Matomo 3.13.4
27 March 2020
Matomo version 3.13.4 is now available (security release).
Upgrading to Matomo 3.13.4
Matomo 3.13.4 can be upgraded to (or installed) using any of Installatron's products. Use Installatron's optional Automatic Update feature to automatically apply Matomo updates as new versions are released, or use Installatron's Clone feature to duplicate an existing Matomo install to test the 3.13.4 upgrade prior to applying it live. Get started managing your Matomo installations with Installatron
What's New in Matomo 3.13.4
Security
- A security issue was fixed, rated 'moderate'.
Changes
- ‘Remember me’ not working because cookie expire is in wrong format [by @sgiehl]
- Set samesite lax instead of None if site is not on https [by @tsteur]
- Mention require PHP 7.2 in admin notification [by @sgiehl]
- slow SQL query using MariaDB causing high CPU load [by @sgiehl]
- Limit max execution time of transitions feature [by @sgiehl]
- Review Archive invalidation code [by @diosmosis]
- Today archive is invalidated too often [by @diosmosis]
- Warning – ucwords() expects exactly 1 parameter, 2 given [by @katebutler, @sgiehl]
- Page Overlay stuck on “Loading…”
- [Geo] Unknown region metrics increased significantly after update to v3.13.1 [by @diosmosis]
- Using Opt-Out iFrame twice doesn’t work [by @sgiehl]
- Ecommerce Orders Conversion Rate Rounding Error [by @sgiehl]
- Notice: Trying to access array offset on value of type null in core/Session/SessionAuth.php on line 63 [by @diosmosis]
- Prevent connection timed out when requesting configs.php file on IIS in web.config [by @sgiehl]
- There is no way to enable ‘secure’ for the 3rd party cookie [by @tsteur]
- Geolocation: automatically download latest paid DB-IP databases [by @sgiehl]
- Remove donation widget from dashboard [by @tsteur]
- Convert range date to date archive if needed [by @tsteur, @sgiehl]
- Always send a referrer-policy header [by @polarbirke, @diosmosis]
- Retry compiling less file if it fails [by @tsteur, @diosmosis]
- Prevent notice in PHP 7.4 Passing glue string after array is deprecated [by @tsteur, @diosmosis]
- Make sure config cache is only used when there is a correct path [by @tsteur, @diosmosis]
- Detect page view bucket [by @tsteur]
- device-detector: Oppo devices not detected (new useragent list & model names)
- device-detector: Detect devices for brands: Asus, Oppo, Huawei, Sony, Lenovo, LG, Wiko, Nuvo, Alcatel, Irbis, Heair, Motorola, CoolPad, Sunvell, AllDocube, Assistant, DEXP, ZTE, CAT, Xiaomi, Google, Yandex, Hisense, T-Mobile, Allview, ViewSonic, Yxtel, Ginzzu, HTC
- device-detector: Add Java port to README.md
- device-detector: Add ScalaJ HTTP library
- device-detector: Detection of Google Stackdriver Monitoring
- device-detector: Detection for Google Cloud Scheduler
- device-detector: Car tablet CarPad
- device-detector: Panasonic Lumix DMC-CM1
- device-detector: feat(device) detect new brand NewsMy & CarPad 2, CarPad 3;
- device-detector: Detect devices for brands: Wiko, Oysters, Pixus, Cherry Mobile, Vivo, EvroMedia, Allview, ZTE, Lenovo, Kiwi, Spectrum, Vesta, Ritmix, Casper, NUU, Ginzzu, Telefunken, National, Kaiomy, Kanji
- device-detector: Added Node Fetch library
- device-detector: Adds detection for Samsung devices
- device-detector: Adds detection for iHunt devices
- device-detector: Adds detection for Allview devices
- device-detector: Adds detection for Wiko devices
- referrer-spam-blacklist: More spammers
- referrer-spam-blacklist: Add greentechsy.com
- referrer-spam-blacklist: Add ingramreed.xyz
- referrer-spam-blacklist: Add janemill.xyz
- referrer-spam-blacklist: More spammers
- referrer-spam-blacklist: Add sabinablog.xyz
- referrer-spam-blacklist: Add martinahome.xyz
- tag-manager: Set samesite flag (used in “preview mode” in tag manager container)
- tag-manager: Remove duplicate index in variables table
- matomo-php-tracker: Prevent double slashes
- matomo-log-analytics: Improve regex for date and time in w3c formats