[Bug 431080] Re: Fix critical security vulnerability (SA-CORE-2009-008)

[Scott Kitterman]

Universe is not past final freeze.  Go ahead.

...... Original Message .......
On Thu, 15 Oct 2009 18:50:40 -0000 Michael Terry 
<michael.terry at canonical.com> wrote:
>I would sponsor and push this in (thanks for the work Artur), but we're
>past FinalFreeze.  Will subscribe motu-release for an exception.
>
>-- 
>Fix critical security vulnerability (SA-CORE-2009-008)
>https://bugs.launchpad.net/bugs/431080
>You received this bug notification because you are a member of MOTU
>Release Team, which is a direct subscriber.
>
>Status in  drupal5  package in Ubuntu: Fix Released
>Status in  drupal6  package in Ubuntu: New
>Status in drupal5 in Ubuntu Hardy: Incomplete
>Status in drupal6 in Ubuntu Hardy: Invalid
>Status in drupal5 in Ubuntu Intrepid: Incomplete
>Status in drupal6 in Ubuntu Intrepid: Invalid
>Status in drupal5 in Ubuntu Jaunty: Triaged
>Status in drupal6 in Ubuntu Jaunty: Triaged
>Status in drupal5 in Ubuntu Karmic: Fix Released
>Status in drupal6 in Ubuntu Karmic: New
>Status in  drupal5  package in Debian: Fix Released
>Status in  drupal6  package in Debian: Fix Released
>
>Bug description:
>Binary package hint: drupal5
>
>Full details about the security issue addressed by this bugfix are available at 
http://drupal.org/node/579482 . The release announcement can be found at 
http://drupal.org/drupal-6.14 .
>
>The vulnerability is:
>* Attacker can fix and reuse a victim's session ID.
>

-- 
Fix critical security vulnerability (SA-CORE-2009-008)
https://bugs.launchpad.net/bugs/431080
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs at lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs