Ubuntu
drupal5 package

  1. Feisty (7.04)
  2. Bug #181984
  3. Comment #3

Comment 3 for bug 181984

Revision history for this message
Stephan Rügamer (sruegamer) wrote : Re: Drupal5: SA-2007-031: SQL Injection possible when certain contributed modules are enabled

Hi Emanuele,

I checked the diff and found that the security patch from drupal is not fixed (see http://drupal.org/drupal-5.5 and http://drupal.org/node/198321)

would you fix this too and add the new security fixes SA-2008-0005 and SA-2008-0006 to the gutsy and feisty package?

SA-2008-0007 is just an advisory to disable register_globals in your local php/apache configuration ;)