We believe that the bug you reported is fixed in the latest version of
drupal5, which is due to be installed in the Debian FTP archive:
drupal5_5.8-1.diff.gz
to pool/main/d/drupal5/drupal5_5.8-1.diff.gz
drupal5_5.8-1.dsc
to pool/main/d/drupal5/drupal5_5.8-1.dsc
drupal5_5.8-1_all.deb
to pool/main/d/drupal5/drupal5_5.8-1_all.deb
drupal5_5.8.orig.tar.gz
to pool/main/d/drupal5/drupal5_5.8.orig.tar.gz
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 490298@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Luigi Gangitano <luigi@debian.org> (supplier of updated drupal5 package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)
Format: 1.8
Date: Thu, 17 Jul 2008 15:36:46 +0200
Source: drupal5
Binary: drupal5
Architecture: source all
Version: 5.8-1
Distribution: unstable
Urgency: high
Maintainer: Luigi Gangitano <luigi@debian.org>
Changed-By: Luigi Gangitano <luigi@debian.org>
Description:
drupal5 - a fully-featured content management framework
Closes: 490298 490559
Changes:
drupal5 (5.8-1) unstable; urgency=high
.
[ Luigi Gangitano ]
* Urgency high due to security fixes
.
* New upstream release
- Fixes XSS, Section Fixation and SQL Injection vulnerabilities
(Ref: SA-2008-044, CVE-TBD) (Closes: #490559, #490298)
Checksums-Sha1:
8114a0331f3834a48a121829ab5cbca48b3ba93b 1067 drupal5_5.8-1.dsc
8c6c462389eb2a051903b829dac797bd06c2919d 756306 drupal5_5.8.orig.tar.gz
884137c7c3a40ddca34c05ca9959b643df445914 25435 drupal5_5.8-1.diff.gz
10559f6355d88fe133da091e7b1e57e952056b7d 775942 drupal5_5.8-1_all.deb
Checksums-Sha256:
0000f1245014832052d6f22904c9d77bd6bf49ca2406158939337d4a7183552f 1067 drupal5_5.8-1.dsc
74cdc2172a0c82f937edbadf20ada2839f04a02ad3951be2eea4d09cca201b03 756306 drupal5_5.8.orig.tar.gz
db93a75e32df4cee772e599111d53d53393d3375602813593ca159f4251a090b 25435 drupal5_5.8-1.diff.gz
50147a40113880a5ba0c1bbb60c1a325f443698138e44ff7aecd8f4595f87cf8 775942 drupal5_5.8-1_all.deb
Files:
bb8f352de0d752591490eb9ab462a1f4 1067 web extra drupal5_5.8-1.dsc
2a570ce3cb6a104c2cc540a02a3cb11d 756306 web extra drupal5_5.8.orig.tar.gz
85aad4d2034024808e93e267d69ad547 25435 web extra drupal5_5.8-1.diff.gz
ea3f54918651437b18a7dfed9abb3d43 775942 web extra drupal5_5.8-1_all.deb
iD8DBQFIf1Hj8ZumGJJMDCYRArN6AJ9wz9Vxfqin2E8+HZ2MEd/8o4x/nQCfRev2
q3ZeXE0ynmzRcKdD6nVZu+Q=
=Byaz
-----END PGP SIGNATURE-----