Changelog for
phpMyAdmin-5.2.1-4.8.noarch.rpm :
* Fri Dec 11 2020 Arjen de Korte
- Package language files in separately
* Fri Dec 11 2020 Arjen de Korte - Put Apache configuration files in separate subpackage- Generate blowfish secret with openssl on non-openSUSE systems as pwgen is not available
* Thu Dec 10 2020 Arjen de Korte - Use system apache rpm macros
* Wed Oct 21 2020 Arjen de Korte - phpMyAdmin 5.0.4:
* Two factor authentication was broken in 5.0.3
* Fix incompatibilities with older PHP versions
* Fix for cleared search values when a Zoom search fails
* Fix a PHP error when reporting a certain JavaScript error
* Fixed latitude and longitude swap for geometries in edit mode
* Fix CREATE TABLE not being tracked when auto tracking is enabled- phpMyAdmin 5.0.3:
* Fix XSS vulnerability with the transformation feature (PMASA-2020-5)
* Fix SQL injection vulnerability with search feature (PMASA-2020-6)
* Fix an error message about htmlspecialchars() when attempting to export XML
* Support double tapping to edit on mobile
* Fix the error message \"Use of undefined constant MYSQLI_TYPE_JSON\" when using mysqlnd
* Fix fatal JS error on index creation after using Enter key to submit the form
* Fix \"axis-order\" to swap latitude and longitude on MySQL 8.1 or newer
* Fix an error when overwriting an existing query bookmark
* Fix some warnings that appear with PHP 8
* Fix alter user privileges query when editing an account with MySQL 8.0.11 and newer
* Fix issues regarding TIMESTAMP columns with default CURRENT_TIMESTAMP in MySQL 8.0.13 and newer
* Fix a message that \"Warning: error_reporting() has been disabled for security reasons\" on php 7.x- phpMyAdmin 5.0.2:
* Fix escape tbl_storage_engine argument used on tbl_create.php
* Fix SQL injection with certain usernames (PMASA-2020-2)
* Fix SQL injection in particular search situations (PMASA-2020-3)
* Fix SQL injection and XSS flaw (PMASA-2020-4)
* Fix for copying a user account
* Removed SET AUTOCOMMIT=0 from SQL export
* Fix for the display of table borders
* Fix for ENUM radio button user interface problems
* Improved the prompt for abandoning changes when no changes were made in the SQL window
* Fix for inserting a primary key with \"insert as new row\"
* Fix incorrect suggested latest available version to version 5- phpMyAdmin 5.0.1:
* Fix SQL injection vulnerability on the user accounts page (PMASA-2020-1)- phpMyAdmin 5.0.0:
* Drop support for PHP 5.5, PHP 5.6, PHP 7.0 and HHVM
* Enable columns names by default for CSV exports
* Add Metro theme
* Automatically add the index when creating an auto increment column
* Improvements to exporting views
* Prompt the user for confirmation before running an UPDATE query with no WHERE clause
* Improvements to how errors are show to the user (including allowing easier copying of the error text to the clipboard)
* Added keystrokes to clear the line (ctrl+l) and clear the entire console window (ctrl+u)
* Use charset \'windows-1252\' when export format is MS Excel- move cache dir from /usr/share/phpMyAdmin/tmp to /var/cache/phpMyAdmin (/usr may not be writeable)- reduce verbosity of pre/preun/post/postun scripts
* Fri Oct 16 2020 Andreas Stieger - phpMyAdmin 4.9.7:
* Fix two factor authentication that was broken in 4.9.6
* Fix incompatibilities with older PHP versions
* Mon Oct 12 2020 ecsos - Update to 4.9.6 This is a security release.- Fix boo#1177561 (CVE-2020-26934, PMASA-2020-5) XSS relating to the transformation feature- Fix boo#1177562 (CVE-2020-26935, PMASA-2020-6) SQL injection vulnerability in SearchController
* Sun May 03 2020 chrisAATTcomputersalat.de- fix for boo#1170743 phpMyAdmin installation wipes it\'s sysconfig apache_server_flag entry
* Sat May 02 2020 Arjen de Korte - Don\'t expand AATTFQDNAATT from /etc/HOSTNAME (this used to set $cfg[\'PmaAbsoluteUri\'] parameter, but this variable is no longer in the config.sample.ini file)
* Thu Apr 23 2020 Dominique Leuenberger - Drop python-devel BuildRequires: python2 is EOL and this seems unused.- Drop xz BuildRequires: OBS takes care of unpacking the tarball.
* Mon Mar 23 2020 ecsosAATTopensuse.org- Update to 4.9.5 This is a security release containing several bug fixes.
* CVE-2020-10804: SQL injection vulnerability in the user accounts page, particularly when changing a password (boo#1167335, PMASA-2020-2)
* CVE-2020-10802: SQL injection vulnerability relating to the search feature (boo#1167336, PMASA-2020-3)
* CVE-2020-10803: SQL injection and XSS having to do with displaying results (boo#1167337, PMASA-2020-4)
* Removing of the \"options\" field for the external transformation.
