An issue was discovered in phpMyAdmin where, under certain conditions, phpMyAdmin may not delete temporary files during the import of ESRI files. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected.
https://www.phpmyadmin.net/security/PMASA-2016-55
https://security.gentoo.org/glsa/201701-32
https://lists.debian.org/debian-lts-announce/2019/06/msg00009.html