Looks like neither Debian 9 nor Ubuntu 18.04 are getting fixes for latest phpMyAdmin security flaws. Neither OS has the latest 4.8 version even in testing or other coming distributions yet. Are those latest fixes already added to Debian and Ubuntu previously? I tried to look last weeks happenings, but did not find any mention. https://www.phpmyadmin.net/news/2018/12/11/security-fix-phpmyadmin-484-released/
That's a good question. When I look at the changelog, then it seems that they either stopped maintaining phpmyadmin or not updating the changelog anymore since mid 2017: https://metadata.ftp-master.debian.org/changelogs/main/p/phpmyadmin/phpmyadmin_4.6.6-4_changelog https://metadata.ftp-master.debian.org/changelogs/main/p/phpmyadmin/phpmyadmin_4.6.6-5_changelog
Seems indeed as if there is no maintainer for phpmyadmin in Debian anymore. Really bad for such a widely used package. https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=916310
Same for Ubuntu. No active maintaining in either distribution. I'd recommend not to use the system-packages currently.
at least with ubuntu18 phpmyadmin is broken and does not work with the default-php. You can install phpmyadmin with apt to get the "basics", but you should update the version. Code: #!/bin/bash PHPMYADMIN=4.8.3 cd /tmp wget https://files.phpmyadmin.net/phpMyAdmin/${PHPMYADMIN}/phpMyAdmin-${PHPMYADMIN}-all-languages.zip unzip phpMyAdmin-${PHPMYADMIN}-all-languages.zip cd phpMyAdmin-${PHPMYADMIN}-all-languages cp -R * /usr/share/phpmyadmin
Is that install script old? It uses 4.8.3 but the new PHP released on Monday is version 4.8.4. If you have been running with that since summer, it looks like overwriting the apt-get installed /usr/share/phpmyadmin works. That would be a simple way to get that new phpMyAdmin.
