Your message dated Thu, 11 Jun 2009 07:54:35 +0000
with message-id <[email protected]>
and subject line Bug#526378: fixed in drupal6 6.6-3lenny1
has caused the Debian Bug report #526378,
regarding drupal6: Security vulnerabilitie SA-CORE-2009-005
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
526378: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=526378
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: drupal6
Version: 6.6-3
Severity: normal
Drupal 6 has a cross site scripting bug (XSS). See
http://drupal.org/node/449078 for more information. A patch is also available.
-- System Information:
Debian Release: 5.0.1
APT prefers stable
APT policy: (500, 'stable')
Architecture: i386 (i686)
Kernel: Linux 2.6.9-023stab046.2-enterprise (SMP w/2 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8) (ignored: LC_ALL
set to de_DE.utf8)
Shell: /bin/sh linked to /bin/bash
Versions of packages drupal6 depends on:
ii apache2-mpm-worker 2.2.9-10+lenny2 Apache HTTP Server - high speed th
ii curl 7.18.2-8lenny2 Get a file from an HTTP, HTTPS or
ii dbconfig-common 1.8.39 common framework for packaging dat
ii debconf [debconf-2 1.5.24 Debian configuration management sy
ii libjs-jquery 1.2.6-2 JavaScript library for dynamic web
ii mysql-client 5.0.51a-24+lenny1 MySQL database client (metapackage
ii mysql-client-5.0 [ 5.0.51a-24+lenny1 MySQL database client binaries
ii php5 5.2.6.dfsg.1-1+lenny2 server-side, HTML-embedded scripti
ii php5-gd 5.2.6.dfsg.1-1+lenny2 GD module for php5
ii php5-mysql 5.2.6.dfsg.1-1+lenny2 MySQL module for php5
ii postfix [mail-tran 2.5.5-1.1 High-performance mail transport ag
ii wwwconfig-common 0.1.2 Debian web auto configuration
Versions of packages drupal6 recommends:
ii mysql-server 5.0.51a-24+lenny1 MySQL database server (metapackage
ii mysql-server-5.0 [mysq 5.0.51a-24+lenny1 MySQL database server binaries
drupal6 suggests no packages.
-- debconf information excluded
--- End Message ---
--- Begin Message ---
Source: drupal6
Source-Version: 6.6-3lenny1
We believe that the bug you reported is fixed in the latest version of
drupal6, which is due to be installed in the Debian FTP archive:
drupal6_6.6-3lenny1.diff.gz
to pool/main/d/drupal6/drupal6_6.6-3lenny1.diff.gz
drupal6_6.6-3lenny1.dsc
to pool/main/d/drupal6/drupal6_6.6-3lenny1.dsc
drupal6_6.6-3lenny1_all.deb
to pool/main/d/drupal6/drupal6_6.6-3lenny1_all.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Luigi Gangitano <[email protected]> (supplier of updated drupal6 package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Mon, 04 May 2009 20:04:05 +0200
Source: drupal6
Binary: drupal6
Architecture: source all
Version: 6.6-3lenny1
Distribution: stable-security
Urgency: high
Maintainer: [email protected]
Changed-By: Luigi Gangitano <[email protected]>
Description:
drupal6 - a fully-featured content management framework
Closes: 526378
Changes:
drupal6 (6.6-3lenny1) stable-security; urgency=high
.
[ Luigi Gangitano ]
* Urgency high due to security fixes
.
* debian/patches/14_SA-CORE-2009-005
- Added upstream patch fixing an XSS vulnerability
(Ref: SA-CORE-2009-005, CVE-TBD)
(Closes: #526378)
Checksums-Sha1:
b88cbf98d1ebb3d6779dea43bf9ddba43f6b1e49 1124 drupal6_6.6-3lenny1.dsc
08c12b590508d2050e3c2be0faf48b98a964ea45 1071507 drupal6_6.6.orig.tar.gz
a218020c97fe117b32c683479f732d8e32a60bbb 19809 drupal6_6.6-3lenny1.diff.gz
de863e3120c55adf69f3647f42dde7801bbdf497 1083398 drupal6_6.6-3lenny1_all.deb
Checksums-Sha256:
4c401f406d75598fb12b71ae68075b89f5b4568d667b54a967ad960215d81ed6 1124
drupal6_6.6-3lenny1.dsc
48a5d3c6567b10f401fc7ca8b7dfb0fee22745d77f28992964bc9be80aaa7965 1071507
drupal6_6.6.orig.tar.gz
bea7458e692d50e41f871f5f3ca7e6b2e4adc7dc0a37b0c9b99c7d82e6b98970 19809
drupal6_6.6-3lenny1.diff.gz
ba32efaaebff2edbc9f5fd0d35945e25806cc3e23ccff8dab899bc487db45e0b 1083398
drupal6_6.6-3lenny1_all.deb
Files:
bedc53674c2746aa0172ba085ee49cf7 1124 web extra drupal6_6.6-3lenny1.dsc
caaa55d1990b34dee48f5047ce98e2bb 1071507 web extra drupal6_6.6.orig.tar.gz
907241818d13cff27fd8eb8487002ad6 19809 web extra drupal6_6.6-3lenny1.diff.gz
0f30de9089c576ecdb85acf8e71e87a3 1083398 web extra drupal6_6.6-3lenny1_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
iD8DBQFKAasKYrVLjBFATsMRAtDhAKCIWkaOHHglwJaCGzl1Up6AocSPKQCfaP6V
RnY47VfiM5qhdSrEFyEg95U=
=0m9J
-----END PGP SIGNATURE-----
--- End Message ---
