diff --git a/bitnami/phpmyadmin/5/debian-12/Dockerfile b/bitnami/phpmyadmin/5/debian-12/Dockerfile index cb779cdb7b30..dd4f8fb5fae8 100644 --- a/bitnami/phpmyadmin/5/debian-12/Dockerfile +++ b/bitnami/phpmyadmin/5/debian-12/Dockerfile @@ -7,7 +7,7 @@ ARG DOWNLOADS_URL="downloads.bitnami.com/files/stacksmith" ARG TARGETARCH LABEL org.opencontainers.image.base.name="docker.io/bitnami/minideb:bookworm" \ - org.opencontainers.image.created="2026-05-21T04:50:20Z" \ + org.opencontainers.image.created="2026-05-23T10:22:43Z" \ org.opencontainers.image.description="Application packaged by Broadcom, Inc." \ org.opencontainers.image.documentation="https://github.com/bitnami/containers/tree/main/bitnami/phpmyadmin/README.md" \ org.opencontainers.image.source="https://github.com/bitnami/containers/tree/main/bitnami/phpmyadmin" \ @@ -29,7 +29,7 @@ RUN --mount=type=secret,id=downloads_url,env=SECRET_DOWNLOADS_URL \ mkdir -p /tmp/bitnami/pkg/cache/ ; cd /tmp/bitnami/pkg/cache/ || exit 1 ; \ COMPONENTS=( \ "render-template-1.0.9-165-linux-${OS_ARCH}-debian-12" \ - "php-8.4.21-2-linux-${OS_ARCH}-debian-12" \ + "php-8.4.21-3-linux-${OS_ARCH}-debian-12" \ "apache-2.4.67-1-linux-${OS_ARCH}-debian-12" \ "mysql-client-12.2.2-0-linux-${OS_ARCH}-debian-12" \ "postgresql-client-18.4.0-0-linux-${OS_ARCH}-debian-12" \ @@ -60,7 +60,7 @@ ENV APACHE_HTTPS_PORT_NUMBER="" \ APACHE_HTTP_PORT_NUMBER="" \ APP_VERSION="5.2.3" \ BITNAMI_APP_NAME="phpmyadmin" \ - IMAGE_REVISION="29" \ + IMAGE_REVISION="30" \ LD_LIBRARY_PATH="/opt/bitnami/postgresql/lib:$LD_LIBRARY_PATH" \ PATH="/opt/bitnami/common/bin:/opt/bitnami/php/bin:/opt/bitnami/php/sbin:/opt/bitnami/apache/bin:/opt/bitnami/mysql/bin:/opt/bitnami/postgresql/bin:$PATH" diff --git a/bitnami/phpmyadmin/5/debian-12/rootfs/opt/bitnami/scripts/libapache.sh b/bitnami/phpmyadmin/5/debian-12/rootfs/opt/bitnami/scripts/libapache.sh index d6eb686df3f6..0e1a4818ccc7 100644 --- a/bitnami/phpmyadmin/5/debian-12/rootfs/opt/bitnami/scripts/libapache.sh +++ b/bitnami/phpmyadmin/5/debian-12/rootfs/opt/bitnami/scripts/libapache.sh @@ -803,6 +803,10 @@ apache_create_password_file() { local -r username="${2:?missing username}" local -r password="${3:?missing password}" - "${APACHE_BIN_DIR}/htpasswd" -bc "$file" "$username" "$password" - am_i_root && configure_permissions_ownership "$file" --file-mode "600" --user "$APACHE_DAEMON_USER" --group "$APACHE_DAEMON_GROUP" + # The -B flag uses bcrypt to hash the password, which is more secure than legacy APR1 (1000-iteration MD5) hash + # The -C flag computing time used for the bcrypt algorithm (default is 5) + "${APACHE_BIN_DIR}/htpasswd" -Bbc -C 12 "$file" "$username" "$password" + am_i_root && configure_permissions_ownership "$file" --user "$APACHE_DAEMON_USER" --group "$APACHE_DAEMON_GROUP" + # We can set strong permissions regardless the container is running as root or not + chmod 0600 "$file" }