phpmyadmin (4:4.9.5+dfsg1-2) unstable; urgency=medium

  * Bump motranslator build dependency from 4.x to 5.x
  * Drop php-recode extension from Build-Depends (Closes: #955360)

 -- William Desportes <williamdes@wdes.fr>  Tue, 31 Mar 2020 16:59:41 -0300

phpmyadmin (4:4.9.5+dfsg1-1) unstable; urgency=medium

  * Set upstream metadata fields: Changelog, Documentation, FAQ, Donation, Security-Contact.
  * Bump Standards-Version to 4.5.0
  * New upstream version 4.9.5 (Closes: #952308)
  * Fixes: CVE-2020-10802, PMASA-2020-3, Closes: #954665
  * Fixes: CVE-2020-10803, PMASA-2020-4, Closes: #954666
  * Fixes: CVE-2020-10804, PMASA-2020-2, Closes: #954667
  * Force to have phpMyAdmin sql-parser >= 4.5.0
  * Force to have php-twig >= 2.9 (Closes: #954766)

 -- William Desportes <williamdes@wdes.fr>  Wed, 25 Mar 2020 18:07:16 -0300

phpmyadmin (4:4.9.4+dfsg1-1) unstable; urgency=medium

  [ William Desportes ]
  * New upstream version 4.9.4 (PMASA-2020-1, CVE-2020-5504, Closes: #948718)
  * Exclude a test on Debian CI for 32bit systems (#854821)
  * Upgrade Debian standards from 4.3.0 to 4.4.1

  [ Felipe Sateler ]
  * Don't run tests if DEB_BUILD_OPTIONS contains nocheck
  * copyright: fix wildcards for node_modules.
    Files do not match directories. An explicit /* must be added at the end
  * Add lintian overrides for
    package-contains-documentation-outside-usr-share-doc. Those READMEs document
    the respective directories
  * Bump debhelper compat level to 12.
    Move --fail-missing option to dh_missing
  * Add Rules-Requires-Root: no.
    We don't need (fake)root to build the package
  * Bump dependency on motranslator. API is the same, but support for older php
    versions was dropped, so a major semver break was needed. In debian we
    already have the newer php versions so we can just bump the dependency.
  * Trim trailing whitespace.
  * Wrap long lines in changelog entries: 4:4.9.4+dfsg1-1, 4:4.9.2+dfsg1-
    1, 4:4.9.0.1+dfsg1-1, 4:4.6.5.1-1, 4:3.3.9-1ubuntu1.
  * Fix misspelling of Close => Closes.
  * Set field Upstream-Name in debian/copyright.
  * Set upstream metadata fields: Bug-Database, Bug-Submit, Repository,
    Repository-Browse.

  [ Hridoy Bapery ]
  * Added translation using Weblate (Bengali (Bangladesh))
  * Added translation using Weblate (Bengali)
  * Translated using Weblate (Bengali)
    Currently translated at 100.0% (2 of 2 strings)

 -- Felipe Sateler <fsateler@debian.org>  Mon, 16 Mar 2020 13:25:37 -0300

phpmyadmin (4:4.9.2+dfsg1-1) unstable; urgency=medium

  [ William Desportes ]
  * New upstream version 4.9.2. (Closes: #944711)
  * Fixes a security vulnerability in the Designer feature. (PMASA-2019-5,
    CVE-2019-18622, Closes: #945349)
  * Add debian gitlab pipelines config.

  [ Matthias Blümel ]
  * remove creation of the vendor dir in rules.
  * remove unnecessary removal of openlayers.
  * fix autopkg-tests
  * simplify patch for phpunit 8 by adding ": void" on demand
  * remove test/selenium to get autopkg working
  * Do not fail removal if there are other avahi services or desktop files rmdir
    fails if it can't remove the directory because there are other files left.
    Since we only care about removing the directory to clean up if we are the
    last user, we can pass --ignore-fail-on-non-empty. (Closes: #944514)

 -- Felipe Sateler <fsateler@debian.org>  Mon, 25 Nov 2019 07:55:27 -0300

phpmyadmin (4:4.9.1+dfsg1-2) unstable; urgency=medium

  * Adjust open_basedir setting for ubuntu eoan

 -- Matthias Blümel <debian@blaimi.de>  Fri, 01 Nov 2019 19:33:40 +0100

phpmyadmin (4:4.9.1+dfsg1-1) unstable; urgency=medium

  * New upstream version 4.9.1.
  * Remove webbased setup (Closes: #772741)
  * Check for weak blowfish key and regenerate if necessary during update
  * fix avahi service-installation (Closes: #914673, LP: #1293558)
  * fix bug in sql-script for non-default tablename (Closes: #884827)

 -- Matthias Blümel <debian@blaimi.de>  Tue, 24 Sep 2019 21:43:48 +0200

phpmyadmin (4:4.9.0.1+dfsg1-1) unstable; urgency=medium

  [ Matthias Blümel ]
  * New upstream version 4.9.0.1.
  * Update Package for new composer-oriented structure in upstream
  * Update Translations
    - Catalan
    - Ukrainian
    - Chinese (Traditional)
  * New Translations
    - Romanian
    - Indonesian
  * New upstream release, fixing several security issues:
    - Warings when running under php 7.2
      (Closes: #890595)
    - FTBFS with phpunit 6.4.4-2
      (Closes: #883417, Closes: #917755)
    - Bypass $cfg['Servers'][$i]['AllowNoPassword']
      (PMASA-2017-8, CVE-2017-18264)
    - XSRF/CSRF vulnerability in phpMyAdmin
      (PMASA-2017-9, CVE-2017-1000499)
    - Self XSS in central columns feature
      (PMASA-2018-1, CVE-2018-7260, Closes: #893539)
    - CSRF vulnerability allowing arbitrary SQL execution
      (PMASA-2018-2, CVE-2018-10188, Closes: #896490)
    - XSS in Designer feature
      (PMASA-2018-3, CVE-2018-12581)
    - Bug that can be used for XSS when importing files
    - Local file inclusion
      (PMASA-2018-6, CVE-2018-19968)
    - XSRF/CSRF vulnerabilities allowing a to perform harmful operations
      (PMASA-2018-7, CVE-2018-19969)
    - an XSS vulnerability in the navigation tree
      (PMASA-2018-8, CVE-2018-19970)
    - Arbitrary file read vulnerability
      (PMASA-2019-1, CVE-2019-6799, Closes: #920823)
    - SQL injection in the Designer interface
      (PMASA-2019-2, CVE-2019-6798, Closes: #920822)
    - SQL injection in Designer feature
      (PMASA-2019-3, CVE-2019-11768, Closes: #930048))
    - CSRF vulnerability in login form
      (PMASA-2019-4, CVE-2019-12616, Closes: #930017)
  * patch to allow twig in version 2
  * adjust autoload path with libapache2-mod-php, load Twig-Extensions and tcpdf
  * adjust apache-config with open_basedir for dependencies
  * Set TempDir to /var/lib/phpmyadmin/tmp for twig-cache
  * add config-table upgrade for version 4.7.0+
  * enable unittests and patch to use phpunit 7, fix build-deps
  * update to standards-version 4.3.0
  * add Debian CI testfile
  * depend on python3-sphinx instead of python-sphinx which is python2
    (Closes: #943209)
  * don't chown tmp-dir recursive and remove useless entries in 'dirs'
  * add sensible-utils to dependencies for .desktop-file
  * simplify apache-config
    * mbstring.func_overload = 0 is default and not set
      (/etc/php/7.3/apache2/php.ini)
    * SetHandler is now in the configuration of libapache2-mod-php
      (/etc/apache2/mods-available/php7.3.conf)
    * AddType seems not to be necessary anymore, it's in the mime-database
      (/etc/mime.types)
  * use autoload.php instead of vendor/autoload.php
  * use libjs-openlayers instead of bundled ones.
  * include copyright information from included vendor-source
  * cleanup lintian overrides

  [ Felipe Sateler ]
  * Exclude vendor dir from upstream tarball imports
  * Add new build-dependencies
  * Add autoload generation
  * Fix Config file location
  * Add phpcomposer substvars to control file
  * Fix js paths in debian/rules
  * Set phpMyAdmin team as Maintainer

  [ Juri Grabowski ]
  * define composer as Build-Depends, Fix Vcs- URLs
  * apache2.2-common -> apache2-data

 -- Felipe Sateler <fsateler@debian.org>  Sun, 16 Jun 2019 12:02:15 -0400

phpmyadmin (4:4.6.6-5) unstable; urgency=medium

  * Add alternate dependency to php-mysqli. This seems to help in case people
    are using the package with other than default PHP.
  * Debconf translations update (Ukrainian, Portuguese, Kabyle and French).
  * Fix open_basedir setting for PHP 7 (Closes: #867882).

 -- Michal Čihař <nijel@debian.org>  Mon, 10 Jul 2017 12:43:06 +0200

phpmyadmin (4:4.6.6-4) unstable; urgency=medium

  * Build depend on locales-all to ensure en_US.UTF-8 is available (see
    #859219).

 -- Michal Čihař <nijel@debian.org>  Fri, 07 Apr 2017 16:54:26 +0200

phpmyadmin (4:4.6.6-3) unstable; urgency=medium

  * Set locales for tests to avoid problems with transliteration in glibc for
    C.UTF-8 (Closes: #859219).

 -- Michal Čihař <nijel@debian.org>  Tue, 04 Apr 2017 15:19:53 +0200

# For older changelog entries, run 'apt-get changelog phpmyadmin'
