Control: severity -1 important

On Thu, Nov 14, 2019 at 5:36 AM Jörg Frings-Fürst <debian@jff.email> wrote:

> Package: phpmyadmin
> Version: 4:4.9.1+dfsg1-2
> Severity: grave
> Tags: upstream
>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA512
>
> Hello,
>
>
> I get on login
>
> [quote]
> Failed to set session cookie. Maybe you are using HTTP instead of HTTPS to
> access phpMyAdmin.
> [/quote]
>
> Upstream has fix this issue:
>
>
> https://github.com/phpmyadmin/phpmyadmin/pull/15273/files/45d46a6316c7a79d8c110ccbd18035c4d0c633fb
>
>
I don't think this issue qualifies as release-critical. You really should
not be using phpmyadmin over http, and nstead have your http server
redirect to https. I'm thus downgrading.

William, is the entire PR required, or just a section of it?

-- 

Saludos,
Felipe Sateler

Reply via email to