Resolved ETA on php / phpmyadmin updates

[JonathanSmith]

Server operating system version

Almalinux 8.7

Plesk version and microupdate number

18.0.49

Hi,

We are currently using Plesk version 18.0.49 Update 2, with php 7.4.33 and phpmyadin 5.1.3.
Due to recent security alerts, we have been asked to patch or mitigate, though it seems no updates are available for those packages. Do you have an estimation on updates availability ?
Thanks !

 

[JonathanSmith]

Here is the link to the CVE: NVD - CVE-2020-22452
Score : 9.8/10
The last version of phpMyAdmin, 5.2.0 is safe.

 

[FISHeR]

Hi,

phpMyAdmin will be updated in the next release.

 

[JonathanSmith]

Hello,
I wrote you 1 month ago and am still waiting for the last phpmyadmin update availability, which should fix the vulnerability reported in CVE NVD - CVE-2020-22452
Do you have an ETA and more info on this ?

 

[Peter Debik]

phpMyAdmin is planned to be upgraded to version 5.2.1 in Plesk Obsidian 18.0.51. There is no fixed ETA for this version yet, but it is in the end phase of development, so we hope that it will become available soon.

 

[JonathanSmith]

Plesk Obsidian 18.0.51 is available since March 14th 2023 and includes the upgrade from PHP 7.4 to PHP 8.0 for the platform itself (Plesk administration, phpMyAdmin, ...) as well as the upgrade from phpMyAdmin 5.1.3 to 5.2.1
So it's OK for us on the security side. Thanks

Changelog : Change Log for Plesk Obsidian