Change log for phpliteadmin package in Ubuntu

phpliteadmin (1.9.7.1-1ubuntu0.3) bionic-security; urgency=medium

  * SECURITY UPDATE: cross-site scripting (LP: #1964710)
    - debian/patches/Fix-post-num-XSS.patch:
      Forcibly cast input value to integer. Original fix.
    - CVE-2021-46709
  * Update PHP version to 7.2 in a directive comment for a2enconf(8).

 -- Nicholas Guriev <email address hidden>  Sun, 22 May 2022 22:24:22 +0300

Available diffs

• diff from 1.9.7.1-1ubuntu0.1 to 1.9.7.1-1ubuntu0.3 (1023 bytes)
• diff from 1.9.7.1-1ubuntu0.2 to 1.9.7.1-1ubuntu0.3 (578 bytes)

phpliteadmin (1.9.8.2-1ubuntu0.20.04.1) focal-security; urgency=medium

  * SECURITY UPDATE: cross-site scripting (LP: #1964710)
    - debian/patches/Fix-newRows-XSS.patch:
      Forcibly cast input value to integer. Original fix.
    - CVE-2021-46709

 -- Nicholas Guriev <email address hidden>  Sun, 13 Mar 2022 16:25:03 +0300

Available diffs

• diff from 1.9.8.2-1 (in Debian) to 1.9.8.2-1ubuntu0.20.04.1 (1.1 KiB)

phpliteadmin (1.9.8.2-2) unstable; urgency=medium

  * Update link in the debian/control file to moved Salsa repository.
  * Switch to Application type of .desktop entry. (Closes: #960693)
  * New Substr-may-be-empty.patch to fix build with PHP 8. (Closes: #1005441)
  * Fix runtime errors under PHP 8.
     - New patches:
        + Nonexistent-get_magic_quotes_gpc.patch
        + Classes-before-index.patch
        + Deprecated-each-function.patch
        + PDO-errmode-silent.patch
     - Remove number 7 from Apache config.
  * New Negative-parseSize.patch
  * New Fix-newRows-XSS.patch.
  * Add upstream metadata.
  * Include icon.
  * Switch to Debhelper compatibility level 13.
  * Bump Standards Version to 4.6.0, no mandatory changes.

 -- Nicholas Guriev <email address hidden>  Sat, 12 Mar 2022 21:02:51 +0300

Available diffs

• diff from 1.9.8.2-1 to 1.9.8.2-2 (9.0 KiB)

phpliteadmin (1.9.8.2-1) unstable; urgency=medium

  * New upstream release.
    - New dependency, PHP module mbstring.
  * Drop Fix-authentication-bypass.patch since hash_equals() is now used
    to compare passwords.
  * Bump Standards-Version to 4.4.0.
    - Specify 'Rules-Requires-Root: binary-targets' in d/control.
  * Bump debhelper compatibility level to 12, no related changes.

 -- Nicholas Guriev <email address hidden>  Wed, 18 Sep 2019 18:20:28 +0300

Available diffs

• diff from 1.9.7.1-2 to 1.9.8.2-1 (113.2 KiB)

phpliteadmin (1.9.7.1-2) unstable; urgency=medium

  * Fix CVE-2018-10362 by Fix-authentication-bypass.patch (closes: #896682)
  * Remove explicit dependence on php7.0 in Apache configuration file
  * Migrate package repository to salsa.debian.org
  * Bump debhelper and standards version, no changes for this

 -- Nicholas Guriev <email address hidden>  Thu, 17 May 2018 20:25:20 +0300

Available diffs

• diff from 1.9.7.1-1ubuntu0.1 (in ~ubuntu-security-proposed/ubuntu/ppa) to 1.9.7.1-2 (1.6 KiB)

phpliteadmin (1.9.7.1-1ubuntu0.1) bionic-security; urgency=medium

  * SECURITY UPDATE: authentication bypass (LP: #1767723)
    - debian/patches/Fix-authentication-bypass.patch:
      replace == with === in password comparation in
      classes/Authorization.php. Based on upstream commit
    - CVE-2018-10362

 -- Nicholas Guriev <email address hidden>  Sat, 28 Apr 2018 00:14:25 +0300

Available diffs

• diff from 1.9.7.1-1 (in Debian) to 1.9.7.1-1ubuntu0.1 (1.5 KiB)

phpliteadmin (1.9.7.1-1) unstable; urgency=low

  * Initial upload (closes: #873593)

 -- Nicholas Guriev <email address hidden>  Sun, 17 Sep 2017 20:10:23 +0300