diff options
| author | adrianp <adrianp> | 2008-12-10 23:55:39 +0000 |
|---|---|---|
| committer | adrianp <adrianp> | 2008-12-10 23:55:39 +0000 |
| commit | e0df8292e8af4cb7318ea97549568ffa35099962 (patch) | |
| tree | 2321546a41e8d6e75c429c999c426aceb59f51a7 /www | |
| parent | 7afb15009b233ac127919e4269d09a8e996fc664 (diff) | |
| download | pkgsrc-e0df8292e8af4cb7318ea97549568ffa35099962.tar.gz | |
Update to 5.13
This release fixes security vulnerabilities. Sites are urged to upgrade immediately after reading the security announcement:
* SA-2008-073 - Drupal core - Multiple vulnerabilities
In addition to this security vulnerability, the following bugs have been fixed since the 5.12 release:
* #318102 by Damien Tournoud and Dave Reid: hook_exit() not invoked for some cached requests.
* #278821 by teezee. More isset() checking.
* #293612 by egfrith, Bart Jansens: let user_authenticate() be called without cookies previously set; allows web service modules to start a session with the authentication.
* #123556 by maartenvg and dvdweide. Do not show empty user info categories.
* #294450 by blakehall. Match up DB and form max length.
* More code style removing trivial differences with 6.x.
* #195161 by mcarbone with some modifications: only show 'login to post comments' if logging in actually lets you post comments. Backport by salvis.
* - Patch #342988 by ultimateboy: fixed order of attributes in PHPdoc.
* #280934 follow up by pwolanin: harden the cookie handling in sess_regenerate() by setting our session cookie to be an HTTP only cookie, thus reducing the risk of session stealing via XSS
* #324875 by pwolanin: improve HTTP_HOST checking, ensuring that the host is lowercased and only valid characters are allowed.
* #28776 by Uwe Hermann, Morbus Iff, jvandyk: Protect *.test files and SVN metafiles from being exposed under Drupal
* #299582 by hass: Remove outdated items from robots.txt and fix ordering of items to make stuff easier to find.
http://drupal.org/node/345467
Diffstat (limited to 'www')
| -rw-r--r-- | www/drupal/Makefile | 4 | ||||
| -rw-r--r-- | www/drupal/distinfo | 8 |
2 files changed, 6 insertions, 6 deletions
diff --git a/www/drupal/Makefile b/www/drupal/Makefile index a46ac424cbd..1faa1a868fb 100644 --- a/www/drupal/Makefile +++ b/www/drupal/Makefile @@ -1,6 +1,6 @@ -# $NetBSD: Makefile,v 1.34 2008/10/23 21:33:21 adrianp Exp $ +# $NetBSD: Makefile,v 1.35 2008/12/10 23:55:39 adrianp Exp $ -DISTNAME= drupal-5.12 +DISTNAME= drupal-5.13 CATEGORIES= www MASTER_SITES= http://drupal.org/files/projects/ diff --git a/www/drupal/distinfo b/www/drupal/distinfo index 9fbf50460b5..e58a067765e 100644 --- a/www/drupal/distinfo +++ b/www/drupal/distinfo @@ -1,5 +1,5 @@ -$NetBSD: distinfo,v 1.25 2008/10/23 21:33:21 adrianp Exp $ +$NetBSD: distinfo,v 1.26 2008/12/10 23:55:39 adrianp Exp $ -SHA1 (drupal-5.12.tar.gz) = 42105736e9fae7796e8d338accc2f48a070e567e -RMD160 (drupal-5.12.tar.gz) = f41e13157355a34e9a7fa70777e5ff71e51c863a -Size (drupal-5.12.tar.gz) = 764327 bytes +SHA1 (drupal-5.13.tar.gz) = 06fc9907f15ef9eec933bdf7974ea52c71ddd982 +RMD160 (drupal-5.13.tar.gz) = cf3c32849395dcf6c72d670791b8c3b9a03f4c7b +Size (drupal-5.13.tar.gz) = 764729 bytes |