARY function * Syntax error when adding or changing TIMESTAMP columns with default value as NULL * Broken "Edit" and "Export" links in the Routines tab * Creating a new user on older MariaDB servers * Format button in the SQL tab broken * Fixes for PHP 7.1 * Problems with MySQL servers running with `lower_case_names=2` * Fixes for several PHP notices/warnings being shown Please note that, as previously announced, the 4.4 branch is no longer supported. This security release is planned as the final 4.4 release. See the 4.4.15.10 release notes for more information. As always, downloads and release notes are available at https://www.phpmyadmin.net/downloads For more information, please see * <https://www.phpmyadmin.net/files/4.6.6/> * <https://www.phpmyadmin.net/files/4.4.15.10/> * <https://www.phpmyadmin.net/files/4.0.10.19/> The phpMyAdmin team

1 0

phpMyAdmin 4.5.6.2 is released
by Isaac Bennetch 05 Dec '16

05 Dec '16

Welcome to phpMyAdmin version 4.6.5.2, a patch-level release which fixes an issue with exporting certain character sequences including a backslash (\), such as \r\n. Because this issue [#12765](https://github.com/phpmyadmin/phpmyadmin/issues/12765) affects export functionality, we do recommend updating when possible. As always, downloads are available at https://www.phpmyadmin.net/downloads/ Previously fixed in 4.6.5.1: * an issue affecting a small number of users using $cfg['Servers'][$i]['hide_db'] or $cfg['Servers'][$i]['only_db']. * an issue affecting the create table dialog where the partition selection tool was overzealous and made it difficult to create a new table. Highlights from the 4.6.5 release: * Fix for expanding in navigation pane * Reintroduced a simplified version of PmaAbsoluteUri directive (needed with reverse proxies) * Fix editing of ENUM/SET/DECIMAL field structures * Improvements to the parser A full list of changes is available in the ChangeLog file included with every release. The phpMyAdmin team

1 0

phpMyAdmin 4.6.5.1 is released, fixing two small bugs with 4.6.5
by Isaac Bennetch 26 Nov '16

26 Nov '16

We at the phpMyAdmin project are releasing version 4.6.5.1 as a quick fix to two issues caused by yesterday's 4.6.5 release: * Issue #12735 affecting a small number of users using $cfg['Servers'][$i]['hide_db'] or $cfg['Servers'][$i]['only_db']. * Issue #12736 affecting the create table dialog where the partition selection tool was overzealous and made it difficult to create a new table. There are also minor improvements to the Czech language file and an improved error message when the mbstring extension is missing. Users of 4.6.5 who are not affected by these bugs need not upgrade to 4.6.5.1. Downloads are available from https://www.phpmyadmin.net/downloads The phpMyAdmin team

1 0

phpMyAdmin 4.6.5, 4.4.15.9, and 4.0.10.18 are released
by Isaac Bennetch 25 Nov '16

25 Nov '16

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 The phpMyAdmin project is pleased to announce the release of phpMyAdmin versions 4.6.5 (including bug and security fixes), 4.4.15.9 (security fixes), and 4.0.10.18 (security fixes). We recommend all users update their phpMyAdmin installations. Aside from the security improvements, many bugs have been fixed in version 4.6.5 including: * Fix for expanding in navigation pane * Reintroduced a simplified version of PmaAbsoluteUri directive (needed with reverse proxies) * Fix editing of ENUM/SET/DECIMAL field structures * Improvements to the parser Please note that this is expected to be the final release of the 4.4 branch, which ended security support on October 1, 2016. We are particularly grateful for the work of researcher Emanuel Bronshtein who helped identify many of these flaws. - -The phpMyAdmin team -----BEGIN PGP SIGNATURE----- iQIcBAEBCgAGBQJYN9YnAAoJEM51LxeCWb2SmysP/0q/OM8Ur7pQfqP8vUUsHBun mq2/1/GkRS6smTJ8gkCp7A6osP6ADcmEGUNUg6Tulmq7M4vH6VgKmA4t+hTHCSuw h3vP1uySrNrNRlA5dV0nWchqOKOPlkTiZeyvp1nHoXylq72ctg7Lh2901eG6MOT0 U9jYvzQfKiyfk7hIdkGmP3OhNnuJd7IPEyh8j2zkBaZovXiqvwSPh8C0uxsq4maA H4RR7akqpv+LtSm2anjRs012M6g7KXtos5pOT2oValkmceqqveeQkW1ZHSk0q3h1 hVCxLxLuEt9yn7Hq1FzSXhN3LrozAR/4Plc5cRpEuuv8sv4Dicildp0w67I4E8wv LPFhjqLC8XE2TkJkHQL4QVlFNB+rHJUZ9sFr8V5Pr8uP9j/2AlKN2tRkjuYXwFH4 G4oCpNlaGAqS4tGF4u/GsP00mZ81rmXOLIYVN18WlqcZ+nM6XGbkPf4e5yJwQ2/B Lja+rCB5MdOe1axXPmG4MOfIym1e3euzB/qpayC7LdXn9hSe+sjykMNSUGSnIN3/ iN0hf2wP4gPFnxbGaowYisrBVKaJsSGDu1hxveOAVy7xVMZWh+2tvi826gUJkd3D VV2FF7Xf9WfRopsI1TYUstf/wbkIzr6iBpq7ey/YqrEHnwXSkKwDLxBzgeNO8ZFQ F8wU4Y+TiEe7b843NChm =XMSp -----END PGP SIGNATURE-----

1 0

phpMyAdmin 4.0.10.17, 4.4.15.8, and 4.6.4 are released
by Isaac Bennetch 16 Aug '16

16 Aug '16

The phpMyAdmin team announces the release of versions 4.0.10.17 (security fixes), 4.4.15.8 (security fixes), and 4.6.4 (security and bug fixes). These release includes many security fixes of various levels of severity. We recommend all users upgrade to this release immediately. For full information on the vulnerabilities fixed and mitigation factors for users who are unable to upgrade, refer to the ChangeLog file included with this release and the security announcements at https://www.phpmyadmin.net/security/ Aside from the security fixes, bugs have been fixed in version 4.6.4 affecting: * Create view when no view name specified * Changing a password * Fix deleting of users with non-English locales * Fixed password change on MariaDB without auth plugin * and more the phpMyAdmin team

1 0

phpMyAdmin 4.0.10.16, 4.4.15.7, and 4.6.3 are released
by Isaac Bennetch 23 Jun '16

23 Jun '16

The phpMyAdmin project announces the release of phpMyAdmin versions 4.0.10.16, 4.4.15.7, and 4.6.3. All versions feature many security fixes that are announced as PMASA-2016-17 through PMASA-2016-28 which are posted at https://www.phpmyadmin.net/security/ Furthermore, version 4.6.3 includes the regularly scheduled maintenance improvements and bug fixes. In addition to bugs affecting particular version combinations, some of the other bugs fixed include: * Fixing cookie path on Windows * Fix MySQL SSL connections with some PHP versions * Fix listing of routines for non-privileged user As well as several more. Complete details are available in the ChangeLog. We highly recommend updating all affected versions immediately. Downloads are available at https://www.phpmyadmin.net/downloads We thank the security researchers who found and reported these flaws. The phpMyAdmin team

1 0

Seeking a phpMyAdmin Developer (one year contract position)
by Isaac Bennetch 08 Jun '16

08 Jun '16

Overview The phpMyAdmin Project is looking for a full-time or part-time developer to assist in development, including bug fixing and refactoring. Work plan The ideal candidate will dynamically balance their workload based on outstanding issues and priority, but is anticipated to break down to these percentages (in priority order of what's most important to least important): Security maintenance (5%) Bug fixing and issue assessment (45%) Code base improvement like refactoring and writing unit tests (45%) Implementation of new features (5%) Work conditions The Developer shall publish a weekly blog post about his/her work to the phpMyAdmin community. The Developer shall send a monthly invoice to the Software Freedom Conservancy for the work done during that month. All work produced by the Developer is to be licensed under "GPLv2 or later". This is an independent contractor position: the Developer will be responsible for his/her own equipment and expenses. The Candidate The candidate will be able to demonstrate a very good knowledge of phpMyAdmin's code base. In addition, we expect excellent skills in all of the technologies used by phpMyAdmin (PHP, HTML, JavaScript, jQuery, CSS, MySQL) and excellent communication skills. Applying Candidates should submit their proposal (including their CV, availability, and financial terms) to: pmadeveloper(a)sfconservancy.org. The deadline for this initial round of proposals is 2016-06-30.

1 0

phpMyAdmin security notifications and 4.4.15.6 is released
by Isaac Bennetch 25 May '16

25 May '16

The phpMyAdmin project is announcing a series of non-critical security advisories, including the release of version 4.4.15.6. Summary: Sensitive Data in URL GET Query Parameters URL: https://www.phpmyadmin.net/security/PMASA-2016-14/ Summary: File Traversal Protection Bypass on Error Reporting URL: https://www.phpmyadmin.net/security/PMASA-2016-15/ Summary: Self XSS URL: https://www.phpmyadmin.net/security/PMASA-2016-16/ Versions 4.6.2 and 4.4.15.6 have been released today including fixes for these. The phpMyAdmin team

1 0

phpMyAdmin 4.6.2 is released
by Isaac Bennetch 25 May '16

25 May '16

Welcome to phpMyAdmin 4.6.2, a regular maintenance release consisting mostly of bug fixes and also including a few non-critical security fixes. Security notifications: https://www.phpmyadmin.net/security/PMASA-2016-14/ https://www.phpmyadmin.net/security/PMASA-2016-16/ A few of the many bugs fixed include: * Avoid using too log URLs when getting javascripts * Fixed setting mixed case languages (this prevented users from using certain translations) * Fix cookie path on IIS * Fix occassional 200 errors on Windows * Fixed export of ARCHIVE tables with keys * Add session reload for config authentication As well as several others. A complete list of changes is available in the ChangeLog file. Downloads are available at https://www.phpmyadmin.net/downloads The phpMyAdmin team

1 0

phpMyAdmin 4.6.1 is released
by Isaac Bennetch 02 May '16

02 May '16

Welcome to phpMyAdmin 4.6.1, a regular maintenance release consisting mostly of bug fixes. A few of the many bugs fixed include: * Problems with SQL syntax warnings from the linter/parser * Fixing an error about "PMA_Util" not found * Better handling of JSON columns * Fixed quoting with the SQL parser, which in particular adversely affected SQL imports and exports A complete list of changes is available in the ChangeLog file. Downloads are available at https://www.phpmyadmin.net/downloads The phpMyAdmin team

1 0