generally unsecure drupal5 packages

[Andreas Olsson]

Binary package hint: drupal5

Seems like drupal5 packages both in Hardy and Intrepid are in a rather bad shape security wise.

The drupal5 package in Hardy (drupal5 5.7-1ubuntu1.1) had its most recent update 18 Jul 2008.
The drupal5 package in Intrepid (drupal5 5.10-1ubuntu1) had its most recent update 15 Aug 2008.

Since then there have been several Security advisories regarding Drupal 5.x.

http://drupal.org/node/358957 (Moderately Critical)
http://drupal.org/node/345441 (Moderately Critical)
http://drupal.org/node/324824 (Less Critical)
http://drupal.org/node/318706 (Critical)
http://drupal.org/node/295053 (Highly critical)
http://drupal.org/node/286417 (Less critical)

Taken from http://drupal.org/security

It is possible that there might be older Security advisories which also applies.

[Jamie Strandboge (jdstrand)]

Thank you for using Ubuntu and taking the time to report a bug. This package is in universe and is community supported. If you are able, perhaps you could prepare debdiffs to fix this by following https://wiki.ubuntu.com/SecurityUpdateProcedures.

[Bhavani Shankar (bhavi)]

I think we can backport jaunty version into intrepid

[Bhavani Shankar (bhavi)]

I m on a hardy box right now and I can test and request a backport I think

[Bhavani Shankar (bhavi)]

My hardy system is broken and I need a full reinstall now and I fear I can no longer work on this :(