Changelog for phpMyAdmin-3.4.7.1-1.3.test.1.noarch.rpm :

* Mon Nov 14 2011 chrisAATTcomputersalat.de- update to 3.4.7.1 (fix for bnc#728243) - [security] Fixed possible local file inclusion in XML import (CVE-2011-4107), see PMASA-2011-17 http://www.phpmyadmin.net/home_page/security/PMASA-2011-17.php
* Wed Oct 26 2011 chrisAATTcomputersalat.de- update to 3.4.7 - bug #3418610 [interface] Links in navigation when $cfg[\'MainPageIconic\'] = false - bug #3418849 [interface] Inline edit shows dropdowns even after closing - bug [view] View renaming did not work - bug [navi] Wrong icon for view (MySQL 5.5) - bug #3420229 [doc] Missing documentation section - bug #3423725 [pdf] Broken PDF file when exporting database to PDF - [core] Allow to set language in URL - bug #3425184 [doc] Fix links to PHP documentation - bug #3426031 [export] Export to bzip2 is not working- 3.4.6.0 (2011-10-16) - patch #3404173 InnoDB comment display with tooltips/aliases - bug #3404886 [navi] Edit SQL statement after error - bug #3403165 [interface] Collation not displayed for long enum fields - bug #3399951 [export] Config for export compression not used - bug #3400690 [privileges] DB-specific privileges won\'t submit - bug #3410604 [config] Configuration storage incorrect suggested table name - bug #3383572 [interface] Cannot execute saved query - bug #3411535 [display] Full text button unchecks results display options - bug #3411224 [display] Broken binary column when \'Show binary contents\' is not set - bug #3411633 [core] Call to undefined function PMA_isSuperuser() - bug #3413743 [interface] Display options link missing after search - bug #3324161 [core] CSP policy causing designer JS buttons to fail - bug #3412862 [relation] Relations/constraints are dropped/created on every change - bug #3390832 [display] Delete records from last page breaks search - bug #3392150 [schema] PMA_User_Schema::processUserChoice() is broken - bug #3414744 [core] External link fails in 3.4.5 - patch #3314626 [display] CharTextareaRows is not respected - bug #3417089 [synchronize] Extraneous db choices - [security] Fixed local path disclosure vulnerability, see PMASA-2011-15 - [security] Fixed XSS in setup (host/verbose parameter), see PMASA-2011-16
* Tue Oct 04 2011 chrisAATTcomputersalat.de- update to 3.4.5 - bug #3375325 [interface] Page list in navigation frame looks odd - bug #3313235 [interface] Error div misplaced - bug #3374802 [interface] Comment on a column breaks inline editing - patch #3383711 [display] Order by a column in a view doesn\'t work in some cases - bug #3386434 [interface] Add missing space to server status - [core] Remove library PHPExcel, due to license issues - [export] Remove native Excel export modules (xls and xlsx formats) - [import] Remove native Excel import modules (xls and xlsx formats) - bug #3392920 [edit] BLOB emptied after editing another column - [security] Fixed XSS in Inline Edit on save action, see PMASA-2011-14 - [security] Fixed XSS with db/table/column names, see PMASA-2011-14
* Sat Aug 27 2011 chrisAATTcomputersalat.de- update to 3.4.4 - bug #3323060 [parser] SQL parser breaks AJAX requests if query has unclosed quotes - bug #3323101 [parser] Invalid escape sequence in SQL parser - bug #3348995 [config] $cfg[\'Export\'][\'asfile\'] set to false does not select as Text option - bug #3340151 [export] Working SQL query exports error page - bug #3353649 [interface] \"Create an index on X columns\" form not validated - bug #3350790 [interface] JS error in Table->Structure->Index->Edit - bug #3353811 [interface] Info message has \"error\" class - bug #3357837 [interface] TABbing through a NULL field in the inline mode resets NULL - remove version number in /setup - bug #3367993 [usability] Missing \"Generate Password\" button - bug #3363221 [display] Missing Server Parameter on inline sql query - bug #3367986 [navi] Drop field -> lost active table - remove misleading comment on the \"Rename database\" interface - bug #3374374 [interface] Fix footnote for inexact count while browsing - bug #3372807 [interface] Fix security warning link in setup - bug #3374347 [display] Backquotes in normal text on import page - bug #3358750 [core] With Suhosin, urls are too long in edit links - [security] Missing sanitization on the table, column and index names leads to XSS vulnerabilities, see PMASA-2011-13
* Fri Jul 29 2011 chrisAATTcomputersalat.de- update to 3.4.3.2 o PMASA-2011-9 to PMASA-2011-12 http://www.phpmyadmin.net/home_page/security/
* Mon Jul 04 2011 chrisAATTcomputersalat.de- update to 3.4.3.1 - [security] Fixed possible session manipulation in swekey authentication, see PMASA-2011-5 - [security] Fixed possible code injection incase session variables are compromised, see PMASA-2011-6 - [security] Fixed regexp quoting issue in Synchronize code, see PMASA-2011-7 - [security] Fixed filtering of a file path, which allowed for directory traversal, see PMASA-2011-8- 3.4.3.0 (2011-06-27) - bug #3311170 [sync] Missing helper icons in Synchronize - patch #3304473 [setup] Redefine a lable that was wrong - bug #3304544 [parser] master is not a reserved word - bug #3307616 [edit] Inline edit updates multiple duplicate rows - patch #3311539 [edit] Inline edit does not escape backslashes - bug #3313210 [interface] Columns class sometimes changed for nothing - patch #3313326 [interface] Some tooltips do not disappear - bug #3315720 [search] Fix search in non unicode tables - bug #3315741 [display] Inline query edit broken - patch #3317206 [privileges] Generate password option missing on new accounts - bug #3317293 [edit] Inline edit places HTML line breaks in edit area - bug #3319466 [interface] Inline query edit does not escape special characters - minor XSS (require a valid token)- add restart_on_update apache to post
* Wed Jun 22 2011 chrisAATTcomputersalat.de- fix changelog o update to 3.4.2.0 -> update to 3.4.2- fix bnc#697748 (suhosin customization) o moved from spec\'s %post to http_conf file
* Thu Jun 09 2011 jweberhoferAATTweberhofer.at- update to 3.4.2 - bug #3301249 [interface] Iconic table operations does not remove inline edit label - bug #3303869 [interface] Unnecessary scrolling on Databases page - patch #3303813 [setup] Define a label that was missing - bug #3305606 [interface] Show all button wraps on privileges page - bug #3305517 [config] Config for export compression not used - bug #3305883 [interface] Table is dropped regardless of confirmation - [auth] Fixed error handling for signon auth method. - bug #3276001 [core] Avoid caching of index.php. - bug #3306958 [interface] Unnecessary Details slider - bug #3308476 [interface] \"Show all\" not persistent after a sort - bug #3308072 [auth] Version disclosure to anonymous visitors - bug #3306981 [interface] pmahomme and table statistics
* Tue May 24 2011 chrisAATTcomputersalat.de- update to 3.4.1 - bug sf#3301108 [interface] Synchronize and already configured host - bug sf#3302457 Inline edit and $cfg[\'PropertiesIconic\'] - Patch #3302313 Show a translated label - bug sf#3300981 [navi] Table filter is case sensitive - bug sf#3285929 [privileges] Revert temporary fix - bug sf#3302872 [synchronize] Synchronize and user name - bug sf#3302733 [core] Some browsers report an insecure https connection - [security] Make redirector require valid token- rework config patch - removed 3.3.8, added 3.4.1 config patch- added conftrib to doc- mod post section o modify suhosin.ini
* Sat Mar 19 2011 chrisAATTcomputersalat.de- update to 3.3.10 - patch sf#3147400 [structure] Aria table size printed as unknown, thanks to erickoh75 - erickoh75 - patch sf#3150164 [structure] Ordering by size gives incorrect results, thanks to Madhura Jayaratne - madhuracj - bug sf#3153409 [core] 0 row(s) affected - bug sf#3155842 [core] Edit relational page and page number - [security] Minor security fixes, see PMASA-2010-9 and PMASA-2010-10 - [lang] German update, thanks to jannicarsAATTusers.sourceforge.net.
* Wed Feb 23 2011 chrisAATTcomputersalat.de- update to 3.3.9.2 - [security] SQL injection, see PMASA-2011-2- 3.3.9.1 (2011-02-08) - [security] Path disclosure, see PMASA-2011-1- add macros for ap_usr, ap_grp- fix perm on sysconfdir o 0750,root,www
* Thu Jan 27 2011 chrisAATTcomputersalat.de- update to 3.3.9 - bug [doc] Fix references to MySQL doc - patch #3101490 Default function for TIMESTAMP, thanks to jirand - jirand - bug #3103853 [js] Double quotes were not escaped in generated js - bug #3077463 [core] Events were not copied when copying/renaming database - bug #1762306 [core] Copy database with view of a view - patch #3117535 [replication] Add quotes to database in initial statement, thanks to Craig Duncan - duncan3dc - bug #3112614 [pdf schema] Scratchboard for PDF pages not working - bug #3125606 [parser] Query for table \"level\" causes strange display - bug #3127904 [parser] Close all opened round brackets indents- removed Authors from spec
* Fri Dec 03 2010 chrisAATTcomputersalat.de- update to 3.3.8.1 - bug #3115519 (private) [security] XSS on db search, see PMASA-2010-8- rework config patch o add AllowNoPassword
* Wed Oct 27 2010 javierAATTopensuse.org- update to 3.3.8 - bug #3059311 [import] BIGINT field type added to table analysis - [core] Update library PHPExcel to version 1.7.4 - bug #3062455 [core] copy procedures and routines before tables - bug #3062455 [export] with SQL, export procedures and routines before tables - bug #3056023 [import] USE query not working - bug #3038193 [display] Error when editing row with GEOMETRY column - bug #3062454 [interface] Display routines/events also when no tables are defin ed - support ARIA storage engine as well as its previous name MARIA
* Wed Sep 22 2010 mciharAATTsuse.cz- update to 3.3.7
* Wed Jul 07 2010 chrisAATTcomputersalat.de- update to version 3.3.4- bug #2996161 [import] properly escape import value- bug #2998889 [import] Import button does not work in Catalan- [browse] Fix handling of sort order if only column is specified. + [lang] Greek update, thanks to Panagiotis Papazoglou - panos78 + [lang] Updated lot of translation based on work done in master branch.- bug #3008411 [databases] Last dropped database remains active in navi- bug #2986383 [parser] Not all data being shown / counted- bug [synchronize] Rows were deleted in target table regardless of the \"Would you like to delete...\" option- bug [privileges] List of tables not shown when the db name has a wildcard- bug #3011126 [display] Edit link missing after long query- patch #3013264 [doc] FAQ 1.40 uses a comma instead of a period, thanks to Isaac Bennetch - ibennetch- [engines] Fix getting InnoDB status.- bug #2986422 [import] Results for query are not displayed
* Fri May 21 2010 chrisAATTcomputersalat.de- update to version 3.3.3 - patch #2982480 [navi] Do not group if there would be one table in group - patch #2983492 [sync] When asking to synchronize Structure and Data, only Structure is done - patch #2984893 [engines] InnoDB storage page emits a warning - bug #2974687, bug #2974692 [compatibility] PHPExcel : IBM AIX iconv() does not work - bug #2983066 [interface] Flush table on table operations shows the query twice - bug #2983060, patch #2987900 [interface] Fix initial state of tables in designer - bug #2983062, patch #2989408 [engines] Fix warnings when changing table engine to Maria - bug #2974067 [display] non-binary fields shown as hex - bug #2983065 [operations] Error when changing from Maria to MyISAM engine - bug #2975408 [tracking] Data too long for column data_sql - bug [tracking] Tracking report should obey MaxCharactersInDisplayedSQL - bug [edit] Avoid selecting UNHEX function by default for a BLOB column for which editing is protected - bug #2994168 [structure] Show auto_increment in uppercase - bug #2993970 [pdf schema] Page numbering in Table of Contents- 3.3.2.0 (2010-04-13) - patch #2969449 [core] Name for MERGE engine varies depending on the MySQL version, thanks to Dieter Adriaenssens - ruleant - bug #2966078 [browse] Incorrect LIMIT is saved and sticks while browsing - bug #2967366 [Structure] Some results of Propose table structure are shown in hex - bug #2967565 [insert] UNHEX not selected by default when inserting BINARY - [navi] Changed link to git repository on main page - bug #2972232 [menu] Import menu tab not present on main page - patch #2976790 [menu] Go to the upper level after table DROP, thanks to Kaarel Nummert - kaarelnu - patch #2978815 [pdf] Fix generating PDF with table dimensions, thanks to BlinK_ - patch #2977725 [export] XML wrongly encoded, thanks to Victor Volkov - hanut - patch #2979234 [import] Create tables with current charset and collation. - patch #2979234, bug #2960105 [import] Properly import unicode text from ODS. - bug #2973280 [export] Proper handling of temporary directory in XLS export. - bug #2980582 [interface] Properly format server status parameter. - bug #2973949 [session] SQL History broken (revert patch #2899969), thanks to Dieter Adriaenssens - ruleant - [doc] Be more specific about problems with Suhosin.
* Fri Mar 26 2010 chrisAATTcomputersalat.de- update to version 3.3.1 - bug #2941037 [core] Database structure not sorted by table correctly - bug #2948492 [interface] Slide effect masks some fields on search page - bug #2959746 [interface] Unknown table status: TABLE_TYPE - bug #2953050 [export] export VIEW as SQL includes INSERT statement - bug #2942032 [core] Cannot detect PmaAbsoluteUri correctly on Windows - bug #2961609 [auth] Potential information disclosure at login page - patch #2961540 [export] Do not export data of MERGE table, thanks to Dieter Adriaenssens - ruleant - bug #2961198 [parser] Querying a table named \"data\" - bug #2931429 [structure] Editing long triggers - bug #2970769 [structure] Incorrect reference to mootools-more.js- cleanup spec - fixed HEADER - sort TAGS - some macros (ap_...) - updated description - added postun o restart_on_update apache2- some rpmlint stuff - fdupes- reworked patches - removed blowfish_secret - removed mysqli.patch - added config patch o mods to vendor_config- replaced Source1 phpmyadmin.conf > phpMyAdmin.http- config.inc.php to /etc/phpMyAdmin
* Wed Mar 10 2010 javierAATTopensuse.org- Updated to 3.3.0 + rfe #2308632 [edit] Use hex for (var)binary fields + patch #2794819 [navi] Filter for displayed table names - bug #2794840 [core] Cannot redeclare pma_tableheader() - rfe #2726479 [core] configurable maximal length of URL + patch #2724755 [display] Full/partial text links (big T) are back - bug [display] handle NavigationBarIconic as documented for navi buttons + rfe #2726479 [export] Export tables preselect + patch #2805828 [export] PHP array export plugin + patch #2798592 [import] Progress bar - bug [gui] Generate Password not working for \'Change Login Information\', only for \'Change password\' + [lang] Arabic update + rfe #2822190 [structure] BOOLEAN is standard SQL + [lang] German update + rfe #2813867 [structure] Default sorting order in list of tables + [import] Added MySQL type-detection functionality to import library + [import] Added ODS, Excel XLS, Excel XLSX, and XML import modules + [export] Added Excel XLSX export module + [core] Added ability for tracking changes made through phpMyAdmin + rfe #2839504 [engines] Support InnoDB plugin\'s new row formats + [core] Added ability for synchronizing databases among servers. + [lang] #2843101 Dutch update + [lang] Galician update + [export] Added MediaWiki export module + [lang] Turkish update + [auth] Add custom port configuration in signon - [core] Removed context from the error handler - bug #2883633 [export] Export of InnoDB table is incomplete + rfe #2862575 [status] Order query statistics by % desc, skip rows with 0 + rfe #2823686 [interface] Increase default height of query window + rfe #2129902 [structure] Don\'t hide indexes + patch #2812070 [interface] Allow selecting a range of rows by holding shift + [lang] Russian update, thanks to Victor Volkov + [lang] Greek update, thanks to Panagiotis Papazoglou + [lang] Norwegian update, thanks to Sven-Erik Andersen - bug #2929958 [import] Cannot import (French interface) - [security] Use X-Frame-Options header to protect against ClickJacking. + [lang] Finnish update, thanks to Jouni Kahkonen + [lang] Lithuanian update, thanks to Rytis Slatkevicius - rytis_s - bug #2931939 [status] Seeing \"m\" as unit is confusing - bug #2926613 [edit] Copy database shows errors when DB has foreign key + [lang] Catalan update, thanks to Xavier Navarro
* Wed Jan 20 2010 javierAATTopensuse.org- Updated to 3.2.5 - patch #2903400 [bookmarks] Status of bookmark table, thanks to Virsacer - virsacer - bug [history] QueryHistoryDB is not respected - bug #2905629 [auth] Blowfish secret is not hashed - bug #2910000 [gui] ShowServerInfo should hide all server info from main page - bug #2910568 [structure] Table size for ARCHIVE tables is not displayed - patch #2899969 [core] Session lock blocks working from a second window, thanks to Greg Roach - fisharebest - patch #2915168 [import] Incorrect parsing of DELIMITER keyword, thanks to Greg Roach - fisharebest - patch #2918831 [export] Missing backquotes on reserved words, thanks to Virsacer - virsacer - [core] Fix broken cleanup of $_GET - bug #2924357 [operations] Cannot rename a database that has foreign key constraints - bug #869006 [structure] Ignore number of records for MRG_MyISAM tables - bug [browse] \"Show BLOB contents\" should display HTML code that is present in a BLOB, thanks to Vincent van der Tuin - [privileges] Improve escaping of hostname
* Tue Nov 10 2009 javierAATTopensuse.org- patch #2856664 [export] Date, time, and datetime column types now export correctly to OpenOffice Spreadsheet- patch #2859788 [parser] Double-character delimiters (bug #2846239)- bug #2832600 [export] Slow export when having lots of databases- bug #2537766 [import] Comments are stripped when editing store procedures- bug #2852370 [operations] Renaming database deletes triggers- bug #2872247 [interface] Failed opening required \'mysql_charsets.lib.php\'- bug [structure] \"In use\" table incorrectly reported as \"view\"- bug #2879909 [interface] Removed double htmlspecialchars when editing enum column- bug #2868328 [relations] Adding foreign key when table name contains a dot- bug #2883381 [doc] Side effects of MemoryLimit setting- bug #2826128 [display] Inverting sort order when expression contains a function name
* Fri Sep 18 2009 javierAATTopensuse.org- bug #2825293 [structure] Default value for a BIT column- bug [display] Red arrows were reversed in the list of tables- bug #2813879 [export] Duplicate empty lines when exporting without comments- bug #2825919 [export] Trigger export with database name- bug #2823996 [data] Cannot edit row with no PK and a BIT field- bug [export] Exporting results of a query which contains a LIMIT clause inside a subquery- bug #2837722 [export] Run complex SQL then export does not work- bug #2839548 [export] Triggers order on export- bug #2826986 [display] Order by BLOB and range display- bug [display] After clicking on Show Function or Function, the UPDATE query is not shown after execution- bug [structure] Missing validation for BINARY and VARBINARY
* Sun Aug 16 2009 javierAATTopensuse.org- bug #2799009 Login with ipv6 IP address breaks redirect- bug #2796066 [priv] Inconsistent display of databases list- bug #2802870 [display] Incorrect overhead value for InnoDB- bug [display] Incorrect display in replication status- bug #1601625 [display] The Ignore checkbox is not unchecked for ENUM- bug #2809930 [setup] Notice: Undefined variable: k in setup/index.php- bug [features] Incorrect report of missing relational features- [security] XSS: Insufficient output sanitizing (not exploitable without a vali d token) thanks to Sven Vetsch/Disenchant for informing us in a responsible manner- bug #2634827 [import] Using DELIMITER produces infinite cycle + new language files: uzbek_cyrillic and urbek_latin- bug #2814109 [search] Right frame is blank- bug #2816840 [priv] Cannot change a user\'s details- bug #2816165 [display] Executed query not always displayed- bug #2819944 [setup] Incorrect mention of designer_coords- bug #2821757 [insert] \"Insert another new row\" no longer worked + [lang] Norwegian update- bug [core] PMA_pow() can support negative exponents in the pow() case + [lang] Brazilian Portuguese update- patch #2822384 [docs] Missing auth_type in docs-example- patch #2819728 [display] Slider effect jumping to top of page- bug [display] Incorrect computation of overhead stats in server view for tables under the InnoDB engine + [lang] Swedish update
* Fri Jul 24 2009 javierAATTopensuse.org- First security release for phpMyAdmin 3.2.0
* Sun Jun 28 2009 javierAATTopensuse.org- update to 3.2.0