Debian 9693 Published by

A phppgadmin security update has been released for Debian GNU/Linux 10 LTS to address a potential remote code execution vulnerability.

[SECURITY] [DLA 3644-1] phppgadmin security update

- -------------------------------------------------------------------------
Debian LTS Advisory DLA-3644-1 Chris Lamb
November 03, 2023
- -------------------------------------------------------------------------

Package : phppgadmin
Version : 5.1+ds-4+deb10u1
CVE ID : CVE-2023-40619
Debian Bug : 1053004

It was discovered there was a potential remote code execution
vulnerability in phppgadmin, a web-based administration tool for the
PostgreSQL database server. This issue concerned the deserialisation
of untrusted data which may have led to remote code execution because
user-controlled data was being passed directly to the PHP
'unserialize()' function.

For Debian 10 buster, this problem has been fixed in version

We recommend that you upgrade your phppgadmin packages.

For the detailed security status of phppgadmin please refer to
its security tracker page at:

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: