Bug 201550

Summary:	www-apps/drupal < 5.5 SQL injection
Product:	Gentoo Security	Reporter:	Hanno Böck <hanno>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	trivial
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	http://drupal.org/node/198162
Whiteboard:	~3 [noglsa]
Package list:		Runtime testing required:	---

Description Hanno Böck gentoo-dev

2007-12-07 01:07:52 UTC

Drupal is vulnerable to sql injection, drupal SA-2007-031:
http://drupal.org/node/198162

Comment 1 Gunnar Wrobel (RETIRED) gentoo-dev

2007-12-07 06:36:41 UTC

added 5.5 to the tree, removed 5.4.

UNstable on all arches.

webapps done.

Comment 2 Pierre-Yves Rofes (RETIRED) gentoo-dev

2007-12-07 08:24:28 UTC

Well, according to the advisory, 5.4 was already fixed, but it's always good to have the latest version in the tree :)
closing without glsa.