--- rpms/smeserver-phpwebftp/contribs8/smeserver-phpwebftp-4.0.spec	2013/11/24 23:00:51	1.5
+++ rpms/smeserver-phpwebftp/contribs8/smeserver-phpwebftp-4.0.spec	2016/08/03 08:12:48	1.6
@@ -1,10 +1,10 @@
-# $Id: smeserver-phpwebftp-4.0.spec,v 1.4 2013/11/24 10:05:32 unnilennium Exp $
+# $Id: smeserver-phpwebftp-4.0.spec,v 1.5 2013/11/24 23:00:51 unnilennium Exp $
 # Authority: gnujpl
 # Name: Jean-Paul Leclère
 
 %define name smeserver-phpwebftp
 %define version 4.0
-%define release 8
+%define release 10
 
 Summary: Web FTP access via HTTPS for SME.
 Name: %{name}
@@ -15,6 +15,8 @@ Group: Applications/WebFTP
 Source: %{name}-%{version}.tar.gz
 Patch0:smeserver-phpwebftp-4.0-patchftpmode.patch
 Patch1: smeserver-phpwebftp-4.0-patch1.patch
+Patch2: smeserver-phpwebftp-4.0.bz7175.pointusername.patch
+Patch3: smeserver-phpwebftp-4.0.bz9528.XSSvulnerability.patch
 BuildRoot: /var/tmp/%{name}-%{version}-%{release}-buildroot
 BuildArchitectures: noarch
 Requires: e-smith-apache
@@ -26,6 +28,15 @@ AutoReqProv: no
 smeserver-phpwebftp adds an ftp panel available to users via SSL web access.
 
 %changelog
+* Wed Aug 03 2016 Jean-Philipe Pialasse <tests@pialasse.com> 4.0-10.sme
+- fix  XSS security issue in phpwebftp [SME: 9528]
+- https://sourceforge.net/p/phpwebftp/bugs/17/
+- add utf8 in meta to fix bad display in French
+
+* Wed Aug 03 2016 Jean-Philipe Pialasse <tests@pialasse.com> 4.0-9.sme
+- fix does not support files owned by user or group with point [SME: 7175]
+- SF:https://sourceforge.net/p/phpwebftp/bugs/15/
+
 * Sun Nov 24 2013 JP Pialasse <tests@pialasse.com> 4.0-8.sme 
 - new patch for [SME: 7973]
 - tmp folder set to 0770 to fix the download error
@@ -76,7 +87,8 @@ smeserver-phpwebftp adds an ftp panel av
 
 %patch0 -p1
 %patch1 -p1
-
+%patch2 -p1
+%patch3 -p1
 
 
 %pre