Re: stable update: phppgadmin 4.2.3-1.1squeeze1 possible XSS vulerability

["Adam D. Barratt" <adam@adam-barratt.org.uk>]

Hi,

On Wed, 2012-04-04 at 20:36 +0200, Christoph Berg wrote:
> would you consider this for a stable update?
[...]
> > phppgadmin 5.0.4 includes a fix for a possible XSS vulerability that
> > also affects 4.2.3-1.1squeeze1. There is no bug nor a CVE number, and
> > it is even unclear (to me) if this is exploitable. The patch doesn't
> > break the package, so I thought it might be a good idea to ask you if
> > you want this for a security advisory.
> > 
> > The unstable package 5.0.4-1 is of course already fixed.
> > 
> > Upstream fix:
> > https://github.com/ioguix/phppgadmin/commit/5f8a1f6307f095fb69050cef01109373b88b558e

I'd like to see a full debdiff for final confirmation but based on the
commit link above it looks suitable; thanks for working on fixing this
issue in stable.

Regards,

Adam