diff --git a/ChangeLog b/ChangeLog index a8a789820..73f036871 100644 --- a/ChangeLog +++ b/ChangeLog @@ -6,9 +6,9 @@ $Id$ $HeadURL: https://phpmyadmin.svn.sourceforge.net/svnroot/phpmyadmin/trunk/phpMyAdmin/ChangeLog $ 3.3.10.2 (not yet released) -- [security] Fixed possible session corruption in swekey authentication -- [security] Fixed possible code injection incase session variables are compromised -- [security] Fixed regexp quoting issue in Synchronize code. +- [security] Fixed possible session manipulation in swekey authentication, see PMASA-2011-5 +- [security] Fixed possible code injection incase session variables are compromised, see PMASA-2011-6 +- [security] Fixed regexp quoting issue in Synchronize code, see PMASA-2011-7 3.3.10.1 (2011-05-20) - [security] XSS on Tracking page