Skip to content

Commit

Permalink
[SECURITY] Update pMA to the latest stable 4.8.x release (4.8.5)
Browse files Browse the repository at this point in the history
  • Loading branch information
abeutel committed Jan 26, 2019
1 parent 2991d4b commit 0f2b5a9
Show file tree
Hide file tree
Showing 2,153 changed files with 3,453 additions and 2,180 deletions.
1 change: 1 addition & 0 deletions .gitignore
Original file line number Diff line number Diff line change
@@ -1,3 +1,4 @@
/.idea
/atlassian-ide-plugin.xml
Build
/Vendor/*/tmp/
2 changes: 1 addition & 1 deletion Classes/Backend/PmaModule.php
Original file line number Diff line number Diff line change
Expand Up @@ -67,7 +67,7 @@ public function main()
$MCONF['name'] = 'tools_txphpmyadmin';
$MCONF['script'] = '_DISPATCH';
$MCONF['access'] = 'admin';
$MCONF['PMA_subdir'] = 'Vendor/phpMyAdmin-4.8.4-all-languages/';
$MCONF['PMA_subdir'] = 'Vendor/phpMyAdmin-4.8.5-all-languages/';
$MCONF['PMA_script'] = 'index.php';

$this->MCONF = $MCONF;
Expand Down
4 changes: 4 additions & 0 deletions Documentation/Changelog/Index.rst
Original file line number Diff line number Diff line change
Expand Up @@ -14,6 +14,10 @@ The following is an overview of the changes in this extension. For more details
2019-01-26 Andreas Beutel - Version 5.2.5
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
- [FEATURE] Mark pMA compatible with TYPO3 9 LTS and PHP 7.2
- [FEATURE] Updated pMA to the latest stable 4.8.x release (4.8.5)
- [SECURITY] Includes serious vendor security fixes
- `PMASA-2019-1 <https://www.phpmyadmin.net/security/PMASA-2019-1/>`_: Arbitrary file read vulnerability
- `PMASA-2019-2 <https://www.phpmyadmin.net/security/PMASA-2019-2/>`_: SQL injection in Designer feature

2018-12-11 Andreas Beutel - Version 5.2.4
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
Expand Down
6 changes: 3 additions & 3 deletions Settings.yml
Original file line number Diff line number Diff line change
Expand Up @@ -4,10 +4,10 @@

---
conf.py:
copyright: 2002-2018
copyright: 2002-2019
project: phpMyAdmin Extension for TYPO3
version: 5.2.4
release: 5.2.4
version: 5.2.5
release: 5.2.5
latex_documents:
- - Index
- phpmyadmin.tex
Expand Down
1 change: 0 additions & 1 deletion Vendor/phpMyAdmin-4.8.4-all-languages/RELEASE-DATE-4.8.4

This file was deleted.

Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.

This file was deleted.

This file was deleted.

This file was deleted.

This file was deleted.

Binary file not shown.
Binary file not shown.
Binary file not shown.
Original file line number Diff line number Diff line change
@@ -1,6 +1,21 @@
phpMyAdmin - ChangeLog
======================

4.8.5 (2019-01-25)
- issue Developer debug data was saved to the PHP error log
- issue #14217 Fix issue when adding user on MySQL 8.0.11
- issue #13788 Exporting a view structure based on another view with a sub-query throws no database selected error
- issue #14635 Fix PHP error in GitRevision, error in processing request, error code 200
- issue #14787 Cannot execute stored procedure
- issue Add Burmese language
- issue #14794 Not responding to click, frozen interface, plugin Text_Plain_Sql error
- issue #14786 Table level Operations functions missing
- issue #14791 PHP warning, db_export.php#L91 urldecode()
- issue #14775 Export to SQL format not available for tables
- issue #14782 Error message shown instead of two-factor QR code when adding 2fa to a user
- issue [security] Arbitrary file read/delete relating to MySQL LOAD DATA LOCAL INFILE and an evil server instance (PMASA-2019-1)
- issue [security] SQL injection in Designer (PMASA-2019-2)

4.8.4 (2018-12-11)
- issue #14452 Remove hash param in edit query URL
- issue #14295 Issue in Changing theme
Expand Down
File renamed without changes.
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
phpMyAdmin - Readme
===================

Version 4.8.4
Version 4.8.5

A web interface for MySQL and MariaDB.

Expand Down
1 change: 1 addition & 0 deletions Vendor/phpMyAdmin-4.8.5-all-languages/RELEASE-DATE-4.8.5
Original file line number Diff line number Diff line change
@@ -0,0 +1 @@
Sat Jan 26 03:04:17 UTC 2019
Loading

0 comments on commit 0f2b5a9

Please sign in to comment.