# phpmyadmin security updates

Patch Radar has 27 security fixes for phpmyadmin, closing 24 CVEs. The newest is DEBIAN-CVE-2025-3573 (4:5.2.2-really+dfsg-2), released April 15, 2025.

- Web page: https://patchblox.com/security/product/linux/phpmyadmin
- Platform: Linux
- Supported: yes

## Security fixes, newest first

| Fix | Released | Fixed in | Priority | CVEs | Exploited |
|---|---|---|---|---:|---:|
| [DEBIAN-CVE-2025-3573](https://patchblox.com/security/data/fix/linux/debian-cve-2025-3573.md) | Apr 15, 2025 | Debian 14 4:5.2.2-really+dfsg-2 | Routine | 1 | 0 |
| [DEBIAN-CVE-2025-3573](https://patchblox.com/security/data/fix/linux/debian-cve-2025-3573.md) | Apr 15, 2025 | Debian 13.5 (trixie) 4:5.2.2-really+dfsg-1+deb13u1 | Routine | 1 | 0 |
| [DLA-4121-1](https://patchblox.com/security/data/fix/linux/dla-4121-1.md) | Apr 8, 2025 | Debian 11.6 (bullseye) 4:5.0.4+dfsg2-2+deb11u2 | Routine | 1 | 0 |
| [DEBIAN-CVE-2025-24530](https://patchblox.com/security/data/fix/linux/debian-cve-2025-24530.md) | Jan 23, 2025 | Debian 14 4:5.2.2-really5.2.2+20250121+dfsg-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2025-24530](https://patchblox.com/security/data/fix/linux/debian-cve-2025-24530.md) | Jan 23, 2025 | Debian 12.15 (bookworm) 4:5.2.1+dfsg-1+deb12u1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2025-24530](https://patchblox.com/security/data/fix/linux/debian-cve-2025-24530.md) | Jan 23, 2025 | Debian 13.5 (trixie) 4:5.2.2-really5.2.2+20250121+dfsg-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2025-24529](https://patchblox.com/security/data/fix/linux/debian-cve-2025-24529.md) | Jan 23, 2025 | Debian 14 4:5.2.2-really5.2.2+20250121+dfsg-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2025-24529](https://patchblox.com/security/data/fix/linux/debian-cve-2025-24529.md) | Jan 23, 2025 | Debian 12.15 (bookworm) 4:5.2.1+dfsg-1+deb12u1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2025-24529](https://patchblox.com/security/data/fix/linux/debian-cve-2025-24529.md) | Jan 23, 2025 | Debian 13.5 (trixie) 4:5.2.2-really5.2.2+20250121+dfsg-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2023-25727](https://patchblox.com/security/data/fix/linux/debian-cve-2023-25727.md) | Feb 13, 2023 | Debian 12.15 (bookworm) 4:5.2.1+dfsg-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2023-25727](https://patchblox.com/security/data/fix/linux/debian-cve-2023-25727.md) | Feb 13, 2023 | Debian 13.5 (trixie) 4:5.2.1+dfsg-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2023-25727](https://patchblox.com/security/data/fix/linux/debian-cve-2023-25727.md) | Feb 13, 2023 | Debian 14 4:5.2.1+dfsg-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2020-22452](https://patchblox.com/security/data/fix/linux/debian-cve-2020-22452.md) | Jan 26, 2023 | Debian 14 4:5.0.4+dfsg1-1 | Urgent | 1 | 0 |
| [DEBIAN-CVE-2020-22452](https://patchblox.com/security/data/fix/linux/debian-cve-2020-22452.md) | Jan 26, 2023 | Debian 12.15 (bookworm) 4:5.0.4+dfsg1-1 | Urgent | 1 | 0 |
| [DEBIAN-CVE-2020-22452](https://patchblox.com/security/data/fix/linux/debian-cve-2020-22452.md) | Jan 26, 2023 | Debian 13.5 (trixie) 4:5.0.4+dfsg1-1 | Urgent | 1 | 0 |
| [DEBIAN-CVE-2022-0813](https://patchblox.com/security/data/fix/linux/debian-cve-2022-0813.md) | Mar 10, 2022 | Debian 14 4:5.1.3+dfsg1-1 | High | 1 | 0 |
| [DEBIAN-CVE-2022-0813](https://patchblox.com/security/data/fix/linux/debian-cve-2022-0813.md) | Mar 10, 2022 | Debian 12.15 (bookworm) 4:5.1.3+dfsg1-1 | High | 1 | 0 |
| [DEBIAN-CVE-2022-0813](https://patchblox.com/security/data/fix/linux/debian-cve-2022-0813.md) | Mar 10, 2022 | Debian 13.5 (trixie) 4:5.1.3+dfsg1-1 | High | 1 | 0 |
| [DEBIAN-CVE-2022-23808](https://patchblox.com/security/data/fix/linux/debian-cve-2022-23808.md) | Jan 22, 2022 | Debian 14 4:5.1.3+dfsg1-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2022-23808](https://patchblox.com/security/data/fix/linux/debian-cve-2022-23808.md) | Jan 22, 2022 | Debian 12.15 (bookworm) 4:5.1.3+dfsg1-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2022-23808](https://patchblox.com/security/data/fix/linux/debian-cve-2022-23808.md) | Jan 22, 2022 | Debian 13.5 (trixie) 4:5.1.3+dfsg1-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2022-23807](https://patchblox.com/security/data/fix/linux/debian-cve-2022-23807.md) | Jan 22, 2022 | Debian 14 4:5.1.3+dfsg1-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2022-23807](https://patchblox.com/security/data/fix/linux/debian-cve-2022-23807.md) | Jan 22, 2022 | Debian 12.15 (bookworm) 4:5.1.3+dfsg1-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2022-23807](https://patchblox.com/security/data/fix/linux/debian-cve-2022-23807.md) | Jan 22, 2022 | Debian 13.5 (trixie) 4:5.1.3+dfsg1-1 | Routine | 1 | 0 |
| [phpmyadmin 4:4.6.6-5ubuntu0.5](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-phpmyadmin-4-4.6.6-5ubuntu0.5.md) | Oct 10, 2020 | Ubuntu 18.04.6 LTS (bionic) 4:4.6.6-5ubuntu0.5 | Routine | 14 | 0 |
| [phpmyadmin 4:4.9.5+dfsg1-2ubuntu0.1~esm1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-phpmyadmin-4-4.9.5-dfsg1-2ubuntu0.1-esm1.md) | Oct 10, 2020 | Ubuntu 20.04 LTS (focal) 4:4.9.5+dfsg1-2ubuntu0.1~esm1 | Routine | 2 | 0 |
| [phpmyadmin 4:4.6.6-5ubuntu0.5+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-phpmyadmin-4-4.6.6-5ubuntu0.5-esm1.md) | Sep 13, 2019 | Ubuntu 18.04.6 LTS (bionic) 4:4.6.6-5ubuntu0.5+esm1 | Routine | 2 | 0 |

---

Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo