Subject: CVS commit: pkgsrc/www/drupal
To: None <pkgsrc-changes@NetBSD.org>
From: Adrian Portelli <adrianp@netbsd.org>
List: pkgsrc-changes
Date: 10/18/2007 13:01:36
Module Name:	pkgsrc
Committed By:	adrianp
Date:		Thu Oct 18 13:01:36 UTC 2007

Modified Files:
	pkgsrc/www/drupal: Makefile distinfo

Log Message:
Update to 5.3

Fix a number of security issues:
SA-2007-024 - Drupal Core - HTTP response splitting
SA-2007-025 - Drupal Core - Arbitrary code execution via installer.
SA-2007-026 - Drupal Core - Cross site scripting via uploads
SA-2007-029 - Drupal Core - User deletion cross site request forgery
SA-2007-030 - Drupal Core - API handling of unpublished comment

Bugs:
Redirect to home page after user registration requiring admin approval.
More correct wording since some modules will actually work despite warning.
variable search_cron_limit was not removed on search uninstall
Append to instead of overwrite #suffix.
hide administration pages links on module help pages if there are no admin links for the module

See http://drupal.org/node/184395 for all the details


To generate a diff of this commit:
cvs rdiff -r1.23 -r1.24 pkgsrc/www/drupal/Makefile
cvs rdiff -r1.16 -r1.17 pkgsrc/www/drupal/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.