Change log for phpbb3 package in Debian

phpbb3 (3.0.10-4+deb7u3) wheezy; urgency=medium

  * Fix possible redirection on Chrome: an insufficient check allowed users of
    the Google Chrome browser to be redirected to external domains (e.g. on
    login) [CVE-2015-3880]

 -- David Prévot <email address hidden>  Tue, 12 May 2015 16:02:09 -0400

phpbb3 (3.0.12-5+deb8u1) jessie; urgency=medium

  * Fix possible redirection on Chrome: an insufficient check allowed users of
    the Google Chrome browser to be redirected to external domains (e.g. on
    login) [CVE-2015-3880]

 -- David Prévot <email address hidden>  Tue, 12 May 2015 15:52:23 -0400

phpbb3 (3.0.14-1) unstable; urgency=medium

  * New upstream release: Fix possible redirection on Chrome
  * Translations:
    - Add back Croatian (Casual Honorifics)
    - Add Norwegian (bokmål)
    - Remove Serbian (Cyrillic Script): path conflict with Latin Script
    - Update American English
    - Update Arabic
    - Update Bulgarian
    - Update Catalan
    - Update Danish
    - Update French
    - Update German (Casual Honorifics and Formal Honorifics)
    - Update Portuguese
    - Update Spanish (Casual Honorifics and Formal Honorifics)
    - Update Turkish
  * Update copyright
  * Upload to unstable since Jessie has been released
  * Don’t ship the schemas twice

 -- David Prévot <email address hidden>  Sat, 09 May 2015 19:05:56 -0400

Available diffs

• diff from 3.0.12-5 to 3.0.14-1 (2.7 MiB)

phpbb3 (3.0.12-5) unstable; urgency=medium


  * Fix authentication setup: another PHP 5.6 compatibility issue, the
    internal ldap_escape() function was recently added into PHP 5.6 as
    provided by php5-ldap, and thus need to be renamed.
    (Closes: #778553)
  * Fix avatar upload permissions
  * Fix image display in Apache (Closes: #778457)

 -- David Prévot <email address hidden>  Mon, 16 Feb 2015 13:51:53 -0400

Available diffs

• diff from 3.0.12-4 to 3.0.12-5 (1.6 KiB)

phpbb3 (3.0.12-4) unstable; urgency=medium


  * Fix CSRF vulnerability [CVE-2015-1432] and CSS injection [CVE-2015-1431]
    (Closes: #776699)
  * Improve PHP 5.6 compatibility: allow mbstring.http_{in,out}put to be set
    as '' as well as 'pass' on install; do not display warning in ACP if so.

 -- David Prévot <email address hidden>  Mon, 02 Feb 2015 20:35:46 -0400

Available diffs

• diff from 3.0.12-3 to 3.0.12-4 (3.0 KiB)

phpbb3 (3.0.13-PL1-1) experimental; urgency=medium


  * New upstream release:
    - fix CSRF vulnerability [CVE-2015-1432]
    - fix CSS injection [CVE-2015-1431]
    (Closes: #776699)
  * Add SHA256 support to get-orig-source
  * Update translations:
    - Update Dutch (Formal Honorifics)
    - Update Dutch (Casual Honorifics)
    - Update Estonian
    - Update Mandarin Chinese (Traditional Script)
    - Update Romanian
    - Update Russian
    - Remove Croatian
  * Track 3.0 releases
  * Refresh patches
  * Update copyright
  * Upload to experimental to respect the freeze

 -- David Prévot <email address hidden>  Sun, 01 Feb 2015 21:19:06 -0400

phpbb3 (3.0.12-3) unstable; urgency=medium


  * Adapt update_languages script to new scheme
  * Update URL for upstream language files
  * Bump standards version to 3.9.6
  * Update copyright

 -- David Prévot <email address hidden>  Sat, 25 Oct 2014 20:58:23 -0400

Available diffs

• diff from 3.0.12-2 to 3.0.12-3 (4.9 KiB)

phpbb3 (3.0.12-2) unstable; urgency=medium


  * Update translations:
    - Update Belarusian
    - Update Finnish
    - Add Gaelic
    - Add Tatar
  * Update packaging team (Closes: #740936)
    Thanks Jeroen and Jean-Marc for your previous work.

 -- David Prévot <email address hidden>  Fri, 11 Apr 2014 17:57:11 -0400

Available diffs

• diff from 3.0.12-1 to 3.0.12-2 (937.4 KiB)

phpbb3 (3.0.12-1) unstable; urgency=low


  * New upstream release
  * Refresh patches
  * Update copyright
  * Clean up pre-Squeeze upgrade path
  * Use XZ compression for language packs
  * Bump standards version to 3.9.5
  * Allow alternatives to MySQL (closes: #732900)

 -- David Prévot <email address hidden>  Thu, 02 Jan 2014 22:04:21 -0400

Available diffs

• diff from 3.0.11-5 to 3.0.12-1 (4.7 MiB)

phpbb3 (3.0.7-PL1-4+squeeze1) squeeze-security; urgency=high


  * Fix chown in cache (closes: #711172)
  * Fix world-writable directories

 -- David Prévot <email address hidden>  Thu, 13 Jun 2013 16:23:37 -0400

phpbb3 (3.0.10-4+deb7u1) wheezy-security; urgency=high


  * Fix chown in cache (closes: #711172)
  * Fix world-writable directories

 -- David Prévot <email address hidden>  Thu, 13 Jun 2013 16:13:48 -0400

phpbb3 (3.0.11-5) unstable; urgency=low


  * Make fix_chown.patch a bit more robust
  * Clean up pre-Squeeze handling
  * Handle Apache 2.4 (and 2.2 too, closes: #669959)
  * Clean up copyright

 -- David Prévot <email address hidden>  Sun, 21 Jul 2013 18:06:20 -0400

Available diffs

• diff from 3.0.11-4 to 3.0.11-5 (5.3 KiB)

phpbb3 (3.0.11-4) unstable; urgency=high


  * Fix chown in cache (closes: #711172)
  * Fix world-writable directories

 -- David Prévot <email address hidden>  Thu, 13 Jun 2013 15:35:45 -0400

Available diffs

• diff from 3.0.10-4 to 3.0.11-4 (4.4 MiB)

phpbb3 (3.0.11-3) experimental; urgency=low


  * Update Belarusian, Bulgarian, Czech, Mexican Spanish, Spanish (Casual
    Honorifics and Formal Honorifics) and Slovenian translations.
  * Update copyright to new path for these translations.

 -- David Prévot <email address hidden>  Wed, 03 Apr 2013 23:03:56 -0400

phpbb3 (3.0.10-4) unstable; urgency=low


  * Disable E_STRICT when running on PHP 5.4 (closes: #703720).

 -- David Prévot <email address hidden>  Fri, 22 Mar 2013 18:40:07 -0400

Available diffs

• diff from 3.0.10-3 to 3.0.10-4 (1.2 KiB)

phpbb3 (3.0.11-2) experimental; urgency=low


  * Allow language pack update, without updating the main tarball.
  * Update Czech, Croatian, Swedish and Vietnamese translations.
  * Update copyright to new path for these translations.

 -- David Prévot <email address hidden>  Mon, 26 Nov 2012 16:57:03 -0400

phpbb3 (3.0.11-1) experimental; urgency=low


  * New upstream release.
  * New Brazilian Portuguese debconf translation by J.S.Júnior
   (closes: #663496).
  * Move webserver examples to /usr/share/phpbb3/webserver-examples since they
    are referenced at install time (Policy 10.7.3).
  * Update copyright, making it conform to machine-readable version 1.0.
  * Update to policy 3.9.4: no change needed.
  * Update patches.
  * debian/dbapps-lib: Correct handling of dbc_dbserver when configuring mysql
    connection parameters, thanks to Liam Young for the patch (the #613060 fix
    was not correct, LP: #997782, closes: #678544).
  * Remove AUTHORS and VERSION files from the l10n binary package.

 -- David Prévot <email address hidden>  Fri, 05 Oct 2012 18:36:43 -0400

phpbb3 (3.0.10-3) unstable; urgency=low


  * New Brazilian Portuguese debconf translation by J.S.Júnior
   (closes: #663496).
  * debian/dbapps-lib: Correct handling of dbc_dbserver when configuring mysql
    connection parameters, thanks to Liam Young for the patch (the #613060 fix
    was not correct, LP: #997782, closes: #678544).

 -- David Prévot <email address hidden>  Sat, 06 Oct 2012 11:40:37 -0400

Available diffs

• diff from 3.0.10-2ubuntu1 (in Ubuntu) to 3.0.10-3 (2.0 KiB)

phpbb3 (3.0.10-2) unstable; urgency=low


  * Update Czech translation (closes: #658650).

 -- David Prévot <email address hidden>  Sat, 04 Feb 2012 19:16:24 -0400

Available diffs

• diff from 3.0.9-1 (in Ubuntu) to 3.0.10-2 (2.0 MiB)

phpbb3 (3.0.10-1) unstable; urgency=low


  * New upstream release.
  * Update patches and schemes.
  * Explicitly define version number for database upgrade.

 -- David Prévot <email address hidden>  Mon, 16 Jan 2012 19:33:28 -0400

phpbb3 (3.0.9-1) unstable; urgency=low


  * New upstream release.
  * Remove Shield Ranks plugin (licensing issue). 
  * Update language pack path (upstream packages modified).
  * Update patches: use cache/$url_forum/ in acm_memory.php too.
  * Don't hardcode version number for database upgrade.
  * Handle permissions of nested directories (closes: #607380).
  * Explicitly define PHPBB_ROOT_PATH in install-XXX (closes: #644276).

 -- David Prévot <email address hidden>  Sun, 20 Nov 2011 12:31:59 -0400

phpbb3 (3.0.7-PL1-5) unstable; urgency=low
  [ David Prévot ]  * Fix broken cache, thanks to Nicolas Schodet (actually closes: #599480).  * Fix cross site scripting vulnerability (closes: #612477) [CVE-2011-0544].  * Enforce run_sql with "-h localhost" when $dbc_dbserver is empty    (closes: #613060).  * Don't use local lib on preinst (closes: #595536).  * Update to policy 3.9.2: no change needed.  * Update my email address.  [ Jean-Marc Roth ]  * Fix postgres failure when postgres server is remote (closes: #612441).   * Don't be too rude on trying to uninstall when unsupported webserver is     used (closes: #597373).  -- David Prévot <email address hidden>  Mon, 23 May 2011 15:59:05 -0400

phpbb3 (3.0.7-PL1-4) unstable; urgency=high


  [ Jean-Marc Roth ]
  * Be nicer on run_sql() failure (e.g. noninteractive case) -- inspired from
    dbconfig (closes: #595594).

  [ David Prévot ]
  * Vietnamese debconf translation updated, Clytie Siddall (closes: #598579).
  * Document $url_forum feature in README.multiboard (closes: #599480).

 -- David Prévot <email address hidden>  Sat, 16 Oct 2010 12:30:20 -0400

phpbb3 (3.0.7-PL1-3) unstable; urgency=high


  [ David Prévot ]
  * Use explicitly port 80 in examples, thanks to Greg Lyle (closes: #586012).
  * Update to policy 3.9.1: no change needed.
  * Japanese debconf translation updated, Hideki Yamane (closes: #591079).

  [ Jean-Marc Roth ]
  * Be nicer on dbconfig-common failure -- inspired from s9y (closes: #586759).

 -- David Prévot <email address hidden>  Sat, 31 Jul 2010 19:07:44 -0400

phpbb3 (3.0.7-PL1-2) unstable; urgency=low


  [ Jean-Marc Roth ]
  * Maintainer script does not correctly handle remote DB (closes: #583197).  
  * Update path to VCS-browser, websvn needs a trailing slash.

  [ David Prévot ]
  * templates reviewed with the Smith Review Project.
  * Portuguese debconf translation updated thanks to Américo Monteiro
    (closes: #583458).
  * French debconf translation updated.
  * Czech debconf translation updated thanks to Miroslav Kure
    (closes: #583771).
  * Danish debconf translation added thanks to Joe Hansen (closes: #583829).
  * Swedish debconf translation updated thanks to Martin Ågren
    (closes: #584753).
  * Italian debconf translation updated thanks to Luca Monducci
    (closes: #584771).
  * Russian debconf translation updated thanks to Yuri Kozlov
    (closes: #584800).
  * German debconf translation updated thanks to Matthias Julius
    (closes: #584847).
  * Spanish debconf translation updated thanks to Francisco Javier Cuadrado
    (closes: #584863).

  [ Thijs Kinkhorst ]
  * Remove obsolete uuencoded logos.
  * Dutch debconf translation updated.

 -- Jean-Marc Roth <email address hidden>  Wed, 26 May 2010 12:55:24 +0200

phpbb3 (3.0.7-PL1-1) unstable; urgency=low


  [ Jean-Marc Roth ]
  * New upstream release (closes: #571787, #524361).
    [CVE-2010-1630, CVE-2010-1627]
  * Update to source package format 3.0(quilt). (made patches DEP-3 compliant)
  * Reinforced security: enable gd captcha, php5-gd becomes dependency,
    set random captcha settings during config, require user account activation
    (closes: #570011).
  * Board becomes multi-site capable (closes: #437836).
  * README.multiboard updated (closes: #529707).
  * database upgrade uses patched database_update.php from upstream
    => added php5-cli to dependencies.
  * apache2 has become new default in debconf (phpbb3/http).
  * Styles documentation updated (closes: #569911).
  * Restart webserver (closes: #430458).
  * Sqlite support fixed (closes: #504419).
  * Next-gen permissions on /var/cache and /var/lib, especially for multisite
    (closes: #447542).
  * Using UCF for webserver config.
  * Support setting admin credentials via debconf (closes: #477440).
  * Provide install directory, actually req'd for multisite (closes: #440405).

  [ David Prévot ]
  * Upstream documentation included.
  * Language pack is back (closes: #502563).
  * copyright notice updated to DEP-5 (closes: #505319).
  * Support automatic configuration for lighttpd (closes: #574551).
  * control and templates reviewed by the Smith Review Project.
  * Portuguese debconf translation updated thanks to Américo Monteiro
    (closes: #575949).
  * Vietnamese debconf translation updated thanks to Clytie Siddall
    (closes: #575990).
  * German debconf translation updated thanks to Matthias Julius
    (closes: #576939).
  * Japanese debconf translation updated thanks to Hideki Yamane
    (closes: #577063).
  * French debconf translation updated.
  * Spanish debconf translation added thanks to Francisco Javier Cuadrado
    (closes: #579197).
  * Swedish debconf translation updated thanks to Martin Ågren
    (closes: #579280).

  [ Thijs Kinkhorst ]
  * Removed self from uploaders.

 -- Jean-Marc Roth <email address hidden>  Fri, 30 Apr 2010 12:41:23 +0200

phpbb3 (3.0.2-4) unstable; urgency=high


  * Two security fixes backported from 3.0.4:
    + deactivated accounts could be re-activated by a user
      (closes: #508872).
    + ask for forum password if post within passworded forum
      quoted in private message.

 -- Thijs Kinkhorst <email address hidden>  Fri, 06 Feb 2009 14:51:46 +0100

phpbb3 (3.0.2-3) unstable; urgency=high


  * More fixes for PostgreSQL database schema creation,
    thanks Ansgar Burchardt (Closes:  #497721).

 -- Thijs Kinkhorst <email address hidden>  Fri, 05 Sep 2008 21:06:21 +0200