Merge branch 'MAINT_3_5_0' into QA_3_5

2012-03-28 12:43:55 -04:00 · 2012-03-28 12:43:55 -04:00 · 957ef1cf7f
commit 957ef1cf7f
parent a5bee26b16 6bbeed3e7e
2 changed files with 6 additions and 1 deletions
--- a/3
+++ b/3
@ -83,6 +83,9 @@ phpMyAdmin - ChangeLog
 - bug #3486970 [import] Exception on XML import
 - bug #3488777 [navi] $cfg['ShowTooltipAliasTB'] and blank names in navigation

+3.4.10.2 (2012-03-28)
+- [security] Fixed local path disclosure vulnerability, see PMASA-2012-2
+
 3.4.10.1 (2012-02-18)
 - [security] XSS in replication setup, see PMASA-2012-1

--- a/show_config_errors.php
+++ b/show_config_errors.php
@ -16,6 +16,8 @@ error_reporting(E_ALL);
 /**
 * Read config file.
 */
-require CONFIG_FILE;
+if (is_readable(CONFIG_FILE)) {
+    require CONFIG_FILE;
+}

 ?>