diff --git a/phpMyAdmin-config.patch b/phpMyAdmin-config.patch
index 859adf7..5a5216b 100644
--- a/phpMyAdmin-config.patch
+++ b/phpMyAdmin-config.patch
@@ -29,8 +29,7 @@ Index: config.sample.inc.php
   * This is needed for cookie based authentication to encrypt password in
   * cookie
 + * YOU MUST FILL IN THIS FOR COOKIE AUTH!
-  */
--$cfg['blowfish_secret'] = 'a8b7c6d'; /* YOU MUST FILL IN THIS FOR COOKIE AUTH! */
++ */
 +$cfg['blowfish_secret'] = '';
 +
 +/*
@@ -50,7 +49,8 @@ Index: config.sample.inc.php
 + * Disable the default warning that is displayed if Suhosin is detected
 + *
 + * @global boolean $cfg['SuhosinDisableWarning']
-+ */
+  */
+-$cfg['blowfish_secret'] = 'a8b7c6d'; /* YOU MUST FILL IN THIS FOR COOKIE AUTH! */
 +$cfg['SuhosinDisableWarning'] = true;
  
  /*
@@ -135,34 +135,12 @@ Index: config.sample.inc.php
   * phpMyAdmin configuration storage settings.
   */
 +$cfg['Servers'][$i]['controlhost']         = 'localhost';
- 
--/* User used to manipulate with storage */
--// $cfg['Servers'][$i]['controlhost'] = '';
--// $cfg['Servers'][$i]['controlport'] = '';
--// $cfg['Servers'][$i]['controluser'] = 'pma';
--// $cfg['Servers'][$i]['controlpass'] = 'pmapass';
++
 +// MySQL control user settings (this user must have read-only
 +// access to the "mysql/user" and "mysql/db" tables).
 +// The controluser is also used for all relational features (pmadb)
 +$cfg['Servers'][$i]['controluser']         = '';
- 
--/* Storage database and tables */
--// $cfg['Servers'][$i]['pmadb'] = 'phpmyadmin';
--// $cfg['Servers'][$i]['bookmarktable'] = 'pma__bookmark';
--// $cfg['Servers'][$i]['relation'] = 'pma__relation';
--// $cfg['Servers'][$i]['table_info'] = 'pma__table_info';
--// $cfg['Servers'][$i]['table_coords'] = 'pma__table_coords';
--// $cfg['Servers'][$i]['pdf_pages'] = 'pma__pdf_pages';
--// $cfg['Servers'][$i]['column_info'] = 'pma__column_info';
--// $cfg['Servers'][$i]['history'] = 'pma__history';
--// $cfg['Servers'][$i]['table_uiprefs'] = 'pma__table_uiprefs';
--// $cfg['Servers'][$i]['tracking'] = 'pma__tracking';
--// $cfg['Servers'][$i]['designer_coords'] = 'pma__designer_coords';
--// $cfg['Servers'][$i]['userconfig'] = 'pma__userconfig';
--// $cfg['Servers'][$i]['recent'] = 'pma__recent';
--// $cfg['Servers'][$i]['users'] = 'pma__users';
--// $cfg['Servers'][$i]['usergroups'] = 'pma__usergroups';
--// $cfg['Servers'][$i]['navigationhiding'] = 'pma__navigationhiding';
++
 +// The password needed for the controluser to login
 +// (see $cfg['Servers'][$i]['controluser'])
 +$cfg['Servers'][$i]['controlpass']         = '';
@@ -240,12 +218,12 @@ Index: config.sample.inc.php
 +// Without configuring the storage, you can still access the recently
 +// used tables, but it will disappear after you logout.
 +//   DEFAULT: 'pma_recent'
-+$cfg['Servers'][$i]['recent']              = 'pma__recent'; 
-+ 
++$cfg['Servers'][$i]['recent']              = 'pma__recent';
++
 +// You can create different user groups with menu items attached to them.
-+// Users can be assigned to these groups and the logged in user 
++// Users can be assigned to these groups and the logged in user
 +// would only see menu items configured to the usergroup he is assigned to.
-+// To do this it needs two tables “usergroups” (storing allowed menu items for each user group) 
++// To do this it needs two tables “usergroups” (storing allowed menu items for each user group)
 +// and “users” (storing users and their assignments to user groups).
 +//   DEFAULT: 'pma_users'
 +//   DEFAULT: 'pma_usergroups'
@@ -255,7 +233,30 @@ Index: config.sample.inc.php
 +// You can hide/show items in the navigation tree.
 +//   DEFAULT: 'pma_navigationhiding'
 +$cfg['Servers'][$i]['navigationhiding']    = 'pma__navigationhiding';
-+ 
+ 
+-/* User used to manipulate with storage */
+-// $cfg['Servers'][$i]['controlhost'] = '';
+-// $cfg['Servers'][$i]['controlport'] = '';
+-// $cfg['Servers'][$i]['controluser'] = 'pma';
+-// $cfg['Servers'][$i]['controlpass'] = 'pmapass';
+-
+-/* Storage database and tables */
+-// $cfg['Servers'][$i]['pmadb'] = 'phpmyadmin';
+-// $cfg['Servers'][$i]['bookmarktable'] = 'pma__bookmark';
+-// $cfg['Servers'][$i]['relation'] = 'pma__relation';
+-// $cfg['Servers'][$i]['table_info'] = 'pma__table_info';
+-// $cfg['Servers'][$i]['table_coords'] = 'pma__table_coords';
+-// $cfg['Servers'][$i]['pdf_pages'] = 'pma__pdf_pages';
+-// $cfg['Servers'][$i]['column_info'] = 'pma__column_info';
+-// $cfg['Servers'][$i]['history'] = 'pma__history';
+-// $cfg['Servers'][$i]['table_uiprefs'] = 'pma__table_uiprefs';
+-// $cfg['Servers'][$i]['tracking'] = 'pma__tracking';
+-// $cfg['Servers'][$i]['designer_coords'] = 'pma__designer_coords';
+-// $cfg['Servers'][$i]['userconfig'] = 'pma__userconfig';
+-// $cfg['Servers'][$i]['recent'] = 'pma__recent';
+-// $cfg['Servers'][$i]['users'] = 'pma__users';
+-// $cfg['Servers'][$i]['usergroups'] = 'pma__usergroups';
+-// $cfg['Servers'][$i]['navigationhiding'] = 'pma__navigationhiding';
  /* Contrib / Swekey authentication */
 -// $cfg['Servers'][$i]['auth_swekey_config'] = '/etc/swekey-pma.conf';
 +// The name of the file containing Swekey ids and login names for
@@ -292,12 +293,12 @@ Index: config.sample.inc.php
 +$cfg['Servers'][$i]['AllowDeny']['order']  = '';
 +$cfg['Servers'][$i]['AllowDeny']['rules']  = array();
 +*/
-+ 
-+/*
-+ * phpMyAdmin configuration storage settings.
-+ */
  
  /*
++ * phpMyAdmin configuration storage settings.
++ */
++
++/*
 +$cfg['Servers'][$i]['controlhost']         = 'localhost';
 +$cfg['Servers'][$i]['controluser']         = '';
 +$cfg['Servers'][$i]['controlpass']         = '';
@@ -334,9 +335,9 @@ Index: config.sample.inc.php
 +/***************************************
   * End of servers configuration
   */
-
+ 
 Index: libraries/vendor_config.php
-=================================================================== 
+===================================================================
 --- libraries/vendor_config.php.orig
 +++ libraries/vendor_config.php
 @@ -17,18 +17,18 @@ if (! defined('PHPMYADMIN')) {
diff --git a/phpMyAdmin.changes b/phpMyAdmin.changes
index e75dfe1..e41c4d7 100644
--- a/phpMyAdmin.changes
+++ b/phpMyAdmin.changes
@@ -1,88 +1,96 @@
+-------------------------------------------------------------------
+Wed Feb 26 23:18:52 UTC 2014 - chris@computersalat.de
+
+- fix changes file
+
 -------------------------------------------------------------------
 Sat Feb 22 13:35:15 UTC 2014 - ecsos@schirra.net
 
 - update to 4.1.8 (2014-02-22)
-- sf#4276 Login loop on session expiry
-- sf#4249 Incorrect number of result rows for SQL with subqueries
-- sf#4275 Broken Link to php extension manual
-- sf#4053 List of procedures is not displayed after executing with Enter
-- sf#4081 Setup page content shifted to the right edge of its tabs
-- sf#4284 Reordering a column erases comments for other columns
-- sf#4286 Open "Browse" in a new tab
-- sf#4287 Printview - Always one column too much
-- sf#4288 Expand database (+ icon) after timeout doesn't do anything
-- sf#4285 Fixed CSS for setup
-- Fixed altering table to DOUBLE/FLOAT field
-- sf#4292 Success message and failure message being shown together
-- sf#4293 opening new tab (using selflink) for import.php based actions
+  * sf#4276 Login loop on session expiry
+  * sf#4249 Incorrect number of result rows for SQL with subqueries
+  * sf#4275 Broken Link to php extension manual
+  * sf#4053 List of procedures is not displayed after executing with Enter
+  * sf#4081 Setup page content shifted to the right edge of its tabs
+  * sf#4284 Reordering a column erases comments for other columns
+  * sf#4286 Open "Browse" in a new tab
+  * sf#4287 Printview - Always one column too much
+  * sf#4288 Expand database (+ icon) after timeout doesn't do anything
+  * sf#4285 Fixed CSS for setup
+  * Fixed altering table to DOUBLE/FLOAT field
+  * sf#4292 Success message and failure message being shown together
+  * sf#4293 opening new tab (using selflink) for import.php based actions
           results in error and logout 
 
 -------------------------------------------------------------------
 Sun Feb  9 16:40:00 UTC 2014 - ecsos@schirra.net
 
+- fix for bnc#864917
+  * PMASA-2014-1 ( CVE-2014-1879, CWE-661 CWE-79)
+  * update to >= 4.1.7
 - update to 4.1.7 (2014-02-09)
-  - sf#4245 initial Browse query does not match sorting order
-  - sf#4250 Notice on export page
-  - sf#4253 "New" text in navigation frame acts like a database
-  - sf#4262 Cannot define a column with fractional seconds
-  - sf#4265 Missing datepicker icon for DATETIME(length)
-  - sf#4257 Hide fractional seconds when applicable
-  - sf#4264 Uncheck "Ignore" while inserting, upon leaving a textarea
-  - sf#4260 reCaptcha is ignoring language settings
-  - sf#4259 reCaptcha sound session expired problem
-  - sf#4263 Japanese character encoding not working properly when exporting
-  - sf#4269 Notice on table relation page
-  - sf#4270 Bad text-color for table comments
-  - sf#4278 reCaptcha re-login requires double effort
-  - sf#4272 Incorrect tabindex
-  - sf#4271 Query by example and the second criteria line
-  - sf#4242 Wildcard-containing only_db failure in sidebar
+  * sf#4245 initial Browse query does not match sorting order
+  * sf#4250 Notice on export page
+  * sf#4253 "New" text in navigation frame acts like a database
+  * sf#4262 Cannot define a column with fractional seconds
+  * sf#4265 Missing datepicker icon for DATETIME(length)
+  * sf#4257 Hide fractional seconds when applicable
+  * sf#4264 Uncheck "Ignore" while inserting, upon leaving a textarea
+  * sf#4260 reCaptcha is ignoring language settings
+  * sf#4259 reCaptcha sound session expired problem
+  * sf#4263 Japanese character encoding not working properly when exporting
+  * sf#4269 Notice on table relation page
+  * sf#4270 Bad text-color for table comments
+  * sf#4278 reCaptcha re-login requires double effort
+  * sf#4272 Incorrect tabindex
+  * sf#4271 Query by example and the second criteria line
+  * sf#4242 Wildcard-containing only_db failure in sidebar
 
 -------------------------------------------------------------------
 Sun Jan 26 12:56:25 UTC 2014 - ecsos@schirra.net
 
 - update to 4.1.6 (2014-01-26)
-  - sf#4232 User not found after creating the user
-  - sf#4241 Confusing dialog when trying to create an already existing user
-  - sf#4239 Missing LIMIT clause for some queries
-  - rfe #1489 Do not show create icon when user has no privileges
-  - sf#4218 Chrome behavior with date fields
-  - sf#3579 NOW() function incorrectly selected (regression)
-  - sf#4244 Advisor complaints about MariaDB 10.x is version less than 5.1
-  - sf#3889 When login fails and error display is active, login data is displayed (regression)
-  - sf#4247 open_basedir warnings on export page
-  - sf#4013 AJAX request waiting until version info is retrieved
-  - sf#4248 js error when changing number of columns in status monitor
+  * sf#4232 User not found after creating the user
+  * sf#4241 Confusing dialog when trying to create an already existing user
+  * sf#4239 Missing LIMIT clause for some queries
+  * rfe #1489 Do not show create icon when user has no privileges
+  * sf#4218 Chrome behavior with date fields
+  * sf#3579 NOW() function incorrectly selected (regression)
+  * sf#4244 Advisor complaints about MariaDB 10.x is version less than 5.1
+  * sf#3889 When login fails and error display is active, login data is displayed (regression)
+  * sf#4247 open_basedir warnings on export page
+  * sf#4013 AJAX request waiting until version info is retrieved
+  * sf#4248 js error when changing number of columns in status monitor
 
 -------------------------------------------------------------------
 Fri Jan 17 21:42:20 UTC 2014 - andreas.stieger@gmx.de
 
 - phpMyAdmin 4.1.5
-  - sf#3780 Allow aborting loading pages
-  - sf#4223 Database list: Create database misses collation column
-  - sf#4224 Empty table names when a table is "inuse"
-  - sf#4225 Partition maintenance broken
-  - sf#4219 Table list (left panel) does not reload when table renamed
-  - sf#4230 "in use" displayed for all views in database print view
-  - sf#4226 Notice: Undefined index: pma_config_loading
-  - sf#4221 Bzip2 export cannot be directly imported (so withdraw bz2 export)
-  - sf#4204 Reloading user privileges hides user groups submenu
-  - sf#4231 DATE columns quick edit decrement by one day
+  * sf#3780 Allow aborting loading pages
+  * sf#4223 Database list: Create database misses collation column
+  * sf#4224 Empty table names when a table is "inuse"
+  * sf#4225 Partition maintenance broken
+  * sf#4219 Table list (left panel) does not reload when table renamed
+  * sf#4230 "in use" displayed for all views in database print view
+  * sf#4226 Notice: Undefined index: pma_config_loading
+  * sf#4221 Bzip2 export cannot be directly imported (so withdraw bz2 export)
+  * sf#4204 Reloading user privileges hides user groups submenu
+  * sf#4231 DATE columns quick edit decrement by one day
 
 -------------------------------------------------------------------
 Wed Jan  8 14:02:09 UTC 2014 - ecsos@schirra.net
 
 - update to 4.1.4 (2014-01-07)
-  - sf#3840 (additional fix) When exporting to gzip format, the data is compressed 2 times
-  - sf#4209 Missing compression in one case
-  - sf#4208 Can't browse tables after sorting on columns with fieldnames that have a '-'
-  - sf#4184 Switch to wrong page after adding an index
-  - sf#3885 Additional fix for this bug
-  - sf#4212 Table "disappears" if it has the same name as its tablegroup
-  - sf#4213 Datetime Quick Edit decrements by one day
-  - sf#4217 Current value not highlighted when browsing foreign values
-  - sf#4220 Incorrect key values in foreign key browser
-  - sf#4215 MariaDB 5.5: error in Drizzle detection
+  * sf#3840 (additional fix) When exporting to gzip format, the data is compressed 2 times
+  * sf#4209 Missing compression in one case
+  * sf#4208 Can't browse tables after sorting on columns with fieldnames that have a '-'
+  * sf#4184 Switch to wrong page after adding an index
+  * sf#3885 Additional fix for this bug
+  * sf#4212 Table "disappears" if it has the same name as its tablegroup
+  * sf#4213 Datetime Quick Edit decrements by one day
+  * sf#4217 Current value not highlighted when browsing foreign values
+  * sf#4220 Incorrect key values in foreign key browser
+  * sf#4215 MariaDB 5.5: error in Drizzle detection
 
 -------------------------------------------------------------------
 Wed Jan  1 16:36:22 UTC 2014 - andreas.stieger@gmx.de
@@ -93,193 +101,193 @@ Wed Jan  1 16:36:22 UTC 2014 - andreas.stieger@gmx.de
 Wed Jan  1 12:59:03 UTC 2014 - ecsos@schirra.net
 
 - update to 4.1.3 (2013-12-31)
-  - sf#3938 PDFDefaultPageSize doc and easy configurability
-  - sf#4198 Hovering over pie chart gives fatal JS error
-  - sf#4200 Missing syntax highlighting
-  - sf#4201 Exports are not compressed
-  - sf#4131 Import: "number of rows to skip" is ambiguous
-  - sf#4205 Add a user shows additional "edit user group" link
-  - sf#4202 Cannot read property 'token' of undefined
-  - sf#4203 On refreshing designer, $.FullScreen is undefined
-  - sf#3920 Lost space in navigation area
+  * sf#3938 PDFDefaultPageSize doc and easy configurability
+  * sf#4198 Hovering over pie chart gives fatal JS error
+  * sf#4200 Missing syntax highlighting
+  * sf#4201 Exports are not compressed
+  * sf#4131 Import: "number of rows to skip" is ambiguous
+  * sf#4205 Add a user shows additional "edit user group" link
+  * sf#4202 Cannot read property 'token' of undefined
+  * sf#4203 On refreshing designer, $.FullScreen is undefined
+  * sf#3920 Lost space in navigation area
 - Fix python-bytecode-inconsistent-mtime
 
 -------------------------------------------------------------------
 Mon Dec 23 23:47:24 UTC 2013 - ecsos@schirra.net
 
 - update to 4.1.2 (2013-12-23)
-  - sf#4178 Quick edit for BIT type does not work
-  - sf#2760 Warn about incomplete exports
-  - sf#4190 Fractional seconds cause row update even if the value is not changed
-  - sf#4170 Overflow scroll for table grid is not a good solution
-  - sf#2961 Relations settings not updated on config change
-  - sf#4187 SQL query inline edit doesn't post changes on the first run
-  + rfe #1465 Docs for connections to IPv6 only MySQL instances
-  + rfe #1468 [interface] No floating for server breadcrumb menu
+  * sf#4178 Quick edit for BIT type does not work
+  * sf#2760 Warn about incomplete exports
+  * sf#4190 Fractional seconds cause row update even if the value is not changed
+  * sf#4170 Overflow scroll for table grid is not a good solution
+  * sf#2961 Relations settings not updated on config change
+  * sf#4187 SQL query inline edit doesn't post changes on the first run
+  * rfe #1465 Docs for connections to IPv6 only MySQL instances
+  * rfe #1468 [interface] No floating for server breadcrumb menu
 
 -------------------------------------------------------------------
 Tue Dec 17 17:27:05 UTC 2013 - ecsos@schirra.net
 
 - update to 4.1.1 (2013-12-17)
-  - sf#4154 Error using UNION query
-  - sf#4173 Transformations overview not reachable
-  - sf#4149 Js freezes in the management of replication
-  - sf#3903 Query fails when using aliases after ordering result
-  - sf#4181 Adding columns in table creation clears existing columns
-  - sf#4023 Requires wildcard EXECUTE/ALTER ROUTINE on DB to allow
+  * sf#4154 Error using UNION query
+  * sf#4173 Transformations overview not reachable
+  * sf#4149 Js freezes in the management of replication
+  * sf#3903 Query fails when using aliases after ordering result
+  * sf#4181 Adding columns in table creation clears existing columns
+  * sf#4023 Requires wildcard EXECUTE/ALTER ROUTINE on DB to allow
   Procedures to be executed by user
-  - sf#4186 Adding a column when creating a table does not propagate index info
-  - sf#4185 Unable to execute create procedure statement from query window
+  * sf#4186 Adding a column when creating a table does not propagate index info
+  * sf#4185 Unable to execute create procedure statement from query window
 
 -------------------------------------------------------------------
 Sun Dec 15 18:51:58 UTC 2013 - ecsos@schirra.net
 
 - update to 4.1.0 (2013-12-11)
-  + rfe #499 On user creation, warn if the user already exists
-  + Use indeterminate check all checkbox in server privileges
-  + Break server_status.php functions into smaller functions
-  + PMA_DBI functions in database_interface.lib.php renamed to be compliant with PEAR standards
-  + [interface] Make warning about existing config directory clearer
-  + rfe #1414 Allow specifying controlport
-  + PMA_DBI functions in database interface libraries renamed to be compliant with PEAR standards
-  + rfe #1412 Creating a view from an empty set of results
-  + Improved layout on db and table operations pages
-  + rfe #1410 Added support for AES_ENCRYPT for blob fields
-  + rfe #1423 Clarify option text for icon/text settings
-  + [interface] Upgraded CodeMirror to 3.x series
-  + rfe #1363 Improved query profiler
-  + [interface] rfe #1429 Better suggestion for database name
-  + rfe #1433 Support relations with ndbcluster
-  - sf#3962 Proper escaping of JSON export
-  + rfe #1382 Optional ReCAPTCHA support
-  + rfe #1434 Improvements to the table browsing navigation bar
-  + rfe #1233 and rfe #1283 Improvements to Relation View interface
-  + rfe #1397 Use fractional seconds in time, datetime, and timestamp
-  + rfe #175 Allow cross-database relations
-  - [core] Dropped support for PHP 5.2.
-  + rfe #487 and rfe #1405 Find and Replacing column wise
-  + rfe #1373 Use same create view dialog for editing a view
-  + rfe #316 Configurable menus; allow user groups with customized menus per group
-  - sf#4024 Editing field a record is selected by makes pma load forever
-  - sf#4035 Query "inline" link disappears when turning off "Explain SQL" option
-  + rfe #1385 Hide tables, functions, procedures, events and views in navigation tree
-  + rfe #1321 Export view as if it was a table
-  + Dropped configuration directive: SQP
-  + Dropped configuration directive: MySQLManual*
-  + rfe #1041 and bug #2954 Improved support for SSL connections between MySQL and phpMyAdmin
-  - sf#4056 Language: Vague error message when adding a varchar field
-  + [setup] rfe #1452 Use type="password" for server passwords
-  + rfe #1451 HTML5 input tag enhancements
-  - sf#1193 Text field too small when editing a row longer than $cfg['LimitChars']
-  + Privileges tab for table level
-  - sf#4068 Headline in operations not readable in IE10
-  - sf#4000 "Table does not contain unique column" message appears after adding a unique column
-  + rfe #1428 add 'new database' entry to nav tree
-  + rfe #1457 Stone Age icon found
-  + rfe #1463 Filter tables and databases by regular expression
-  + Change the proxy variable names in the config to remove the VersionCheck prefix from them
-  + Added an Error Reporting Component
-  + Javascript files are no longer uglified
-  - sf#4145 Config screen fails to validate MemoryLimit = -1 (new default)
-  - sf#4123 Double config including
-  - sf#4134 After deleting all rows on a page, it returns to a blank page
-  + Dropped configuration directive: DisableIS, ShowDatabasesCommand
-  - sf#4152 Not possible to enter % for search in date fields
-  - sf#3931 IN Clause search does not permit multiple values
-  - sf#4086 Clicking OK from edit popup opens new tab
-  - sf#2983 unknown table status: TABLE_TYPE
-  - sf#4030 ORDER BY SUM(`field`) does not sort DESC
-  - sf#4133 CSV import breaks when no blank line at end of file
-  - sf#4153 Unable to import if newline encoding is MAC style
-  - sf#4096 horizontal scrollbar should not overflow on the left column
-  - sf#4159 bug with navigation between database and table filter
-  - sf#4119 Huge session data with $cfg['Error_Handler']['gather']
-  - sf#4169 Table list jumps to table on click
-  - sf#4168 Rename multiple columns is not working
+  * rfe #499 On user creation, warn if the user already exists
+  * Use indeterminate check all checkbox in server privileges
+  * Break server_status.php functions into smaller functions
+  * PMA_DBI functions in database_interface.lib.php renamed to be compliant with PEAR standards
+  * [interface] Make warning about existing config directory clearer
+  * rfe #1414 Allow specifying controlport
+  * PMA_DBI functions in database interface libraries renamed to be compliant with PEAR standards
+  * rfe #1412 Creating a view from an empty set of results
+  * Improved layout on db and table operations pages
+  * rfe #1410 Added support for AES_ENCRYPT for blob fields
+  * rfe #1423 Clarify option text for icon/text settings
+  * [interface] Upgraded CodeMirror to 3.x series
+  * rfe #1363 Improved query profiler
+  * [interface] rfe #1429 Better suggestion for database name
+  * rfe #1433 Support relations with ndbcluster
+  * sf#3962 Proper escaping of JSON export
+  * rfe #1382 Optional ReCAPTCHA support
+  * rfe #1434 Improvements to the table browsing navigation bar
+  * rfe #1233 and rfe #1283 Improvements to Relation View interface
+  * rfe #1397 Use fractional seconds in time, datetime, and timestamp
+  * rfe #175 Allow cross-database relations
+  * [core] Dropped support for PHP 5.2.
+  * rfe #487 and rfe #1405 Find and Replacing column wise
+  * rfe #1373 Use same create view dialog for editing a view
+  * rfe #316 Configurable menus; allow user groups with customized menus per group
+  * sf#4024 Editing field a record is selected by makes pma load forever
+  * sf#4035 Query "inline" link disappears when turning off "Explain SQL" option
+  * rfe #1385 Hide tables, functions, procedures, events and views in navigation tree
+  * rfe #1321 Export view as if it was a table
+  * Dropped configuration directive: SQP
+  * Dropped configuration directive: MySQLManual*
+  * rfe #1041 and bug #2954 Improved support for SSL connections between MySQL and phpMyAdmin
+  * sf#4056 Language: Vague error message when adding a varchar field
+  * [setup] rfe #1452 Use type="password" for server passwords
+  * rfe #1451 HTML5 input tag enhancements
+  * sf#1193 Text field too small when editing a row longer than $cfg['LimitChars']
+  * Privileges tab for table level
+  * sf#4068 Headline in operations not readable in IE10
+  * sf#4000 "Table does not contain unique column" message appears after adding a unique column
+  * rfe #1428 add 'new database' entry to nav tree
+  * rfe #1457 Stone Age icon found
+  * rfe #1463 Filter tables and databases by regular expression
+  * Change the proxy variable names in the config to remove the VersionCheck prefix from them
+  * Added an Error Reporting Component
+  * Javascript files are no longer uglified
+  * sf#4145 Config screen fails to validate MemoryLimit = -1 (new default)
+  * sf#4123 Double config including
+  * sf#4134 After deleting all rows on a page, it returns to a blank page
+  * Dropped configuration directive: DisableIS, ShowDatabasesCommand
+  * sf#4152 Not possible to enter % for search in date fields
+  * sf#3931 IN Clause search does not permit multiple values
+  * sf#4086 Clicking OK from edit popup opens new tab
+  * sf#2983 unknown table status: TABLE_TYPE
+  * sf#4030 ORDER BY SUM(`field`) does not sort DESC
+  * sf#4133 CSV import breaks when no blank line at end of file
+  * sf#4153 Unable to import if newline encoding is MAC style
+  * sf#4096 horizontal scrollbar should not overflow on the left column
+  * sf#4159 bug with navigation between database and table filter
+  * sf#4119 Huge session data with $cfg['Error_Handler']['gather']
+  * sf#4169 Table list jumps to table on click
+  * sf#4168 Rename multiple columns is not working
 
 -------------------------------------------------------------------
 Fri Dec  6 14:58:34 UTC 2013 - ecsos@schirra.net
 
 - update to 4.0.10 (2013-12-04)
-  - sf#4150 Clicking database name in query window opens a new tab
-  - sf#4141 Wrong page is shown after editing; also, do not show a modal
+  * sf#4150 Clicking database name in query window opens a new tab
+  * sf#4141 Wrong page is shown after editing; also, do not show a modal
 	      dialog for multi-row edit
-  - sf#3939 PHP NavigationTree error when paging through list
-  - sf#4075 Support A10 Networks load balancer
-  - sf#4083 row deleting isn't binlogs friendly
-  - sf#4163 Setup script does not recognize manually-configured server
-  - sf#4158 Events page says no privileges with ALL PRIVILEGES
+  * sf#3939 PHP NavigationTree error when paging through list
+  * sf#4075 Support A10 Networks load balancer
+  * sf#4083 row deleting isn't binlogs friendly
+  * sf#4163 Setup script does not recognize manually-configured server
+  * sf#4158 Events page says no privileges with ALL PRIVILEGES
 
 -------------------------------------------------------------------
 Sun Nov 10 12:59:02 UTC 2013 - ecsos@schirra.net
 
 - update to 4.0.9 (2013-11-04) 
-  - sf#4104 Can't edit updatable view when searching
-  - sf#4108 Missing refresh by deleting databases
-  - sf#3995 Drizzle server charset notice
-  - sf#3911 Filtering database names includes empty groupings
-  - sf#3678 Does not display or manipulate bit(64) fields appropriately
-  - sf#4129 Unneeded navi panel refresh
-  - sf#4120 SSL redirects to port 80
-  - sf#4144 DROP DATABASE displays wrong database name
-  - sf#4059 Running delete query asks for confirmation but says it was already executed
-  - sf#4147 Accessibility: Images without Alt nor title attribute 
+  * sf#4104 Can't edit updatable view when searching
+  * sf#4108 Missing refresh by deleting databases
+  * sf#3995 Drizzle server charset notice
+  * sf#3911 Filtering database names includes empty groupings
+  * sf#3678 Does not display or manipulate bit(64) fields appropriately
+  * sf#4129 Unneeded navi panel refresh
+  * sf#4120 SSL redirects to port 80
+  * sf#4144 DROP DATABASE displays wrong database name
+  * sf#4059 Running delete query asks for confirmation but says it was already executed
+  * sf#4147 Accessibility: Images without Alt nor title attribute 
 
 -------------------------------------------------------------------
 Mon Oct  7 15:36:07 UTC 2013 - ecsos@schirra.net
 
 - update to 4.0.8 (2013-10-06)
-  - sf#3988 Rename view is not working
-  - sf#4041 Interaction between linkified fields and grid editing
-  - sf#3975 Table grouping isn't implemented properly
-  - sf#4060 Browser tries to remember wrong password when creating new user
-  - sf#4002 Edit Index on big table doesn't show "Loading" or any message
-  - sf#4098 Default table tab is ignored
-  - sf#4099 Server/library difference warning: setting is ignored
-  - sf#4100 table tree group strategy
-  - sf#4102 ALTER TABLE ORDER BY and InnoDB
-  - sf#4103 Tracking report: cannot delete a statement
-  - sf#3996 Drizzle navigation doesn't expand
-  - sf#4074 GIS column editor: point not displayed
-  - sf#4109 Drizzle tables in navigation are shown as views
-  - sf#4095 NUL symbols added to the end of database dump file
-  - sf#4105 More disappears in table Structure
-  - sf#3992 Multi-row edit doesn't clear values when checking NULL
+  * sf#3988 Rename view is not working
+  * sf#4041 Interaction between linkified fields and grid editing
+  * sf#3975 Table grouping isn't implemented properly
+  * sf#4060 Browser tries to remember wrong password when creating new user
+  * sf#4002 Edit Index on big table doesn't show "Loading" or any message
+  * sf#4098 Default table tab is ignored
+  * sf#4099 Server/library difference warning: setting is ignored
+  * sf#4100 table tree group strategy
+  * sf#4102 ALTER TABLE ORDER BY and InnoDB
+  * sf#4103 Tracking report: cannot delete a statement
+  * sf#3996 Drizzle navigation doesn't expand
+  * sf#4074 GIS column editor: point not displayed
+  * sf#4109 Drizzle tables in navigation are shown as views
+  * sf#4095 NUL symbols added to the end of database dump file
+  * sf#4105 More disappears in table Structure
+  * sf#3992 Multi-row edit doesn't clear values when checking NULL
 
 -------------------------------------------------------------------
 Sun Sep 29 11:13:39 UTC 2013 - ecsos@schirra.net
 
 - update to 4.0.7 (2013-09-23)
-  - sf#3993 Sorting in database overview with statistics doesn't work
-  - bug Handle the situation where PHP_SELF is not set
-  - sf#4080 Overwrite existing file not obeyed
-  - sf#3929 Database-specific privileges are not copied when cloning user
-  - sf#3997 Error handling in case MySQL extension is missing
-  - sf#4089 Moving Columns will alter column definition
-  - sf#4091 Insert ignore option does not work
-  - sf#4090 Downloading BLOB downloads page template
-  - sf#4092 Clicking on table name in view of information_schema redirects to wrong page
-  - sf#4079 Copy Table Add AUTO_INCREMENT value checkbox not working
-  - sf#4088 MySQL server version at index.php incorrect w/ controlhost
-  - sf#4001 Import error: Class 'ImportOds' not found
-  - sf#3986 Missing DROP VIEW button
+  * sf#3993 Sorting in database overview with statistics doesn't work
+  * bug Handle the situation where PHP_SELF is not set
+  * sf#4080 Overwrite existing file not obeyed
+  * sf#3929 Database-specific privileges are not copied when cloning user
+  * sf#3997 Error handling in case MySQL extension is missing
+  * sf#4089 Moving Columns will alter column definition
+  * sf#4091 Insert ignore option does not work
+  * sf#4090 Downloading BLOB downloads page template
+  * sf#4092 Clicking on table name in view of information_schema redirects to wrong page
+  * sf#4079 Copy Table Add AUTO_INCREMENT value checkbox not working
+  * sf#4088 MySQL server version at index.php incorrect w/ controlhost
+  * sf#4001 Import error: Class 'ImportOds' not found
+  * sf#3986 Missing DROP VIEW button
 
 -------------------------------------------------------------------
 Sat Sep  7 15:42:13 UTC 2013 - ecsos@schirra.net
 
 - update to 4.0.6 (2013-09-05)
-  - sf#4036 Call to undefined function mb_detect_encoding (clarify the doc)
-  - sf Missing hints when changing a column's structure
-  - sf#4048 Cannot select foreign value in Search
-  - sf#4025 gzip export is not actually compressed with mod_deflate
-  - sf#4054 query analysis doesn't launch in status monitor
-  + Add pmahomme icon credits (FamFamFam silk icon set)
-  - sf#4064 Table structure statistics "Space usage" caption too small for l10n
-  - sf#4051 Wrong tabindex when inserting rows
-  - sf#4066 varchar field not truncated in table browse mode
-  + rfe #1435 Opening database should expand it in the navigation menu
-  - (performance) Removed ShowTooltip directive
-  - sf#4046 Exporting huge Tables causes memory-Problems
+  * sf#4036 Call to undefined function mb_detect_encoding (clarify the doc)
+  * sf Missing hints when changing a column's structure
+  * sf#4048 Cannot select foreign value in Search
+  * sf#4025 gzip export is not actually compressed with mod_deflate
+  * sf#4054 query analysis doesn't launch in status monitor
+  * Add pmahomme icon credits (FamFamFam silk icon set)
+  * sf#4064 Table structure statistics "Space usage" caption too small for l10n
+  * sf#4051 Wrong tabindex when inserting rows
+  * sf#4066 varchar field not truncated in table browse mode
+  * rfe #1435 Opening database should expand it in the navigation menu
+  * (performance) Removed ShowTooltip directive
+  * sf#4046 Exporting huge Tables causes memory-Problems
 
 -------------------------------------------------------------------
 Wed Aug  7 12:09:45 UTC 2013 - chris@computersalat.de
@@ -292,24 +300,24 @@ Wed Aug  7 12:09:45 UTC 2013 - chris@computersalat.de
 Mon Aug  5 21:51:23 UTC 2013 - obs@ladisch.de
 
 - update to 4.0.5 (2013-08-04)
-  + sf#3977 Not detected configuration storage
-  + sf#3970 Pressing enter in the filter field reloads page
-  + sf#3984 Cannot insert in this table (PHP < 5.4)
-  + sf#3989 Reloading privileges does not update the interface
-  + sf#3960 NavigationBarIconic config not honored
-  + sf#3985 Call to undefined function mb_detect_encoding
-  + sf#4007 Analyze option not shown for InnoDB tables
-  + sf#4015 Forcing a storage engine for configuration storage
-  + bug Incorrect Drizzle 7 detection
-  + sf#4019 Create database if not exists (export): add an option to the
+  * sf#3977 Not detected configuration storage
+  * sf#3970 Pressing enter in the filter field reloads page
+  * sf#3984 Cannot insert in this table (PHP < 5.4)
+  * sf#3989 Reloading privileges does not update the interface
+  * sf#3960 NavigationBarIconic config not honored
+  * sf#3985 Call to undefined function mb_detect_encoding
+  * sf#4007 Analyze option not shown for InnoDB tables
+  * sf#4015 Forcing a storage engine for configuration storage
+  * bug Incorrect Drizzle 7 detection
+  * sf#4019 Create database if not exists (export): add an option to the
     interface to enable generating CREATE DATABASE and USE (false by default)
-  + sf#4012 Crash on CSV file import
-  + sf#4009 Statistic Monitor shows only last 3 digits in graph
-  + sf#3998 Non-permanent SQL history not working
-  + sf#3578 Transformations for text/plain on a BLOB column
-  + [security] Improved protection against cross framing, see PMASA-2013-10
+  * sf#4012 Crash on CSV file import
+  * sf#4009 Statistic Monitor shows only last 3 digits in graph
+  * sf#3998 Non-permanent SQL history not working
+  * sf#3578 Transformations for text/plain on a BLOB column
+  * [security] Improved protection against cross framing, see PMASA-2013-10
     (CVE-2013-5029 CWE-661 CWE-693) 
-  + Reinstated configuration directive: AllowThirdPartyFraming
+  * Reinstated configuration directive: AllowThirdPartyFraming
 - fix for bug sf#4038: PMASA-2013-8 not mentioned in 4.0.4.2 changes
 - add CVEs to 4.0.4.2 changes
 
@@ -341,27 +349,27 @@ Mon Jul 29 20:07:45 UTC 2013 - chris@computersalat.de
 Wed Jul  3 21:40:23 UTC 2013 - obs@ladisch.de
 
 - update to 4.0.4.1 (2013-06-30)
-  + [security] Global variables scope injection vulnerability
+  * [security] Global variables scope injection vulnerability
     (PMASA-2013-7, CVE-2013-4729)
 
 -------------------------------------------------------------------
 Tue Jun 18 22:29:34 UTC 2013 - ecsos@schirra.net
 
 - update to 4.0.4 (2013-06-17)
-  - sf#3959 Using DefaultTabDatabase in NavigationTree for Database Click
-  - sf#3961 Avoid Suhosin warning when in simulation mode
-  - sf#3897 Row Statistics and Space usage bugs
-  - sf#3966 Only display "table has no unique column" message when applicable
-  - sf#3960 NavigationBarIconic config not honored
-  - sf#3965 Default language wrong with zh-TW
-  - sf#3921 Call to undefined function PMA_isSuperuser() if default server is not set
-  - sf#3971 Ctrl/shift + click opens links in same window
-  - sf#3964 Import using https does not work
-  - fix bug Missing removeCRLF option in ExportCsv and ExportExcel plugins
-  - sf#3631 Drop not working Visio schema export.
-  - sf#3645 Better handling of invalid ODS documents
-  - sf#3976 Number of pages
-  - sf#3922 User privileges, database name unescaped
+  * sf#3959 Using DefaultTabDatabase in NavigationTree for Database Click
+  * sf#3961 Avoid Suhosin warning when in simulation mode
+  * sf#3897 Row Statistics and Space usage bugs
+  * sf#3966 Only display "table has no unique column" message when applicable
+  * sf#3960 NavigationBarIconic config not honored
+  * sf#3965 Default language wrong with zh-TW
+  * sf#3921 Call to undefined function PMA_isSuperuser() if default server is not set
+  * sf#3971 Ctrl/shift + click opens links in same window
+  * sf#3964 Import using https does not work
+  * fix bug Missing removeCRLF option in ExportCsv and ExportExcel plugins
+  * sf#3631 Drop not working Visio schema export.
+  * sf#3645 Better handling of invalid ODS documents
+  * sf#3976 Number of pages
+  * sf#3922 User privileges, database name unescaped
 
 -------------------------------------------------------------------
 Wed Jun 12 21:59:40 UTC 2013 - chris@computersalat.de
@@ -373,15 +381,15 @@ Wed Jun 12 21:59:40 UTC 2013 - chris@computersalat.de
 Thu Jun  6 16:27:24 UTC 2013 - ecsos@schirra.net
 
 - update to 4.0.3 (2013-06-05) 
-  - sf#3941 Recent tables list always empty
-  - sf#3933 Do not translate "Open Document" in export settings
-  - sf#3927 List of tables is missing after expanding in the navigation frame
-  - sf#3942 Warnings about reserved word for many non reserved words
-  - sf#3912 Exporting row selection, resulted by ORDER BY query
-  - sf#3957 Cookies must be enabled past this point
-  - sf#3956 "Browse foreign values" search filter / page selector not working
-  - sf#3579 NOW() function incorrectly selected (partial regression)
-  - [security] Javascript execution vulnerability in Create view,
+  * sf#3941 Recent tables list always empty
+  * sf#3933 Do not translate "Open Document" in export settings
+  * sf#3927 List of tables is missing after expanding in the navigation frame
+  * sf#3942 Warnings about reserved word for many non reserved words
+  * sf#3912 Exporting row selection, resulted by ORDER BY query
+  * sf#3957 Cookies must be enabled past this point
+  * sf#3956 "Browse foreign values" search filter / page selector not working
+  * sf#3579 NOW() function incorrectly selected (partial regression)
+  * [security] Javascript execution vulnerability in Create view,
     reported by Maxim Rupp (see PMASA-2013-6)
 - fix for bnc#824306
   * PMASA-2013-6 (CVE-2013-3242)
@@ -390,164 +398,164 @@ Thu Jun  6 16:27:24 UTC 2013 - ecsos@schirra.net
 Sat May 25 17:33:09 UTC 2013 - ecsos@schirra.net
 
 - update to 4.0.2 (2013-05-24)
-  - sf#3902 Cannot browse when table name contains keyword "call"
-  + center loading indicator for navigation refresh, related to bug #3920
-  - sf#3925 Table sorting in navigation panel is case-sensitive
-  - sf#3915 Import of CSV file (Replace table data with file) with duplicate values
-  - sf#3907 undefined variables, function parameter problems
-  - sf#3898 Structure not refreshed after column drop
-  - sf#3926 View is not updatable
-  - sf#3919 PropertiesIconic not honored
-  - sf#3930 Databases to choose for specific privileges show up escaped
-  - sf#3910 Export database with empty table as a php array, does not produce valid PHP
-  - sf#3936 Query profiler chart not loading from SQL Query page
-  - sf#3946 Missing CSV import option "Do not abort on INSERT error"
-  - sf#3943 Missing Operations>Table options>AUTO_INCREMENT
-  - bug Missing CREATE DATABASE statement when exporting at database level
-  - sf#3924 Show warning when CSV file does not contain data for all columns
-  - sf#3947 Missing Sql Query after modify structure
-  - sf#3948 Server export problems
-  - sf#3917 CountTables directive is deprecated
+  * sf#3902 Cannot browse when table name contains keyword "call"
+  * center loading indicator for navigation refresh, related to bug #3920
+  * sf#3925 Table sorting in navigation panel is case-sensitive
+  * sf#3915 Import of CSV file (Replace table data with file) with duplicate values
+  * sf#3907 undefined variables, function parameter problems
+  * sf#3898 Structure not refreshed after column drop
+  * sf#3926 View is not updatable
+  * sf#3919 PropertiesIconic not honored
+  * sf#3930 Databases to choose for specific privileges show up escaped
+  * sf#3910 Export database with empty table as a php array, does not produce valid PHP
+  * sf#3936 Query profiler chart not loading from SQL Query page
+  * sf#3946 Missing CSV import option "Do not abort on INSERT error"
+  * sf#3943 Missing Operations>Table options>AUTO_INCREMENT
+  * bug Missing CREATE DATABASE statement when exporting at database level
+  * sf#3924 Show warning when CSV file does not contain data for all columns
+  * sf#3947 Missing Sql Query after modify structure
+  * sf#3948 Server export problems
+  * sf#3917 CountTables directive is deprecated
 
 -------------------------------------------------------------------
 Wed May 15 08:00:00 UTC 2013 - ecsos@schirra.net
 
 - update to 4.0.1.0 (2013-05-14)
-  - sf#3879 Import broken for CSV using LOAD DATA
-  - sf#3889 When login fails and error display is active, login data is displayed
-  - sf#3890 [import] Web server upload directory import fails
-  - sf#3891 [import] Server upload folder import file name missing in success message
-  + rfe #1421 [auth] Add retry button on connection failure with config auth
-  - sf#3894 [interface] Provide feedback if no columns selected for multi-submit
-  - sf#3799 [interface] Incorrect select field change on ctrl key navigation in Firefox
-  - sf#3885 [browse] display_binary_as_hex option causes unexpected behavior
-  - sf#3899 Git commit links to Github missing
-  - sf#3900 CSP WARN in Firefox console
-  - sf#3901 Setup script warning for config auth (stored login data) shows link BBcode
-  - sf#3895 [browse] Fixed getting BLOB data
-  - sf#3905 [export] Custom Exporting exports all databases
-  - sf#3909 [import] Import of CSV FIle to selected table doesn't work
-  - sf#3904 Browsing an empty table should not display its Structure
-  - sf#3908 Calendar widget improperly redirects to home
-  - sf#3918 Greyed out tabs when there are no rows fixed
-  - sf#3916 [interface] Missing scrollbar (original theme)
-  + [vendor] add tcpdf path to vendor_config.php
-  - bug fix compat with tcpdf >= 6.0 (tested with 6.0.012)
+  * sf#3879 Import broken for CSV using LOAD DATA
+  * sf#3889 When login fails and error display is active, login data is displayed
+  * sf#3890 [import] Web server upload directory import fails
+  * sf#3891 [import] Server upload folder import file name missing in success message
+  * rfe #1421 [auth] Add retry button on connection failure with config auth
+  * sf#3894 [interface] Provide feedback if no columns selected for multi-submit
+  * sf#3799 [interface] Incorrect select field change on ctrl key navigation in Firefox
+  * sf#3885 [browse] display_binary_as_hex option causes unexpected behavior
+  * sf#3899 Git commit links to Github missing
+  * sf#3900 CSP WARN in Firefox console
+  * sf#3901 Setup script warning for config auth (stored login data) shows link BBcode
+  * sf#3895 [browse] Fixed getting BLOB data
+  * sf#3905 [export] Custom Exporting exports all databases
+  * sf#3909 [import] Import of CSV FIle to selected table doesn't work
+  * sf#3904 Browsing an empty table should not display its Structure
+  * sf#3908 Calendar widget improperly redirects to home
+  * sf#3918 Greyed out tabs when there are no rows fixed
+  * sf#3916 [interface] Missing scrollbar (original theme)
+  * [vendor] add tcpdf path to vendor_config.php
+  * bug fix compat with tcpdf >= 6.0 (tested with 6.0.012)
 
 -------------------------------------------------------------------
 Fri May  3 17:32:42 UTC 2013 - ecsos@schirra.net
 
 - update to 4.0.0 (2013-05-03)
-  + Patch #3481047 for rfe #3480477 Insert as new row enhancement
-  + Patch #3480999 Activate codemirror in the query window
-  - Patch #3495284 XML Import - fix message and redirect
-  + rfe #3484063 Null checkbox behavior
-  + Patch #3497179 Contest-5: Add user: Allow create DB w/same name + grant u_%
-  + Patch #3498201 Contest-6: Export all privileges
-  + Patch #3502814 for rfe #3187077 Change password buttons should match
-  + rfe #3488640 Expand table-group in non-light navigation frame if only one
-  + Patch #3509360 Contest-3: Option "Truncate table" before "insert"
-  + Patch #3506552 Contest-2: Show index information in the data dictionary
-  + Patch #3510656 Contest-1: Ignoring foreign keys while dropping tables
-  - sf#3509686 Reverting sort on joined column does not work
-  + New transformation: append string
-  + rfe #3507804 Session upload progress (PHP 5.4)
-  + rfe #3488185 draggable columns vs copy column name
-  + Patch #3507001 Contest-4: Textarea for large character columns
-  + Removed the PHP version of the ENUM editor
-  + Patch #3507111 Display distinct results, linked to corresponding data rows
-  - sf#3507917 [export] JSON has unescaped values for allegedly numeric columns
-  + rfe #3516187 show tables creation, last update, last check timestamps in db_structure
-  - sf#3059806 Supporting running from CIFS/Samba shares
-  - sf#3516341 [export] Open Document Text, Word and Texy! Text show table structure twice
-  - sf [export] Texy! Text: Columns containing Pipe Character don't export properly
-  + [export] Show triggers in Open Document Text, Word and Texy! Text
-  - Patch #3415061 [auth] Login screen appears under the page
-  + rfe #3517354 [interface] Allow disabling CodeMirror with $cfg['CodemirrorEnable'] = false
-  + rfe #3475567 [interface] New directive $cfg['HideStructureActions']
-  - sf#3468272 [import] Fixed import of ODS with more paragraphs in a cell
-  - sf#3510196 [core] Improved redirecting with ForceSSL option
-  + rfe #3518852 [edit] edit blob but not other binary, new option $cfg['ProtectBinary'] = 'noblob'
-  + Hide language select box if there are no locales installed
-  + Removed some directives: verbose_check, SuggestDBName, LightTabs,
+  * Patch #3481047 for rfe #3480477 Insert as new row enhancement
+  * Patch #3480999 Activate codemirror in the query window
+  * Patch #3495284 XML Import - fix message and redirect
+  * rfe #3484063 Null checkbox behavior
+  * Patch #3497179 Contest-5: Add user: Allow create DB w/same name + grant u_%
+  * Patch #3498201 Contest-6: Export all privileges
+  * Patch #3502814 for rfe #3187077 Change password buttons should match
+  * rfe #3488640 Expand table-group in non-light navigation frame if only one
+  * Patch #3509360 Contest-3: Option "Truncate table" before "insert"
+  * Patch #3506552 Contest-2: Show index information in the data dictionary
+  * Patch #3510656 Contest-1: Ignoring foreign keys while dropping tables
+  * sf#3509686 Reverting sort on joined column does not work
+  * New transformation: append string
+  * rfe #3507804 Session upload progress (PHP 5.4)
+  * rfe #3488185 draggable columns vs copy column name
+  * Patch #3507001 Contest-4: Textarea for large character columns
+  * Removed the PHP version of the ENUM editor
+  * Patch #3507111 Display distinct results, linked to corresponding data rows
+  * sf#3507917 [export] JSON has unescaped values for allegedly numeric columns
+  * rfe #3516187 show tables creation, last update, last check timestamps in db_structure
+  * sf#3059806 Supporting running from CIFS/Samba shares
+  * sf#3516341 [export] Open Document Text, Word and Texy! Text show table structure twice
+  * sf [export] Texy! Text: Columns containing Pipe Character don't export properly
+  * [export] Show triggers in Open Document Text, Word and Texy! Text
+  * Patch #3415061 [auth] Login screen appears under the page
+  * rfe #3517354 [interface] Allow disabling CodeMirror with $cfg['CodemirrorEnable'] = false
+  * rfe #3475567 [interface] New directive $cfg['HideStructureActions']
+  * sf#3468272 [import] Fixed import of ODS with more paragraphs in a cell
+  * sf#3510196 [core] Improved redirecting with ForceSSL option
+  * rfe #3518852 [edit] edit blob but not other binary, new option $cfg['ProtectBinary'] = 'noblob'
+  * Hide language select box if there are no locales installed
+  * Removed some directives: verbose_check, SuggestDBName, LightTabs,
   VerboseMultiSubmit, ReplaceHelpImg
-  - Patch #3500882 Fixing checkbox behaviour while editing identical rows
-  + rfe #3441722 [interface] Display description of datatypes
-  + rfe #3517835 [structure] Move columns easily
-  + Ajaxified "Create View" functionality
-  + [import] New plugin: import mediawiki
-  + New navigation system
-  + Discontinued the use of a frame-based layout
-  + rfe #3528994 [interface] Allow wrapping possibly long values in replication-status table
-  + [interface] Autoselect username input on cookie login page
-  - sf#3563799 [interface] Grid editing destroying huge amount of data
-  + [import] Remove support for the unactive docSQL import format
-  - sf#3577443 [edit] "Browse foreign values" does not show on ajax edit
-  + rfe #3522109 [browse] Grid editing: action to trigger it (or disable)
-  - sf#3526598 [interface] SQL query not shown when creating table
-  + Dropped configuration directive: AllowThirdPartyFraming
-  + Dropped configuration directive: LeftFrameLight
-  + Dropped configuration directive: DisplayDatabasesList
-  + Dropped configuration directives: ShowTooltipAliasDB and ShowTooltipAliasTB
-  + Dropped configuration directive: NaviDatabaseNameColor
-  + Added configuration directive: MaxNavigationItems
-  + Renamed configuration directive: LeftFrameDBTree => NavigationTreeEnableGrouping
-  + Renamed configuration directive: LeftFrameDBSeparator => NavigationTreeDbSeparator
-  + Renamed configuration directive: LeftFrameTableSeparator => NavigationTreeTableSeparator
-  + Renamed configuration directive: LeftFrameTableLevel => NavigationTreeTableLevel
-  + Renamed configuration directive: LeftPointerEnable => NavigationTreePointerEnable
-  + Renamed configuration directive: LeftDefaultTabTable => NavigationTreeDefaultTabTable
-  + Renamed configuration directive: LeftDisplayTableFilterMinimum => NavigationTreeDisplayTableFilterMinimum
-  + Renamed configuration directive: LeftDisplayLogo => NavigationDisplayLogo
-  + Renamed configuration directive: LeftLogoLink => NavigationLogoLink
-  + Renamed configuration directive: LeftLogoLinkWindow => NavigationLogoLinkWindow
-  + Renamed configuration directive: LeftDisplayServers => NavigationDisplayServers
-  + Renamed configuration directive: LeftRecentTable => NumRecentTables
-  + Renamed configuration directive: LeftDisplayDatabaseFilterMinimum => NavigationTreeDisplayDbFilterMinimum
-  + Removed the "Mark row on click" feature; must now click the checkbox to mark
-  + Removed the "Synchronize" feature
-  + Improved layout of server variables page
-  + rfe #1052091 [config] Double-underscores in PMA table names
-  + Improved the "More" dropdown on the table structure page
-  + [interface] Added "scroll to top" link in menubar
-  + [designer] Fullscreen mode for the designer
-  + Upgraded jquery to v1.8.3 and jquery-ui to v1.9.2
-  + Patch #3597529 [status] Add raw value as title on server status page
-  + Support MySQL 5.6 partitioning
-  + Removed the AjaxEnable directive
-  + rfe #3542567 Accept IPv6 ranges and IPv6 CIDR notations in $cfg['Servers'][$i]['AllowDeny']['rules']
-  - sf#3576788 Grid editing shows the value before silent truncation
-  - Upgraded jqPlot to 1.0.4 r1121
-  - Upgraded to jquery-ui-timepicker-addon 1.1.1
-  + rfe #3599046 [interface] Added comments for indexes
-  - Replaced qtip with jQuery UI tooltip
-  - Upgraded CodeMirror to 2.37
-  - sf#2951 [export] Correctly export decimal fields.
-  - sf#3762 [core] Make Advisor work on Windows withou COM extension.
-  - sf#3519 [export] Prevent infinite recursion in PDF export.
-  - sf#3827 Table specific privileges not displayed for db name containing underscore
-  - rfe #1386 Add IF NOT EXISTS clause when copying database
-  - No longer package .travis.yml configuration file when creating a release.
-  - sf#3830 Can't export custom query because it lowercases table names
-  - sf#3829 Enabling query profiling crashes javascript based navigation
-  + rfe #879 Reserved word warning
-  + Remove the database ordering sub-feature of the only_db directive
-  - sf#3840 When exporting to gzip format, the data is compressed 2 times
-  + rfe #1319 Permit to create index when creating foreign key
-  - sf#3703 Incorrect updating of the list of users
-  - sf#3853 Blowfish implementation might be broken (replace with phpseclib)
-  - sf#3865 Using like operator on each backslash needs 4 backslash protection
-  - sf#3860 Displayed git revision info is not set
-  - sf#3871 Check referential integrity broken across databases
-  - sf#3874 [export] No preselected option when exporting table
-  - sf#3873 Can't copy table to target database if table exists there
-  - sf#3683 Incorrect listing of records from to count
-  - sf#3876 [import] PHP 5.2 - unexpected T_PAAMAYIM_NEKUDOTAYIM
-  - [security] Local file inclusion vulnerability, reported by Janek Vind
+  * Patch #3500882 Fixing checkbox behaviour while editing identical rows
+  * rfe #3441722 [interface] Display description of datatypes
+  * rfe #3517835 [structure] Move columns easily
+  * Ajaxified "Create View" functionality
+  * [import] New plugin: import mediawiki
+  * New navigation system
+  * Discontinued the use of a frame-based layout
+  * rfe #3528994 [interface] Allow wrapping possibly long values in replication-status table
+  * [interface] Autoselect username input on cookie login page
+  * sf#3563799 [interface] Grid editing destroying huge amount of data
+  * [import] Remove support for the unactive docSQL import format
+  * sf#3577443 [edit] "Browse foreign values" does not show on ajax edit
+  * rfe #3522109 [browse] Grid editing: action to trigger it (or disable)
+  * sf#3526598 [interface] SQL query not shown when creating table
+  * Dropped configuration directive: AllowThirdPartyFraming
+  * Dropped configuration directive: LeftFrameLight
+  * Dropped configuration directive: DisplayDatabasesList
+  * Dropped configuration directives: ShowTooltipAliasDB and ShowTooltipAliasTB
+  * Dropped configuration directive: NaviDatabaseNameColor
+  * Added configuration directive: MaxNavigationItems
+  * Renamed configuration directive: LeftFrameDBTree => NavigationTreeEnableGrouping
+  * Renamed configuration directive: LeftFrameDBSeparator => NavigationTreeDbSeparator
+  * Renamed configuration directive: LeftFrameTableSeparator => NavigationTreeTableSeparator
+  * Renamed configuration directive: LeftFrameTableLevel => NavigationTreeTableLevel
+  * Renamed configuration directive: LeftPointerEnable => NavigationTreePointerEnable
+  * Renamed configuration directive: LeftDefaultTabTable => NavigationTreeDefaultTabTable
+  * Renamed configuration directive: LeftDisplayTableFilterMinimum => NavigationTreeDisplayTableFilterMinimum
+  * Renamed configuration directive: LeftDisplayLogo => NavigationDisplayLogo
+  * Renamed configuration directive: LeftLogoLink => NavigationLogoLink
+  * Renamed configuration directive: LeftLogoLinkWindow => NavigationLogoLinkWindow
+  * Renamed configuration directive: LeftDisplayServers => NavigationDisplayServers
+  * Renamed configuration directive: LeftRecentTable => NumRecentTables
+  * Renamed configuration directive: LeftDisplayDatabaseFilterMinimum => NavigationTreeDisplayDbFilterMinimum
+  * Removed the "Mark row on click" feature; must now click the checkbox to mark
+  * Removed the "Synchronize" feature
+  * Improved layout of server variables page
+  * rfe #1052091 [config] Double-underscores in PMA table names
+  * Improved the "More" dropdown on the table structure page
+  * [interface] Added "scroll to top" link in menubar
+  * [designer] Fullscreen mode for the designer
+  * Upgraded jquery to v1.8.3 and jquery-ui to v1.9.2
+  * Patch #3597529 [status] Add raw value as title on server status page
+  * Support MySQL 5.6 partitioning
+  * Removed the AjaxEnable directive
+  * rfe #3542567 Accept IPv6 ranges and IPv6 CIDR notations in $cfg['Servers'][$i]['AllowDeny']['rules']
+  * sf#3576788 Grid editing shows the value before silent truncation
+  * Upgraded jqPlot to 1.0.4 r1121
+  * Upgraded to jquery-ui-timepicker-addon 1.1.1
+  * rfe #3599046 [interface] Added comments for indexes
+  * Replaced qtip with jQuery UI tooltip
+  * Upgraded CodeMirror to 2.37
+  * sf#2951 [export] Correctly export decimal fields.
+  * sf#3762 [core] Make Advisor work on Windows withou COM extension.
+  * sf#3519 [export] Prevent infinite recursion in PDF export.
+  * sf#3827 Table specific privileges not displayed for db name containing underscore
+  * rfe #1386 Add IF NOT EXISTS clause when copying database
+  * No longer package .travis.yml configuration file when creating a release.
+  * sf#3830 Can't export custom query because it lowercases table names
+  * sf#3829 Enabling query profiling crashes javascript based navigation
+  * rfe #879 Reserved word warning
+  * Remove the database ordering sub-feature of the only_db directive
+  * sf#3840 When exporting to gzip format, the data is compressed 2 times
+  * rfe #1319 Permit to create index when creating foreign key
+  * sf#3703 Incorrect updating of the list of users
+  * sf#3853 Blowfish implementation might be broken (replace with phpseclib)
+  * sf#3865 Using like operator on each backslash needs 4 backslash protection
+  * sf#3860 Displayed git revision info is not set
+  * sf#3871 Check referential integrity broken across databases
+  * sf#3874 [export] No preselected option when exporting table
+  * sf#3873 Can't copy table to target database if table exists there
+  * sf#3683 Incorrect listing of records from to count
+  * sf#3876 [import] PHP 5.2 - unexpected T_PAAMAYIM_NEKUDOTAYIM
+  * [security] Local file inclusion vulnerability, reported by Janek Vind
     (see PMASA-2013-4)
-  - [security] Global variables overwrite in export.php, reported by Janek Vind
+  * [security] Global variables overwrite in export.php, reported by Janek Vind
     (see PMASA-2013-5)
-  - sf#3892 [export] SQL Export files are empty
+  * sf#3892 [export] SQL Export files are empty
 - fix for bnc#824304
   * PMASA-2013-4 (CVE-2013-3240)
 - fix for bnc#824305