Secure testing team - Jul 2009 - Bug#536012: drupal6: SA-CORE-2009-007 - Drupal core - Multiple vulnerabilities

Package: drupal6
Version: 6.12-1
Severity: critical
Tags: security

SA-CORE-2009-007 was reported on July 1, 2009; it is fixed in the new
upstream version 6.13.

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=531386

Please note that the Drupal version in Lenny (6.6) is also vulnerable.

-- System Information:
Debian Release: squeeze/sid
  APT prefers unstable
  APT policy: (500, ''unstable'')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.26-1-vserver-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash