Phpmyadmin 4.8.4

Hello,

The update is now on files.directadmin.com, files1, files2, files9.
Other mirrors should automatically update within 24 hours.

As for the security issue, it looks like you must be logged in, then click a specially formed URL for the security issue to affect you:
https://www.phpmyadmin.net/security/PMASA-2018-7/

The other one:
https://www.phpmyadmin.net/security/PMASA-2018-6/
is a local file inclusion, but as for most current setups, phpMyAdmin would run as "webapps", it shouldn't be able to affect any User files, but could in theory access the RoundCube database password, and other things in /var/www/html.

Immediate update is highly recommended.

John
 
Back
Top