Bug#503217: drupal5: Security issues fixed by new 5.12 version

2008-10-23 Thread Nico Golde
retitle 503222 drupal6: Security issues fixed by new version thanks Hi, forgot the patches: http://drupal.org/files/sa-2008-067/SA-2008-067-5.11.patch for drupal5 and http://drupal.org/files/sa-2008-067/SA-2008-067-6.5.patch for drupal6. Cheers Nico -- Nico Golde - http://www.ngolde.de - [EMAI

Bug#503217: drupal5: Security issues fixed by new 5.12 version

2008-10-23 Thread Nico Golde
clone 503217 -1 tags 503217 + patch reassign -1 drupal6 severity 503217 important severity -1 important Hi, * Gunnar Wolf <[EMAIL PROTECTED]> [2008-10-23 19:52]: > New upstream version 5.12 includes the fixes for two security-related > bugs: One is that Drupal currently can include files outside i

Bug#503217: drupal5: Security issues fixed by new 5.12 version

2008-10-23 Thread Gunnar Wolf
Package: drupal5 Version: 5.10-1 Severity: grave Tags: security Justification: user security hole New upstream version 5.12 includes the fixes for two security-related bugs: One is that Drupal currently can include files outside its root, leading to arbitrary code execution under specific configur