From f7d1c1f46382e7e6464fd92529d4410e635805f1 Mon Sep 17 00:00:00 2001 From: Isaac Bennetch Date: Wed, 22 Jun 2016 23:53:56 -0400 Subject: [PATCH 1/3] Changelog entries for security release Signed-off-by: Isaac Bennetch --- ChangeLog | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/ChangeLog b/ChangeLog index 4250d08e04..5dbf14dfce 100644 --- a/ChangeLog +++ b/ChangeLog @@ -14,6 +14,20 @@ phpMyAdmin - ChangeLog - issue #12303 Fix table size calculation in some circumstances - issue #12310 Fix listing routines for non privileged user - issue Escape generated query in exporting a database +- issue Setup script doesn't use input type 'password' in all relevant locations +- issue [security] BBCode injection in setup script, see PMASA-2016-17 +- issue [security] Cookie attribute injection attack, see PMASA-2016-18 +- issue Redirect loop when directly calling url.php +- issue [security] SQL injection attack, see PMASA-2016-19 +- issue [security] XSS attack in Table Structure page, see PMASA-2016-20 +- issue [security] XSS attack in Server Privileges page, see PMASA-2016-21 +- issue [security] DOS attack vulnerability, see PMASA-2016-22 +- issue [security] Multiple full path disclosure vulnerabilities, see PMASA-2016-23 +- issue [security] Full path disclosure when running in debug mode +- issue [security] XSS attack with partition range and table structure, see PMASA-2016-25 +- issue [security] XSS attack when checking database privileges, see PMASA-2016-26 +- issue [security] XSS attack when MySQL server is using a specific payload log_bin directive, see PMASA-2016-26 +- issue [security] XSS vulnerabilities in Transformation feature, see PMASA-2016-26 4.6.2 (2016-05-25) - issue [security] User SQL queries can be revealed through URL GET parameters, see PMASA-2016-14 From 4f57305eab809a8ecfe613e38b2b5d3a4b190505 Mon Sep 17 00:00:00 2001 From: Isaac Bennetch Date: Thu, 23 Jun 2016 00:27:15 -0400 Subject: [PATCH 2/3] Release 4.6.3 Signed-off-by: Isaac Bennetch --- ChangeLog | 2 +- README | 2 +- doc/conf.py | 2 +- libraries/Config.php | 2 +- 4 files changed, 4 insertions(+), 4 deletions(-) diff --git a/ChangeLog b/ChangeLog index 5dbf14dfce..1b6d136416 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,7 +1,7 @@ phpMyAdmin - ChangeLog ====================== -4.6.3 (not yet released) +4.6.3 (2016-06-23) - issue #12249 Fixed cookie path on Windows - issue #12279 Fixed error reporting on connect problems - issue #12290 Fixed export of tables without explicitly set engine diff --git a/README b/README index acfaf65921..f276eeab5c 100644 --- a/README +++ b/README @@ -1,7 +1,7 @@ phpMyAdmin - Readme =================== -Version 4.6.3-dev +Version 4.6.3 A web interface for MySQL and MariaDB. diff --git a/doc/conf.py b/doc/conf.py index 97841a54f8..2083958c5d 100644 --- a/doc/conf.py +++ b/doc/conf.py @@ -51,7 +51,7 @@ copyright = u'2012 - 2014, The phpMyAdmin devel team' # built documents. # # The short X.Y version. -version = '4.6.3-dev' +version = '4.6.3' # The full version, including alpha/beta/rc tags. release = version diff --git a/libraries/Config.php b/libraries/Config.php index 7ef1beb97c..a59499f3e0 100644 --- a/libraries/Config.php +++ b/libraries/Config.php @@ -101,7 +101,7 @@ class Config */ public function checkSystem() { - $this->set('PMA_VERSION', '4.6.3-dev'); + $this->set('PMA_VERSION', '4.6.3'); /** * @deprecated */ From 58534ce2fc4f964c78dfe83ff5f21e05793c3a4f Mon Sep 17 00:00:00 2001 From: Isaac Bennetch Date: Thu, 23 Jun 2016 02:40:42 -0400 Subject: [PATCH 3/3] Prepare for 4.6.4-dev Signed-off-by: Isaac Bennetch --- ChangeLog | 2 ++ README | 2 +- doc/conf.py | 2 +- libraries/Config.php | 2 +- 4 files changed, 5 insertions(+), 3 deletions(-) diff --git a/ChangeLog b/ChangeLog index 1b6d136416..1117be699f 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,6 +1,8 @@ phpMyAdmin - ChangeLog ====================== +4.6.4 (not yet released) + 4.6.3 (2016-06-23) - issue #12249 Fixed cookie path on Windows - issue #12279 Fixed error reporting on connect problems diff --git a/README b/README index f276eeab5c..a2c2a2d719 100644 --- a/README +++ b/README @@ -1,7 +1,7 @@ phpMyAdmin - Readme =================== -Version 4.6.3 +Version 4.6.4-dev A web interface for MySQL and MariaDB. diff --git a/doc/conf.py b/doc/conf.py index 2083958c5d..686db58a4c 100644 --- a/doc/conf.py +++ b/doc/conf.py @@ -51,7 +51,7 @@ copyright = u'2012 - 2014, The phpMyAdmin devel team' # built documents. # # The short X.Y version. -version = '4.6.3' +version = '4.6.4-dev' # The full version, including alpha/beta/rc tags. release = version diff --git a/libraries/Config.php b/libraries/Config.php index b348734ef8..5f55795ac9 100644 --- a/libraries/Config.php +++ b/libraries/Config.php @@ -101,7 +101,7 @@ class Config */ public function checkSystem() { - $this->set('PMA_VERSION', '4.6.3'); + $this->set('PMA_VERSION', '4.6.4-dev'); /** * @deprecated */