News
Apache 2.4.63 Released!
- Details
Apache httpd 2.4.63 is released as GA.
07 February 2025 Update, see Httpd 2.4.63 crash with Window 7 https://www.apachelounge.com/viewtopic.php?t=9348
ASF and Apachelounge changes : https://www.apachelounge.com/Changelog-2.4.html
Important : NO security vulnerabilities fixed in 2.4.63, see https://httpd.apache.org/security/vulnerabilities_24.html .
VS17 Win32
The Win32 version is available again, see also discussion https://www.apachelounge.com/viewtopic.php?p=42099
Only build the with the standard Apache modules.
For non-standard modules (like mod_fcgid) use the VS16 Win32 ones at https://www.apachelounge.com/download/VS16/
Documentation: http://httpd.apache.org/docs/2.4/
Build with dependencies:
- openssl 3.3.2
- nghttp2 1.64.1
- jansson 2.14
- curl 8.11.1
- apr 1.7.5
- apr-util 1.6.3
- apr-iconv 1.2.2
- zlib 1.3.1
- brotli 1.1.0
- pcre2 10.44
- libxml2 2.13.5
- lua 5.4.7
- expat 2.6.2
Notes VS17 OpenSSL 3.x.x:
- Only PHP 8.2 and 8.1 (build with 3.x.x) is running as module.
Running with mod_fcgid no issues seen.
For running as module, See also the post from user Otomatic and notes at https://www.apachelounge.com/viewtopic.php?t=8969
and https://www.apachelounge.com/viewtopic.php?t=8938
- With too weak certificates/ciphers Apache does not start, see https://www.apachelounge.com/viewtopic.php?t=8819
Composer 2.8.5 Released!
- Details
Changelog
-
Added build provenance attestation so you can also now download and verify phar files from GitHub releases:
gh release --repo composer/composer download --pattern composer.phar gh attestation verify --repo composer/composer composer.phar -
Fixed unsupported
fundingvalues causing parse errors in packages (#12247) -
Fixed support for a few newer funding formats (#12257)
-
Fixed InstalledVersions regression from 2.8.4 when
reload()is used (#12269) -
Fixed psr-0/psr-4 rules having unstable order in
vendor/composer/autoload*.php(#12263) -
Fixed a few warnings happening incorrectly in edge cases (#12284, #12268, #12283)
Git 2.47.1 & 2.8.0-rc2 Released!
- Details
Git 2.47.1
Changes since Git for Windows v2.47.0(2) (October 22nd 2024)
This release comes with the first early native git-for-windows/git#3107, ready for testing (the included Git Bash is actually not native, for technical reasons, but the git.exe is a native ARM64 executable). Please report any issues!
New Features
Comes with Git v2.47.1.
Comes with cURL v8.11.0.
Comes with Git LFS v3.6.0.
Bug Fixes
Due to a bug introduced in the v2.47 cycle, git-for-windows/git#5231, which was git-for-windows/build-extra#578.
A potential crash in Git Bash on Insider versions of Windows/ARM64 git-for-windows/msys2-runtime#76.
On Windows/ARM64, running the 64-bit version of Git for Windows could infrequently cause deadlocked threads (see e.g. msys2/msys2-autobuild#62 or this one), git-for-windows/msys2-runtime#73.
Git 2.48.0-rc2
Git for Windows v2.48.0-rc2.windows.1 Pre-release
Changes since Git for Windows v2.47.1 (November 25th 2024)
New Features
Comes with Git v2.48.0-rc2.
Comes with cURL v8.11.1.
Comes with MinTTY v3.7.7.
New Git for Windows installation git-for-windows/build-extra#586.
Bug Fixes
The installer now correctly blocks the installation on Windows 7 and Windows 8 as these versions of Windows are no longer supported since Git for Windows v2.47.0
When using the cache credential helper, it could error out with "fatal: unable to connect to cache daemon: Unknown error" under certain circumstances; This git-for-windows/git#5329.
Phpmyadmin 5.2.2 Released
- Details
phpMyAdmin 5.2.2 is released
2025-01-21
Welcome to the release of phpMyAdmin version 5.2.2, the "I should have released this sooner" release. This is primarily a bugfix release but also contains a few security fixes as noted below.
- fix possible security issue in sql-parser which could cause long execution times that could create a DOS attack (thanks to Maximilian Krög https://github.com/MoonE)
- fix an XSS vulnerability in the check tables feature (PMASA-2025-1, thanks to bluebird https://github.com/blue-bird1)
- fix an XSS vulnerability in the Insert tab (PMASA-2025-2, thanks to frequent contributor Kamil Tekiela https://github.com/kamil-tekiela)
- fix possible security issue with library code slim/psr7 (CVE-2023-30536)
- fix possible security issue relating to iconv (CVE-2024-2961, PMASA-2025-3)
- fix a full path disclosure in the Monitoring tab
- issue #18268 Fix UI issue the theme manager is disabled
- issue Allow opening server breadcrumb links in new tab with Ctrl/Meta key
- issue #19141 Add cookie prefix '-__Secure-' to cookies to help prevent cookie smuggling
- issue #18106 Fix renaming database with a view
- issue #18120 Fix bug with numerical tables during renaming database
- issue #16851 Fix ($cfg['Order']) default column order doesn't have have any effect since phpMyAdmin 4.2.0
- issue #18258 Speed improvements when exporting a database
- issue #18769 Improved collations support for MariaDB 10.10
There are many, many more fixes that you can see in the ChangeLog file included with this release or online at https://github.com/phpmyadmin/phpmyadmin/blob/RELEASE_5_2_2/ChangeLog
Downloads are available now at https://phpmyadmin.net/downloads/
For the phpMyAdmin team, Isaac