201550 – www-apps/drupal < 5.5 SQL injection

Bug 201550 - www-apps/drupal < 5.5 SQL injection

Summary: www-apps/drupal < 5.5 SQL injection

Status:	RESOLVED FIXED

Alias:	None

Product:	Gentoo Security
Classification:	Unclassified
Component:	Vulnerabilities (show other bugs)
Hardware:	All Linux

Importance:	High trivial (vote)
Assignee:	Gentoo Security

URL:	http://drupal.org/node/198162
Whiteboard:	~3 [noglsa]
Keywords:

Depends on:
Blocks:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Hanno Böck gentoo-dev

2007-12-07 01:07:52 UTC

Drupal is vulnerable to sql injection, drupal SA-2007-031:
http://drupal.org/node/198162

Comment 1 Gunnar Wrobel (RETIRED) gentoo-dev

2007-12-07 06:36:41 UTC

added 5.5 to the tree, removed 5.4.

UNstable on all arches.

webapps done.

Comment 2 Pierre-Yves Rofes (RETIRED) gentoo-dev

2007-12-07 08:24:28 UTC

Well, according to the advisory, 5.4 was already fixed, but it's always good to have the latest version in the tree :)
closing without glsa.