| From: |
| updates@fedoraproject.org |
| To: |
| fedora-package-announce@redhat.com |
| Subject: |
| [SECURITY] Fedora 7 Update: drupal-5.3-1.fc7 |
| Date: |
| Wed, 24 Oct 2007 00:15:27 -0700 |
| Message-ID: |
| <200710240715.l9O7FQja023071@bastion.fedora.phx.redhat.com> |
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-2649
2007-10-24 07:15:23.618844
--------------------------------------------------------------------------------
Name : drupal
Product : Fedora 7
Version : 5.3
Release : 1.fc7
URL : http://www.drupal.org
Summary : An open-source content-management platform
Description :
Equipped with a powerful blend of features, Drupal is a Content Management
System written in PHP that can support a variety of websites ranging from
personal weblogs to large community-driven websites. Drupal is highly
configurable, skinnable, and secure.
--------------------------------------------------------------------------------
Update Information:
- Upgrade to 5.3, fixes:
- HTTP response splitting.
- Arbitrary code execution.
- Cross-site scripting.
- Cross-site request forgery.
- Access bypass.
Remember to log in to your site as the admin user before upgrading this package. After upgrading
the package, browse to http://host/drupal/update.php to run the upgrade script.
--------------------------------------------------------------------------------
References:
[ 1 ] CVE-2007-5593
http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-200...
[ 2 ] CVE-2007-5594
http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-200...
[ 3 ] CVE-2007-5595
http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-200...
[ 4 ] CVE-2007-5596
http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-200...
[ 5 ] CVE-2007-5597
http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-200...
--------------------------------------------------------------------------------
Updated packages:
41c95f8bb4ba179a7307a6fc62cf37bb95924371 drupal-5.3-1.fc7.noarch.rpm
f5cf193c22cec390c1165dcf75ac6f2c378afce9 drupal-5.3-1.fc7.src.rpm
This update can be installed with the "yum" update program. Use
su -c 'yum update drupal'
at the command line. For more information, refer to "Managing Software
with yum", available at http://docs.fedoraproject.org/yum/.
--------------------------------------------------------------------------------
_______________________________________________
Fedora-package-announce mailing list
Fedora-package-announce@redhat.com
http://www.redhat.com/mailman/listinfo/fedora-package-ann...
(
Log in to post comments)