From 02f613714fc4a8efabb3ac53243e828580447a9b Mon Sep 17 00:00:00 2001 From: Madhura Jayaratne Date: Thu, 28 Jan 2016 15:46:45 +1100 Subject: [PATCH 1/3] ChangeLog entries for security issues Signed-off-by: Madhura Jayaratne --- ChangeLog | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/ChangeLog b/ChangeLog index 544d1f9038..bed93e27a4 100644 --- a/ChangeLog +++ b/ChangeLog @@ -29,6 +29,15 @@ phpMyAdmin - ChangeLog - issue #11854 Undefined property: stdClass::$releases at version check when disabled in config - issue #11814 SQL comment and variable stripped from bookmark on save - issue Gracefully handle errors in regex based javascript search +- issue [security] Multiple full path disclosure vulnerabilities, see PMASA-2016-1 +- issue [security] Unsafe generation of CSRF token, see PMASA-2016-2 +- issue [security] Multiple XSS vulnerabilities, see PMASA-2016-3 +- issue [security] Insecure password generation in JavaScript, see PMASA-2016-4 +- issue [security] Unsafe comparison of CSRF token, see PMASA-2016-5 +- issue [security] Multiple full path disclosure vulnerabilities, see PMASA-2016-6 +- issue [security] XSS vulnerability in normalization page, see PMASA-2016-7 +- issue [security] Full path disclosure vulnerability in SQL parser, see PMASA-2016-8 +- issue [security] XSS vulnerability in SQL editor, see PMASA-2016-9 4.5.3.1 (2015-12-25) - issue #11774 Undefined offset 2 From 57607e062b794f0b641c0e14250876905e89a86b Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Michal=20=C4=8Ciha=C5=99?= Date: Thu, 25 Feb 2016 12:28:24 +0100 Subject: [PATCH 2/3] Add changelog for SQL parser update MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: Michal Čihař --- ChangeLog | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/ChangeLog b/ChangeLog index 8c0d1b454b..f9c9b2153f 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,6 +1,12 @@ phpMyAdmin - ChangeLog ====================== +4.5.5.1 (not yet released) +- issue #11971 CREATE UNIQUE INDEX index type is not recognized by parser. +- issue #11982 Row count wrong when grouping joined tables. +- issue #12012 Column definition with default value and comment in CREATE TABLE expoerted faulty. +- issue #12020 New statement but no delimiter and unexpected token with REPLACE. + 4.5.5.0 (2016-02-22) - issue Undefined index: is_ajax_request - issue #11855 Fix password change on MariaDB 10.1 and newer From 1297747a65c80a60ab777cd1fe905fc8d724d4d5 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Michal=20=C4=8Ciha=C5=99?= Date: Thu, 25 Feb 2016 12:29:34 +0100 Subject: [PATCH 3/3] Fixed incorrect usage of SQL parser context in SQL export MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Fixes #12029 Signed-off-by: Michal Čihař --- ChangeLog | 1 + libraries/plugins/export/ExportSql.class.php | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/ChangeLog b/ChangeLog index f9c9b2153f..505b62b2c3 100644 --- a/ChangeLog +++ b/ChangeLog @@ -6,6 +6,7 @@ phpMyAdmin - ChangeLog - issue #11982 Row count wrong when grouping joined tables. - issue #12012 Column definition with default value and comment in CREATE TABLE expoerted faulty. - issue #12020 New statement but no delimiter and unexpected token with REPLACE. +- issue #12029 Fixed incorrect usage of SQL parser context in SQL export 4.5.5.0 (2016-02-22) - issue Undefined index: is_ajax_request diff --git a/libraries/plugins/export/ExportSql.class.php b/libraries/plugins/export/ExportSql.class.php index 715ad48f92..552a64fe51 100644 --- a/libraries/plugins/export/ExportSql.class.php +++ b/libraries/plugins/export/ExportSql.class.php @@ -1554,7 +1554,7 @@ class ExportSql extends ExportPlugin if (empty($sql_backquotes)) { // Option "Enclose table and column names with backquotes" // was checked. - Context::$MODE |= Context::NO_ENCLOSING_QUOTES; + SqlParser\Context::$MODE |= SqlParser\Context::NO_ENCLOSING_QUOTES; } // Using appropriate quotes.