Released 2016-02-29.

Welcome to phpMyAdmin, a security release including some bug fixes to the SQL parser.

This release fixes multiple XSS vulnerabilities, please see PMASA-2016-10, PMASA-2016-11, and PMASA-2016-12 for details;
additionally it fixes a vulnerability allowing man-in-the-middle attack on an API call to GitHub, see PMASA-2016-13 for details.

It also inclues fixes for the following bugs:

- issue #11971 CREATE UNIQUE INDEX index type is not recognized by parser.
- issue #11982 Row count wrong when grouping joined tables.
- issue #12012 Column definition with default value and comment in CREATE TABLE exported faulty.
- issue #12020 New statement but no delimiter and unexpected token with REPLACE.
- issue #12029 Fixed incorrect usage of SQL parser context in SQL export
- issue #12048 Fixed inclusion of gettext library from SQL parser

Older version compatible with PHP 5.5 to 7.0 and MySQL/MariaDB 5.5. Was supported until April 1, 2016.

File Size Verification
phpMyAdmin- 5.8 MB [PGP] [SHA256]
phpMyAdmin- 7.7 MB [PGP] [SHA256]
phpMyAdmin- 9.6 MB [PGP] [SHA256]
phpMyAdmin- 5.7 MB [PGP] [SHA256]
phpMyAdmin- 4.1 MB [PGP] [SHA256]
phpMyAdmin- 4.8 MB [PGP] [SHA256]
phpMyAdmin- 5.6 MB [PGP] [SHA256]
phpMyAdmin- 4.0 MB [PGP] [SHA256] 6.7 MB [PGP] [SHA256]

Since July 2015 all phpMyAdmin releases are cryptographically signed by the releasing developer. You should verify that the signature matches the archive you have downloaded. Verification instructions are placed in our documentation in the Verifying phpMyAdmin releases chapter.