Drupal 6.13 released to fix moderately critical security vulnerability

Bug #395004 reported by Scott Testerman
262
This bug affects 1 person
Affects Status Importance Assigned to Milestone
drupal6 (Ubuntu)
Invalid
Medium
Scott Testerman
Jaunty
Invalid
Medium
Scott Testerman
Karmic
Invalid
Medium
Scott Testerman

Bug Description

Binary package hint: drupal6

Drupal 6.13 has been released to fix moderately critical security vulnerabilities, as well as other, smaller issues. No new functionality has been included. Full details about the security issues addressed by this bugfix are available at http://drupal.org/node/507572 . The release announcement can be found at http://drupal.org/drupal-6.13 .

Drupal 6.13 is not yet available upstream for merging.

CVE References

visibility: private → public
Changed in drupal6 (Ubuntu):
importance: Undecided → Medium
status: New → Confirmed
Revision history for this message
Scott Testerman (scott-testerman) wrote :

I've created a PPA with the latest version of Drupal available for the currently-supported Ubuntu releases.

https://launchpad.net/~scott-testerman/+archive/ppa

Revision history for this message
barsalou (barjunk) wrote : Re: [Bug 395004] Re: Drupal 6.13 released to fix moderately critical security vulnerability

Thank you for taking that on. This is really appreciated.

Mike B.

----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.

Changed in drupal6 (Ubuntu):
status: Confirmed → In Progress
assignee: nobody → Scott Testerman (scott-testerman)
Revision history for this message
Scott Testerman (scott-testerman) wrote :

Diff attached for Jaunty.

Upstream (not Debian) source:
ftp://ftp.osuosl.org/pub/drupal/files/projects/drupal-6.13.tar.gz

Revision history for this message
Scott Testerman (scott-testerman) wrote :

Diff attached for Karmic.

Upstream (not Debian) source:
ftp://ftp.osuosl.org/pub/drupal/files/projects/drupal-6.13.tar.gz

Revision history for this message
Scott Testerman (scott-testerman) wrote :
Changed in drupal6 (Ubuntu Jaunty):
status: New → In Progress
importance: Undecided → Medium
assignee: nobody → Scott Testerman (scott-testerman)
Revision history for this message
Scott Testerman (scott-testerman) wrote :

This bug is superseded by Bug #431078

Kees Cook (kees)
Changed in drupal6 (Ubuntu Jaunty):
status: In Progress → Invalid
Changed in drupal6 (Ubuntu Karmic):
status: In Progress → Invalid
To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.