From 980ccb6ffbb13470b2b9c242a2d8a90efb8ed3c5 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Michal=20=C4=8Ciha=C5=99?= Date: Thu, 28 Jan 2016 10:09:27 +0100 Subject: [PATCH] Use changelog from release notes MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: Michal Čihař --- ChangeLog | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/ChangeLog b/ChangeLog index 6d449e68f0..a151fd5109 100644 --- a/ChangeLog +++ b/ChangeLog @@ -2,7 +2,11 @@ phpMyAdmin - ChangeLog ====================== 4.0.10.13 (2016-01-28) -- issue [Security] PMASA-2016-5, PMASA-2016-4, PMASA-2016-3, PMASA-2016-2, PMASA-2016-1 +- issue [Security] Multiple full path disclosure vulnerabilities, see PMASA-2016-1 +- issue [Security] Unsafe generation of CSRF token, see PMASA-2016-2 +- issue [Security] Multiple XSS vulnerabilities, see PMASA-2016-3 +- issue [Security] Insecure password generation in JavaScript, see PMASA-2016-4 +- issue [Security] Unsafe comparison of CSRF token, see PMASA-2016-5 4.0.10.12 (2015-12-25) - issue [Security] Path disclosure, see PMASA-2015-6