171 lines
7.8 KiB
Plaintext
171 lines
7.8 KiB
Plaintext
|
phpMyAdmin - ChangeLog
|
||
|
======================
|
||
|
|
||
|
4.1.14.8 (2014-12-03)
|
||
|
- bug #4611 [security] DOS attack with long passwords
|
||
|
|
||
|
4.1.14.7 (2014-11-20)
|
||
|
- bug #4596 [security] XSS through exception stack
|
||
|
- bug #4595 [security] Path traversal can lead to leakage of line count
|
||
|
- bug #4578 [security] XSS vulnerability in table print view
|
||
|
- bug #4579 [security] XSS vulnerability in zoom search page
|
||
|
- bug #4594 [security] Path traversal in file inclusion of GIS factory
|
||
|
- bug #4598 [security] XSS in multi submit
|
||
|
- bug #4597 [security] XSS through pma_fontsize cookie
|
||
|
|
||
|
4.1.14.6 (2014-10-21)
|
||
|
- bug #4562 [security] XSS in debug SQL output
|
||
|
- bug #4563 [security] XSS in monitor query analyzer
|
||
|
|
||
|
4.1.14.5 (2014-10-01)
|
||
|
- bug #4544 [security] XSS vulnerabilities in table search and table structure pages
|
||
|
|
||
|
4.1.14.4 (2014-09-13)
|
||
|
- bug #4530 [security] DOM based XSS that results to a CSRF that creates a
|
||
|
ROOT account in certain conditions
|
||
|
|
||
|
4.1.14.3 (2014-08-17)
|
||
|
- bug #4501 [security] XSS in table browse page
|
||
|
- bug #4502 [security] Self-XSS in enum value editor
|
||
|
- bug #4503 [security] Self-XSSes in monitor
|
||
|
- bug #4505 [security] XSS in view operations page
|
||
|
- bug #4504 [security] Self-XSS in query charts
|
||
|
- bug #4517 [security] XSS in relation view
|
||
|
|
||
|
4.1.14.2 (2014-07-17)
|
||
|
- bug #4488 [security] XSS injection due to unescaped table name (triggers)
|
||
|
- bug #4492 [security] XSS in AJAX confirmation messages
|
||
|
- bug #4491 [security] Missing validation for accessing User groups feature
|
||
|
|
||
|
4.1.14.1 (2014-06-21)
|
||
|
- bug #4464 [security] XSS injection due to unescaped db/table name in navigation hiding
|
||
|
|
||
|
4.1.14.0 (2014-04-26)
|
||
|
- bug #4365 Creating bookmark with multiple queries not working
|
||
|
- bug #4372 Changing browser transformation results in unnecessary table rebuild
|
||
|
- bug #4375 Group two DB, one's name is the prefix of the other one
|
||
|
- bug #4376 [interface] Login fields show in separate line
|
||
|
|
||
|
4.1.13.0 (2014-04-13)
|
||
|
- bug #4279 CTRL + up or down moves 2 fields
|
||
|
- bug #4336 List server css style wrong
|
||
|
- bug Missing value on the Status > Server page
|
||
|
- bug #4347 Fixed PHP Parse error in Advisor
|
||
|
- bug #4350 Deleting the DB if it is renamed by the same name
|
||
|
- bug #4353 makeProfilingChart is not defined
|
||
|
- bug #4355 Precision specifier for DOUBLE type is truncated
|
||
|
- bug #4346 Incorrect "Export incomplete" message
|
||
|
- bug #4359 Notices on create table page
|
||
|
- bug #4356 GROUPed selects show number of rows as if not grouped
|
||
|
- bug #4357 JS Form submitted on "enter" even if focus is inside a select field
|
||
|
|
||
|
4.1.12.0 (2014-03-27)
|
||
|
- bug #4334 Add event : datepicker won't open
|
||
|
- bug #4338 Fix missing value error while executing SQL query
|
||
|
- TCPDF library is now optional dependency
|
||
|
- bug #4326 Cannot find the import plugins which start with uppercase 'I'
|
||
|
|
||
|
4.1.11.0 (2014-03-23)
|
||
|
- bug #4335 reCaptcha problem (4.1.10 regression)
|
||
|
|
||
|
4.1.10.0 (2014-03-22)
|
||
|
- bug #4301 Grid edit: "SELECT" query is replaced by "UPDATE" query after edit
|
||
|
- bug #4278 reCaptcha re-login requires double effort
|
||
|
- bug #4324 Datepicker not showing up on insert page
|
||
|
- bug #3991 Problem selecting item in select boxes with the ENTER keystroke in some browsers
|
||
|
- bug #4323 QueryWindow ignores CodeMirror
|
||
|
- bug None of the live charts shown on "Status -> Monitor" (Chrome)
|
||
|
|
||
|
4.1.9.0 (2014-03-06)
|
||
|
- bug #4279 CTRL + up or down moves two fields (part one)
|
||
|
- bug #4294 output as text radio clickable for "OpenDocument Text" export
|
||
|
- bug #4297 DROP DATABASE tick box in export no longer works
|
||
|
- bug #4291 Unable to export comments in OpenDocument text format
|
||
|
- bug #4299 Deletion even when the user says "No" to the confirmation message
|
||
|
- bug #4303 "New" link in navi panel is shown even if no privileges
|
||
|
- bug #4302 Some params are being omitted from microhistory
|
||
|
- bug #4298 Missing validation on Import CSV: "Columns enclosed with" and "Columns escaped with"
|
||
|
- bug #4040 Fatal error while resetting settings
|
||
|
- bug #4305 JS error when editing procedure from nav panel
|
||
|
- bug #4308 Edit routine form submitting when pressing enter
|
||
|
- bug #4307 Nav: "Columns" won't expand with specific schema
|
||
|
|
||
|
4.1.8.0 (2014-02-22)
|
||
|
- bug #4276 Login loop on session expiry
|
||
|
- bug #4249 Incorrect number of result rows for SQL with subqueries
|
||
|
- bug #4275 Broken Link to php extension manual
|
||
|
- bug #4053 List of procedures is not displayed after executing with Enter
|
||
|
- bug #4081 Setup page content shifted to the right edge of its tabs
|
||
|
- bug #4284 Reordering a column erases comments for other columns
|
||
|
- bug #4286 Open "Browse" in a new tab
|
||
|
- bug #4287 Printview - Always one column too much
|
||
|
- bug #4288 Expand database (+ icon) after timeout doesn't do anything
|
||
|
- bug #4285 Fixed CSS for setup
|
||
|
- Fixed altering table to DOUBLE/FLOAT field
|
||
|
- bug #4292 Success message and failure message being shown together
|
||
|
- bug #4293 opening new tab (using selflink) for import.php based actions
|
||
|
results in error and logout
|
||
|
|
||
|
4.1.7.0 (2014-02-09)
|
||
|
- bug #4245 initial Browse query does not match sorting order
|
||
|
- bug #4250 Notice on export page
|
||
|
- bug #4253 "New" text in navigation frame acts like a database
|
||
|
- bug #4262 Cannot define a column with fractional seconds
|
||
|
- bug #4265 Missing datepicker icon for DATETIME(length)
|
||
|
- bug #4257 Hide fractional seconds when applicable
|
||
|
- bug #4264 Uncheck "Ignore" while inserting, upon leaving a textarea
|
||
|
- bug #4260 reCaptcha is ignoring language settings
|
||
|
- bug #4259 reCaptcha sound session expired problem
|
||
|
- bug #4263 Japanese character encoding not working properly when exporting
|
||
|
- bug #4269 Notice on table relation page
|
||
|
- bug #4270 Bad text-color for table comments
|
||
|
- bug #4272 Incorrect tabindex
|
||
|
- bug #4271 Query by example and the second criteria line
|
||
|
- bug #4242 Wildcard-containing only_db failure in sidebar
|
||
|
|
||
|
4.1.6.0 (2014-01-26)
|
||
|
- bug #4232 User not found after creating the user
|
||
|
- bug #4241 Confusing dialog when trying to create an already existing user
|
||
|
- bug #4239 Missing LIMIT clause for some queries
|
||
|
- rfe #1489 Do not show create icon when user has no privileges
|
||
|
- bug #4218 Chrome behavior with date fields
|
||
|
- bug #3579 NOW() function incorrectly selected (regression)
|
||
|
- bug #4244 Advisor complaints about MariaDB 10.x is version less than 5.1
|
||
|
- bug #3889 When login fails and error display is active, login data is
|
||
|
displayed (regression)
|
||
|
- bug #4247 open_basedir warnings on export page
|
||
|
- bug #4013 AJAX request waiting until version info is retrieved
|
||
|
- bug #4248 js error when changing number of columns in status monitor
|
||
|
|
||
|
4.1.5.0 (2014-01-17)
|
||
|
- bug #3780 Allow aborting loading pages
|
||
|
- bug #4223 Database list: Create database misses collation column
|
||
|
- bug #4224 Empty table names when a table is "inuse"
|
||
|
- bug #4225 Partition maintenance broken
|
||
|
- bug #4219 Table list (left panel) does not reload when table renamed
|
||
|
- bug #4230 "in use" displayed for all views in database print view
|
||
|
- bug #4226 Notice: Undefined index: pma_config_loading
|
||
|
- bug #4221 Bzip2 export cannot be directly imported (so withdraw bz2 export)
|
||
|
- bug #4204 Reloading user privileges hides user groups submenu
|
||
|
- bug #4231 DATE columns quick edit decrement by one day
|
||
|
|
||
|
4.1.4.0 (2014-01-07)
|
||
|
- bug #3840 (additional fix) When exporting to gzip format, the data is compressed 2 times
|
||
|
- bug #4209 Missing compression in one case
|
||
|
- bug #4208 Can't browse tables after sorting on columns with fieldnames that have a '-'
|
||
|
- bug #4184 Switch to wrong page after adding an index
|
||
|
- bug #3885 Additional fix for this bug
|
||
|
- bug #4212 Table "disappears" if it has the same name as its tablegroup
|
||
|
- bug #4213 Datetime Quick Edit decrements by one day
|
||
|
- bug #4217 Current value not highlighted when browsing foreign values
|
||
|
- bug #4220 Incorrect key values in foreign key browser
|
||
|
- bug #4215 MariaDB 5.5: error in Drizzle detection
|
||
|
|
||
|
--- Older ChangeLogs can be found on our project website ---
|
||
|
http://www.phpmyadmin.net/old-stuff/ChangeLogs/
|
||
|
|
||
|
# vim: et ts=4 sw=4 sts=4
|
||
|
# vim: ft=changelog fenc=utf-8
|
||
|
# vim: fde=getline(v\:lnum-1)=~'^\\s*$'&&getline(v\:lnum)=~'\\S'?'>1'\:1&&v\:lnum>4&&getline(v\:lnum)!~'^#'
|
||
|
# vim: fdn=1 fdm=expr
|