Bug#960396: web security flaws in src:adminer/4.7.1-1 in stable?

[Alexandre Rossi <niol@zincube.net>]

Hi,

Here is an updated debdiff per the security team advice adding also
changes from the original request.

Adding fixes for:

Fix open redirect if Adminer is accessible at //adminer.php%2F@
https://github.com/vrana/adminer/commit/6a2de873e194cf4bf3f2edb489ba98580a17a632

Fix XSS if Adminer is accessible at URL /data
https://github.com/vrana/adminer/commit/789ebc07bdac01ab8b99ad831eba872849eaa7fe

CVE-2020-35572

CVE-2021-21311

Thanks,

Alex

Attachment: adminer_4.7.1-1+deb10u1.debian.tar.xz
Description: application/xz