Technical Description

Multiple vulnerabilities have been identified in Fedora, which could be exploited by malicious users to conduct cross site scripting and cross site request forgery attacks. These issues are caused by errors in Drupal. For additional information, see : VUPEN/ADV-2008-0127

Affected Products

Fedora 7
Fedora 8

Solution

Upgrade the affected packages :

b6e2348d94d21bb681f252454425407bcf56a057 drupal-5.6-1.fc7.noarch.rpm
a2ea7005f5b09683bfe5cb4c78d34d7bd4d08fdc drupal-5.6-1.fc7.src.rpm

7c9389ca6b597552e9f09a6f4222aa2380848e38 drupal-5.6-1.fc8.noarch.rpm
d6d8083e8f2d77aef4f6d222af3fcc756db33fc1 drupal-5.6-1.fc8.src.rpm

References

http://www.vupen.com/english/advisories/2008/0136
https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00387.html
https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00401.html

ChangeLog

2008-01-14 : Initial release

Vulnerability Management

Subscribe to VUPEN VNS and receive real-time alerts with CVE, CWE, and CVSS when new advisories or patches relevant to your systems and network configurations are available.

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form.