-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2012-8362 2012-05-24 23:34:54 --------------------------------------------------------------------------------
Name : drupal7 Product : Fedora 16 Version : 7.14 Release : 2.fc16 URL : http://www.drupal.org Summary : An open-source content-management platform Description : Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure.
-------------------------------------------------------------------------------- Update Information:
Fix for CVE-2012-2922, path disclosure vulnerability. -------------------------------------------------------------------------------- ChangeLog:
* Thu May 24 2012 Jon Ciesla limburgher@gmail.com - 7.14-2 - Patch for CVE-2012-2922, BZ 824631, BZ 824632. * Thu May 3 2012 Paul W. Frields stickster@gmail.com - 7.14-1 - New upstream. (#818538) * Thu Feb 2 2012 Jon Ciesla limburgher@gmail.com - 7.12-1 - New upstream. * Fri Jan 13 2012 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 7.10-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild * Tue Dec 6 2011 Jon Ciesla limburgher@gmail.com - 7.10-1 - New upstream, BZ 760504. * Thu Oct 27 2011 Paul W. Frields stickster@gmail.com - 7.9-1 - New upstream, BZ 749509. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #824631 - CVE-2012-2922 drupal7: full path disclosure vulnerability [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=824631 [ 2 ] Bug #824632 - CVE-2012-2922 drupal7: full path disclosure vulnerability [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=824632 --------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use su -c 'yum update drupal7' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------
package-announce@lists.fedoraproject.org