| ||||||||||||||||
|
| ||||||||||||||||
Fedora alert FEDORA-2008-7626 (drupal)
-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2008-7626 2008-09-05 10:56:43 -------------------------------------------------------------------------------- Name : drupal Product : Fedora 9 Version : 6.4 Release : 1.fc9 URL : http://www.drupal.org Summary : An open-source content-management platform Description : Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure. -------------------------------------------------------------------------------- Update Information: Update to 6.4, security fixes: SA-2008-047 (http://drupal.org/node/295053) - multiple XSS issues (CVE-2008-3740, CVE-2008-3741) - unrestricted upload vulnerability (CVE-2008-3742) - multiple CSRF issues (CVE-2008-3743, CVE-2008-3744) - upload module privilege escalation (CVE-2008-3745) Remember to log in to your site as the admin user before upgrading this package. After upgrading the package, browse to http://host/drupal/update.php to run the upgrade script. -------------------------------------------------------------------------------- ChangeLog: * Thu Aug 14 2008 Jon Ciesla <limb@jcomserv.net> - 6.4-1 - Upgrade to 6.4, SA-2008-047. * Thu Jul 10 2008 Jon Ciesla <limb@jcomserv.net> - 6.3-1 - Upgrade to 6.3, upstream security fixes, SA-2008-044. -------------------------------------------------------------------------------- References: [ 1 ] Bug #459108 - drupal: multiple drupal issues in < 6.4,5.10 (SA-2008-047) https://bugzilla.redhat.com/show_bug.cgi?id=459108 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update drupal' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at http://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ Fedora-package-announce mailing list Fedora-package-announce@redhat.com http://www.redhat.com/mailman/listinfo/fedora-package-ann... (Log in to post comments)
|
|
|||||||||||||||