Upstream has issued an advisory today (February 24): https://www.drupal.org/SA-CORE-2016-001 CVEs have been requested: http://openwall.com/lists/oss-security/2016/02/24/19 Updated package uploaded for Mageia 5. Advisory to come later. References: https://www.drupal.org/SA-CORE-2016-001 https://www.drupal.org/drupal-7.42 https://www.drupal.org/drupal-7.42-release-notes https://www.drupal.org/drupal-7.43 https://www.drupal.org/drupal-7.43-release-notes ======================== Updated packages in core/updates_testing: ======================== drupal-7.43-1.mga5 drupal-mysql-7.43-1.mga5 drupal-postgresql-7.43-1.mga5 drupal-sqlite-7.43-1.mga5 from drupal-7.43-1.mga5.src.rpm
Testing procedures: https://bugs.mageia.org/show_bug.cgi?id=14298#c6
Whiteboard: (none) => has_procedure
Testing MGA5 x64 with PostgreSQL I had all this already installed, so updated to: drupal-7.43-1.mga5 drupal-postgresql-7.43-1.mga5 and played with it a bit, editing, upload of an image. All seems OK.
CC: (none) => lewyssmithWhiteboard: has_procedure => has_procedure MGA5-64-OK
Testing complete mysql (mariadb) Validating.
Keywords: (none) => validated_updateCC: (none) => sysadmin-bugs
This one needs an advisory please David
Still no CVEs :o( Advisory: ======================== Updated drupal packages fix security vulnerabilities: The drupal package has been update to version 7.43, which fixes several security issues and other bugs. See the upstream advisory and release notes for details. References: https://www.drupal.org/SA-CORE-2016-001 https://www.drupal.org/drupal-7.42 https://www.drupal.org/drupal-7.42-release-notes https://www.drupal.org/drupal-7.43 https://www.drupal.org/drupal-7.43-release-notes
Thanks. Advisory uploaded.
Whiteboard: has_procedure MGA5-64-OK => has_procedure advisory MGA5-64-OK
Debian has issued an advisory for this on February 28: https://www.debian.org/security/2016/dsa-3498
URL: (none) => http://lwn.net/Vulnerabilities/677958/
An update for this issue has been pushed to the Mageia Updates repository. http://advisories.mageia.org/MGASA-2016-0087.html
Status: NEW => RESOLVEDResolution: (none) => FIXED
CVEs have finally been assigned for this: http://openwall.com/lists/oss-security/2016/03/15/10 CVE-2016-316[2-4], CVE-2016-316[89], CVE-2016-3170 applied to us.