lp:ubuntu/lucid-updates/drupal6

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

15. By Artur Rona on 2010-12-28

* SECURITY UPDATE: Multiple vulnerabilities and weaknesses
  (OpenID authentication bypass, file download access bypass,
  comment unpublishing bypass, and actions cross site scripting)
  were discovered in Drupal. (LP: #539056)
  - debian/patches/21_SA-CORE-2010-002.dpatch
  - CVE-2010-3685
  - CVE-2010-3686
  - SA-CORE-2010-002

14. By Luigi Gangitano on 2010-03-12

[ Luigi Gangitano ]
* Urgency high due to security fixes

* New upstream release
  - Fixes multiple vulnerabilities (Closes: #572439)
    (Ref: SA-CORE-2010-001, CVE-TBA)

13. By Luigi Gangitano on 2010-01-11

* New upstream release (Closes: #561726)
  - Fixes several XSS vulnerabilities (Closes: #562165)
    (Ref: SA-CORE-2009-009, CVE-2009-4369, CVE-2009-4370, CVE-2009-4371)

* debian/rules
  - Use dh_prep instead of dh_clean -k

* debian/control
  - Upgraded versioned dependency on debhelper to 7

* debian/README.source
  - Added directions on source handling

12. By Luigi Gangitano on 2009-09-20

* New upstream release
  - Removed security patches integrate upstream
    + 20_SA-CORE-2009-007
  - Fixes multiple vulnerabilities (Ref: SA-CORE-2009-008)
    (Closes: #547140)

* debian/control
  - Bumped Standard-Version to 3.8.3, no change needed

* debian/compat
  - Switch debhelper compatibility to 7

* debian/copyright
  - Added reference to copyright file with version

11. By Chuck Short on 2009-12-04

debian/control, debian/drupal6.postinst: Drop wwwconfig as we get it ready for main.

10. By Artur Rona on 2009-10-10

* debian/patches/21_SA-CORE-2009-008.dpatch:
  - Fixed security issues (session fixation),
    see SA-CORE-2009-008 (LP: #431080).
* debian/README.source: Added for silence lintian's warning.

9. By Nico Golde <email address hidden> on 2009-07-06

* Non-maintainer upload by the Security Team.
* Apply upstream patch to fix:
  - XSS in the forum module
  - Input format access bypass via signatures
  - Password leakage via URLs
  (no CVE id yet; SA-CORE-2009-007; Closes: #535435).

8. By Luigi Gangitano on 2009-05-04

[ Luigi Gangitano ]
* New upstream release
  - Fixes XSS vulnerability (Ref: SA-CORE-2009-005, CVE-TBD)
    (Closes: #526378)

7. By Luigi Gangitano on 2009-03-01

[ Luigi Gangitano ]
* New upstream release
  - This version fixes two Windows-only security issues
    (Ref: SA-CORE-2009-003, SA-CORE-2009-004)
    Debian is not affected by this vulnerabilites

6. By Luigi Gangitano on 2009-02-16

[ Luigi Gangitano ]
* New upstream release
  - Removed security patch integrate upstream
    + 12_SA-2008-073
    + 13_SA-CORE-2009-001

* debian/cron.sh
  - Handle sites/all correctly (Closes: #513522)