[phpMyAdmin Developers] phpMyAdmin security pre-release announcement

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--===============6021256814618400365==
Content-Type: multipart/signed; micalg=pgp-sha512;
 protocol="application/pgp-signature";
 boundary="pj3ZeKwLpbZLyWElfVGgWeSyXVPLJHExC"

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--pj3ZeKwLpbZLyWElfVGgWeSyXVPLJHExC
Content-Type: multipart/mixed; boundary="lmBd9eFhDYZgdcmMjmSpKXjqy7xFodgVc"

--lmBd9eFhDYZgdcmMjmSpKXjqy7xFodgVc
Content-Type: text/plain; charset=utf-8
Content-Language: en-US
Content-Transfer-Encoding: quoted-printable

Hello,

The phpMyAdmin team is announcing that we are preparing a security fix
which we plan to release tomorrow, approximately 24 hours from now.

The attack vector requires that the attacker authenticate through a
valid MySQL/MariaDB account.

This announcement is part of our ongoing effort to announce security
releases in advance, when available, and should not be interpreted as
any commentary on the details of any specific vulnerability.

If you have questions or concerns, you can reach me directly or contact
the security team at [email protected].

Isaac for the phpMyAdmin team


--lmBd9eFhDYZgdcmMjmSpKXjqy7xFodgVc--

--pj3ZeKwLpbZLyWElfVGgWeSyXVPLJHExC
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=HSvz
-----END PGP SIGNATURE-----

--pj3ZeKwLpbZLyWElfVGgWeSyXVPLJHExC--


--===============6021256814618400365==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: inline

X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KRGV2ZWxvcGVy
cyBtYWlsaW5nIGxpc3QKRGV2ZWxvcGVyc0BwaHBteWFkbWluLm5ldApodHRwczovL2xpc3RzLnBo
cG15YWRtaW4ubmV0L21haWxtYW4vbGlzdGluZm8vZGV2ZWxvcGVycwo=

--===============6021256814618400365==--