phpMyAdmin 4.5.4.1 (2016-01-28)

• Error with PMA 4.4.15.3
• Remove hard dependency on phpseclib

phpMyAdmin 4.5.4 (2016-01-28)

• live data edit of big sets is not working
• Table list not saved in db QBE bookmarked search
• While 'changing a column', query fails with a syntax error after the 'CHARSET=' keyword
• Avoid syntax error in javascript messages on invalid PHP setting for max_input_vars
• Properly handle errors in upacking zip archive
• Set PHP's internal encoding to UTF-8
• Fixed Kanji encoding in some specific cases
• Check whether iconv works before using it
• Avoid conversion of MySQL error messages
• Undefined index: parameters
• Undefined index: field_name_orig
• Undefined index: host
• 'Add to central columns' (per column button) does nothing
• SQL duplicate entry error trying to INSERT in designer_settings table
• Fix handling of databases with dot in a name
• Fix hiding of page content behind menu
• FROM clause not generated after loading search bookmark
• Fix creating/editing VIEW with DEFINER containing special chars
• Do not invoke FLUSH PRIVILEGES when server in --skip-grant-tables
• Misleading message for configuration storage
• Table pagination does nothing when session expired
• Index comments not working properly
• Better handle local storage errors
• Improve detection of privileges for privilege adjusting
• Undefined property: stdClass::$releases at version check when disabled in config
• SQL comment and variable stripped from bookmark on save
• Gracefully handle errors in regex based javascript search
• [Security] Multiple full path disclosure vulnerabilities, see PMASA-2016-1
• [Security] Unsafe generation of CSRF token, see PMASA-2016-2
• [Security] Multiple XSS vulnerabilities, see PMASA-2016-3
• [Security] Insecure password generation in JavaScript, see PMASA-2016-4
• [Security] Unsafe comparison of CSRF token, see PMASA-2016-5
• [Security] Multiple full path disclosure vulnerabilities, see PMASA-2016-6
• [Security] XSS vulnerability in normalization page, see PMASA-2016-7
• [Security] Full path disclosure vulnerability in SQL parser, see PMASA-2016-8
• [Security] XSS vulnerability in SQL editor, see PMASA-2016-9