Adminer

v5.5.0 Security

This release includes 2 security fixes for security teams reviewing exposed deployments.

Published 9d Relational Databases

✓ No known CVEs patched

This release patches 2 known CVEs

Topics

database mssql mysql php postgresql sqlite

Affected surfaces

auth breaking_upgrade

Summary

AI summary

Security fixes for header validation, new MariaDB vector support and plugins, and SQLite STRICT/WITHOUT ROWID plus several MySQL/SQLite enhancements.

Full changelog

Disallow invalid port or socket (GHSA-58cq-mgw2-38m5)
Ignore invalid X-Forwarded-Prefix (GHSA-8478-xrj3-h9c2)
Hide copy to clipboard in insecure contexts
Process list: Copy query to clipboard
Wrap uneditable values in edit form
Syntax highlighting: Speed up
Allow connecting to socket without hostname (bug #1199, regression from 5.4.0)
MySQL: Do not export IN in FUNCTION parameters (regression from 5.4.2)
MySQL: Convert vector columns to text in select and edit
MySQL: Unsupport MySQL < 5.1
MySQL, SQLite: Draggable columns in alter table
MariaDB: Support inet4 and inet6 types
MariaDB: Allow setting password with password validation plugin (bug SF-814)
MariaDB 11.7+: Support vector columns and indexes
PostgreSQL 9.2+: Highlight queries in process list
SQLite: Support ANY type
SQLite: Support STRICT and WITHOUT ROWID tables
SQLite: Do not treat INTEGER PRIMARY KEY without AUTOINCREMENT as auto increment
SQLite: Disable editing of sqlite_schema
MS SQL: Fix multiple result sets (bug #1180)
New plugin: Redis driver
New plugin: Login behind a reverse proxy

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track Adminer

Get notified when new releases ship.

About Adminer

Database management in a single PHP file. Available for MySQL, MariaDB, PostgreSQL, SQLite, MS SQL, Oracle, Elasticsearch, MongoDB and others.