From 3adb0eb8889ca8d88c72e74b3a20f67db45d749f Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Michal=20=C4=8Ciha=C5=99?= Date: Sat, 21 Jan 2017 16:45:59 +0100 Subject: [PATCH] Add changelog entries for security fixes MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: Michal Čihař --- ChangeLog | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/ChangeLog b/ChangeLog index cf3ab5a81b..e17a2e4b87 100644 --- a/ChangeLog +++ b/ChangeLog @@ -39,6 +39,14 @@ phpMyAdmin - ChangeLog - issue #12881 Fix database search with newer php-gettext - issue #12894 Fix linter error on unterminated variable name - issue #12732 Fixed filtering for active processes +- issue [security] Multiple vulnerabilities in setup script, see PMASA-2016-44. +- issue [security] Open redirect, see PMASA-2017-1. +- issue [security] php-gettext code execution, see PMASA-2017-2. +- issue [security] DOS vulnerabiltiy in table editing, see PMASA-2017-3. +- issue [security] CSS injection in themes, see PMASA-2017-4. +- issue [security] Cookie attribute injection attack, see PMASA-2017-5. +- issue [security] SSRF in replication, see PMASA-2017-6. +- issue [security] DOS in replication status, see PMASA-2017-7. 4.6.5.2 (2016-12-05) - issue #12765 Fixed SQL export with newlines