Your message dated Mon, 04 May 2009 18:47:03 +0000
with message-id <[email protected]>
and subject line Bug#526378: fixed in drupal6 6.11-1
has caused the Debian Bug report #526378,
regarding drupal6: Security vulnerabilitie SA-CORE-2009-005
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
526378: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=526378
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: drupal6
Version: 6.6-3
Severity: normal
Drupal 6 has a cross site scripting bug (XSS). See
http://drupal.org/node/449078 for more information. A patch is also available.
-- System Information:
Debian Release: 5.0.1
APT prefers stable
APT policy: (500, 'stable')
Architecture: i386 (i686)
Kernel: Linux 2.6.9-023stab046.2-enterprise (SMP w/2 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8) (ignored: LC_ALL
set to de_DE.utf8)
Shell: /bin/sh linked to /bin/bash
Versions of packages drupal6 depends on:
ii apache2-mpm-worker 2.2.9-10+lenny2 Apache HTTP Server - high speed th
ii curl 7.18.2-8lenny2 Get a file from an HTTP, HTTPS or
ii dbconfig-common 1.8.39 common framework for packaging dat
ii debconf [debconf-2 1.5.24 Debian configuration management sy
ii libjs-jquery 1.2.6-2 JavaScript library for dynamic web
ii mysql-client 5.0.51a-24+lenny1 MySQL database client (metapackage
ii mysql-client-5.0 [ 5.0.51a-24+lenny1 MySQL database client binaries
ii php5 5.2.6.dfsg.1-1+lenny2 server-side, HTML-embedded scripti
ii php5-gd 5.2.6.dfsg.1-1+lenny2 GD module for php5
ii php5-mysql 5.2.6.dfsg.1-1+lenny2 MySQL module for php5
ii postfix [mail-tran 2.5.5-1.1 High-performance mail transport ag
ii wwwconfig-common 0.1.2 Debian web auto configuration
Versions of packages drupal6 recommends:
ii mysql-server 5.0.51a-24+lenny1 MySQL database server (metapackage
ii mysql-server-5.0 [mysq 5.0.51a-24+lenny1 MySQL database server binaries
drupal6 suggests no packages.
-- debconf information excluded
--- End Message ---
--- Begin Message ---
Source: drupal6
Source-Version: 6.11-1
We believe that the bug you reported is fixed in the latest version of
drupal6, which is due to be installed in the Debian FTP archive:
drupal6_6.11-1.diff.gz
to pool/main/d/drupal6/drupal6_6.11-1.diff.gz
drupal6_6.11-1.dsc
to pool/main/d/drupal6/drupal6_6.11-1.dsc
drupal6_6.11-1_all.deb
to pool/main/d/drupal6/drupal6_6.11-1_all.deb
drupal6_6.11.orig.tar.gz
to pool/main/d/drupal6/drupal6_6.11.orig.tar.gz
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Luigi Gangitano <[email protected]> (supplier of updated drupal6 package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Mon, 04 May 2009 19:56:12 +0200
Source: drupal6
Binary: drupal6
Architecture: source all
Version: 6.11-1
Distribution: unstable
Urgency: low
Maintainer: Luigi Gangitano <[email protected]>
Changed-By: Luigi Gangitano <[email protected]>
Description:
drupal6 - a fully-featured content management framework
Closes: 526378
Changes:
drupal6 (6.11-1) unstable; urgency=low
.
[ Luigi Gangitano ]
* New upstream release
- Fixes XSS vulnerability (Ref: SA-CORE-2009-005, CVE-TBD)
(Closes: #526378)
Checksums-Sha1:
7b761e4bf316a51b392c2123c9e55cca3a8222d9 1112 drupal6_6.11-1.dsc
083fdf4f7248603677b3c294f7ddb060a07d4fa8 1078966 drupal6_6.11.orig.tar.gz
6053ade00f0cb695f86d4c1c017fa5719483d25e 16199 drupal6_6.11-1.diff.gz
474d379d4cc6415b16f9f5ee032c17d7e217add2 1092782 drupal6_6.11-1_all.deb
Checksums-Sha256:
b928106c161d8594137aac7eb528933e33b18a75806a69476f66ac71ecbd59e4 1112
drupal6_6.11-1.dsc
89d360d667a527235ceb10962cfffd0448194636b7d2b73cf22ff8b13a7d2f1b 1078966
drupal6_6.11.orig.tar.gz
255836512ade38ca6c55b566abc9f57524f59b2725471f03a92e3a7cd8c6775a 16199
drupal6_6.11-1.diff.gz
9b3b64cefaa8979ec9cec8177e55ab7b9fdc2830e712b442d7bc3c04834de00c 1092782
drupal6_6.11-1_all.deb
Files:
80f4ada42eff0b7cdd68ef4b78f10127 1112 web extra drupal6_6.11-1.dsc
6a341807b83c4e48f50ce7921562402c 1078966 web extra drupal6_6.11.orig.tar.gz
b8d0ab3e390322cd44b956560bde1581 16199 web extra drupal6_6.11-1.diff.gz
40bcb8e1e3b5590b7d95cfa296aff6fb 1092782 web extra drupal6_6.11-1_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (Darwin)
iEYEARECAAYFAkn/NOgACgkQ8ZumGJJMDCbVrACfVj7wAyE0LKCHS1wnGeopn6YZ
H+8AmwR1ccrV8xly+AyLy1y+mXd+KK3S
=8rEY
-----END PGP SIGNATURE-----
--- End Message ---
