-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2012-8360 2012-05-24 23:34:49 --------------------------------------------------------------------------------
Name : drupal7 Product : Fedora 15 Version : 7.14 Release : 2.fc15 URL : http://www.drupal.org Summary : An open-source content-management platform Description : Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure.
-------------------------------------------------------------------------------- Update Information:
Fix for CVE-2012-2922, path disclosure vulnerability. -------------------------------------------------------------------------------- ChangeLog:
* Thu May 24 2012 Jon Ciesla limburgher@gmail.com - 7.14-2 - Patch for CVE-2012-2922, BZ 824631, BZ 824632. * Thu May 3 2012 Paul W. Frields stickster@gmail.com - 7.14-1 - New upstream. (#818538) * Thu Feb 2 2012 Jon Ciesla limburgher@gmail.com - 7.12-1 - New upstream. * Fri Jan 13 2012 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 7.10-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild * Tue Dec 6 2011 Jon Ciesla limburgher@gmail.com - 7.10-1 - New upstream, BZ 760504. * Thu Oct 27 2011 Paul W. Frields stickster@gmail.com - 7.9-1 - New upstream, BZ 749509. * Sat Sep 3 2011 Paul W. Frields stickster@gmail.com - 7.8-1 - New upstream, minor bugfixes and API improvements only. * Sun Aug 7 2011 Paul W. Frields stickster@gmail.com - 7.7-1 - New upstream, fixed version string only. * Wed Jul 27 2011 Jon Ciesla limb@jcomserv.net - 7.6-1 - New upstream, SA-CORE-2011-003, BZ 726243. * Thu Jun 30 2011 Jon Ciesla limb@jcomserv.net - 7.4-1 - New upstream, SA-CORE-2011-002, BZ 717874. - Dropped unused dirs in /etc/drupal7/, BZ 703736. * Fri Jun 17 2011 Jon Ciesla limb@jcomserv.net - 7.2-2 - Bump and rebuild for BZ 712251. * Thu May 26 2011 Jon Ciesla limb@jcomserv.net - 7.2-1 - New upstream, SA-CORE-2011-001. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #824631 - CVE-2012-2922 drupal7: full path disclosure vulnerability [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=824631 [ 2 ] Bug #824632 - CVE-2012-2922 drupal7: full path disclosure vulnerability [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=824632 --------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use su -c 'yum update drupal7' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------
package-announce@lists.fedoraproject.org