phpmyadmin (4:4.0.10-1ubuntu0.1) trusty-security; urgency=medium

  * SECURITY UPDATE: Username/password decryption; Remote command execution
    - debian/patches/CVE-2016-6606-1.patch: Improve cookie encryption
    - debian/patches/CVE-2016-6606-2.patch: Use hash_equals for comparing
      token
    - debian/patches/CVE-2016-6631.patch: Move generator scripts out of the
      code
    - CVE-2016-6606, CVE-2016-6631

 -- Mike Salvatore <mike.salvatore@canonical.com>  Wed, 29 Aug 2018 14:43:10 -0400

phpmyadmin (4:4.0.10-1) unstable; urgency=medium

  * New upstream release.

 -- Thijs Kinkhorst <thijs@debian.org>  Wed, 11 Dec 2013 17:32:19 +0100

phpmyadmin (4:4.0.9-1) unstable; urgency=low

  * New upstream release.
  * Prefer renamed fonts-dejavu-core as alternative for
    ttf-dejavu-core. (closes: #726238)

 -- Thijs Kinkhorst <thijs@debian.org>  Wed, 06 Nov 2013 19:46:38 +0100

phpmyadmin (4:4.0.8-1) unstable; urgency=low

  * New upstream release.

 -- Thijs Kinkhorst <thijs@debian.org>  Mon, 07 Oct 2013 20:18:01 +0200

phpmyadmin (4:4.0.6-1) unstable; urgency=low

  * New upstream release.

 -- Thijs Kinkhorst <thijs@debian.org>  Sat, 07 Sep 2013 09:16:38 +0200

phpmyadmin (4:4.0.5-1) unstable; urgency=high

  * New upstream release.
    - Fixes security issue PMASA-2013-10 (CVE-2013-5029).

 -- Thijs Kinkhorst <thijs@debian.org>  Sun, 04 Aug 2013 13:24:37 +0200

phpmyadmin (4:4.0.4.2-1) unstable; urgency=high

  * New upstream release.
    - Fixes security issues
      PMASA-2013-9  (CVE-2013-4996 CVE-2013-4997),
      PMASA-2013-11 (CVE-2013-4996),
      PMASA-2013-12 (CVE-2013-4998 CVE-2013-4999 CVE-2013-5000),
      PMASA-2013-13 (CVE-2013-5001),
      PMASA-2013-14 (CVE-2013-5002),
      PMASA-2013-15 (CVE-2013-5003).

 -- Thijs Kinkhorst <thijs@debian.org>  Sun, 28 Jul 2013 15:20:58 +0200

phpmyadmin (4:4.0.4.1-2) unstable; urgency=medium

  * post{inst,rm}: drop first argument to install_apache(), because that
    confuses apache2-maintscript-helper and it isn't used anymore anyway.
    (closes: #717713).
  * Drop xz compression for deb again, it's now the dpkg default.

 -- Thijs Kinkhorst <thijs@debian.org>  Sun, 28 Jul 2013 10:56:04 +0200

phpmyadmin (4:4.0.4.1-1) unstable; urgency=medium

  * New upstream release.
    - Fixes CVE-2013-4729: setting globals through import.
  * Make use of xz for deb compression and upstream tarball.
  * Make webserver configuration compatible with Apache 2.4
    (closes: #669843). We don't use dh_apache2 yet because it
    would tie this package to the Apache transition.

 -- Thijs Kinkhorst <thijs@debian.org>  Thu, 18 Jul 2013 11:09:09 +0200

phpmyadmin (4:4.0.3-1) unstable; urgency=low

  [ Thijs Kinkhorst ]
  * Explicitly depend on php5-json (closes: #711027).

  [ Michal Čihař ]
  * Fixed wrong path in postinst script (Closes: #710087).
  * New upstream release.
    - Fixes XSS issue PMASA-2013-6 (CVE-2013-3742).

 -- Michal Čihař <nijel@debian.org>  Wed, 05 Jun 2013 13:20:57 +0200

# For older changelog entries, run 'apt-get changelog phpmyadmin'
