From 8b83e0de27e7074f3c1cb30f22c5e277a7a83a95 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Michal=20=C4=8Ciha=C5=99?= Date: Thu, 28 Jan 2016 10:10:41 +0100 Subject: [PATCH] Use changelog from release notes MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: Michal Čihař --- ChangeLog | 10 +++++++++- 1 file changed, 9 insertions(+), 1 deletion(-) diff --git a/ChangeLog b/ChangeLog index 75e2b8f634..c04c6096d0 100644 --- a/ChangeLog +++ b/ChangeLog @@ -29,7 +29,15 @@ phpMyAdmin - ChangeLog - issue #11854 Undefined property: stdClass::$releases at version check when disabled in config - issue #11814 SQL comment and variable stripped from bookmark on save - issue Gracefully handle errors in regex based javascript search -- issue [Security] PMASA-2016-1, PMASA-2016-2, PMASA-2016-3, PMASA-2016-4, PMASA-2016-5, PMASA-2016-6, PMASA-2016-7, PMASA-2016-8, PMASA-2016-9 +- issue [Security] Multiple full path disclosure vulnerabilities, see PMASA-2016-1 +- issue [Security] Unsafe generation of CSRF token, see PMASA-2016-2 +- issue [Security] Multiple XSS vulnerabilities, see PMASA-2016-3 +- issue [Security] Insecure password generation in JavaScript, see PMASA-2016-4 +- issue [Security] Unsafe comparison of CSRF token, see PMASA-2016-5 +- issue [Security] Multiple full path disclosure vulnerabilities, see PMASA-2016-6 +- issue [Security] XSS vulnerability in normalization page, see PMASA-2016-7 +- issue [Security] Full path disclosure vulnerability in SQL parser, see PMASA-2016-8 +- issue [Security] XSS vulnerability in SQL editor, see PMASA-2016-9 4.5.3.1 (2015-12-25) - issue #11774 Undefined offset 2