I decided to do finally some work oh phpMyAdmin today. I went through security announcements we (or I directly) received and tried to reproduce and fix them. Now everything seems to be fixed in Subversion and we're going to 18.104.22.168 release today. So if you have time, please test MAINT_2_9_1 branch, to awoid some major breakage :-).
PS: You can also download snapshot.