[Secure-testing-team] Bug#726284: xhprof: XSS (no CVE yet)

[Moritz Muehlenhoff]

Package: xhprof
Severity: grave
Tags: security
Justification: user security hole

Hi,
fixed in 0.9.4: http://pecl.php.net/package-changelog.php?package=xhprof&release=0.9.4
http://www.openwall.com/lists/oss-security/2013/10/14/1

Cheers,
        Moritz