[Bug 396479] [NEW] Sync drupal6 6.12-1.1 (universe) from Debian unstable (main).

[Michael Bienia]

Public bug reported:

Please sync drupal6 6.12-1.1 (universe) from Debian unstable (main).

Changelog since current karmic version 6.12-1:

drupal6 (6.12-1.1) unstable; urgency=high

  * Non-maintainer upload by the Security Team.
  * Apply upstream patch to fix:
    - XSS in the forum module
    - Input format access bypass via signatures
    - Password leakage via URLs
    (no CVE id yet; SA-CORE-2009-007; Closes: #535435).

 -- Nico Golde <nion at debian.org>  Mon, 06 Jul 2009 20:27:45 +0200

** Affects: drupal6 (Ubuntu)
     Importance: Wishlist
         Status: Confirmed

** Changed in: drupal6 (Ubuntu)
   Importance: Undecided => Wishlist

** Changed in: drupal6 (Ubuntu)
       Status: New => Confirmed

-- 
Sync drupal6 6.12-1.1 (universe) from Debian unstable (main).
https://bugs.launchpad.net/bugs/396479
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs at lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs