Bug 233478 (CVE-2008-3222)

Summary:	www-apps/drupal < 5.9: session fixation (CVE-2008-3222)
Product:	Gentoo Security	Reporter:	Hanno Böck <hanno>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	normal
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	http://drupal.org/node/286417
Whiteboard:	~3 [noglsa]
Package list:		Runtime testing required:	---

Description Hanno Böck gentoo-dev

2008-07-31 13:41:04 UTC

The fix for CVE-2008-3222 in 5.8 was missing, so drupal issued 5.9.

Comment 1 Gunnar Wrobel (RETIRED) gentoo-dev

2008-07-31 20:41:14 UTC

Bumped to 5.9, removed 5.8. Unstable on all archs. webapps done.

Comment 2 Pierre-Yves Rofes (RETIRED) gentoo-dev

2008-07-31 21:02:29 UTC

thanks, closing without glsa.