July 2005 - Development - lists.drupal.org

[drupal-devel] [feature] Menu fast edit node links
by Dries 02 Jul '05

02 Jul '05

Issue status update for http://drupal.org/node/9178 Project: Drupal Version: cvs Component: menu system Category: feature requests Priority: normal Assigned to: mathias Reported by: mathias Updated by: Dries Status: patch One more review: - The parent selection menu doesn't seem to get populated. All it says is 'Navigation', but no existing menus are shown. I'm not sure it is a bug, but it confused the hell out of me. Intuitively, I'd think I'm able to add a menu item to any existing URL/path know to the menu system ... not? - Do we need all these hidden variables? I think it would be better to make menu_edit_item_save() smarter so it only saves the values that are set. That saves about 10 lines of code. - The title field is marked required? Dries Previous comments: ------------------------------------------------------------------------ July 9, 2004 - 19:15 : mathias Attachment: http://drupal.org/files/issues/menu_fast_edit.patch (1.18 KB) When developers are creating custom menus, the process of adding content becomes twofold: 1. Create content 2. Navigate to administer > menus > add menu item and add the latest node entry This patch adds a link hook to the menu module. Specifically if a node does not have a menu entry the 'add menu item' link appears. If a menu item exists, the 'edit menu item' and 'delete menu item' are displayed thereby speeding up the publishing workflow. Note: This feature is only present when the menu module is enabled. Status: Waiting for JonBobs blessing ... ------------------------------------------------------------------------ July 10, 2004 - 19:21 : JonBob This is interesting. I do have a couple reservations. This adds a bunch of queries to node listing pages, since it has to check for every node whether that node has a menu item set. I also wonder how much time this saves the user in reality. It saves navigating to the menu admin screen, sure, but provides little other help. It seems that if we are to provide a link to the menu item add page, we should at least be pre-filling in the path and title fields for the user. The provided method is little better than having the menu admin page open in another browser tab. Maybe a node link isn't the right interface for this, anyway? Possibly a tab, or a hook_nodeapi('form admin') injection? If done right, this could finally replace that aging "link title" field in page.module nodes. ------------------------------------------------------------------------ January 24, 2005 - 23:23 : mathias Attachment: http://drupal.org/files/issues/menu_quick_link.patch (5.91 KB) This new patch gives users the ability to define menu items on any node creation/editing form. Screenshot here: http://asitis.org/tmp/menu_quick_link_form.png [1] It does this through nodeapi (as suggested by Jonbob), which means that any node has access to these fields unless specified otherwise via the new menu configuration settings. The functionality lives in menu.module, and users with 'administer menus' permission are allowed to edit the menu item fields inside the node form. One more note. I'm also proposing the addition of a misc/drupal.js [2] file to Drupal core (* gasp *). Currently it includes javascript functions to hide regions of a page. When a link is clicked on for a collapsed region, the region unfolds revealing the additional parts of a page. In this case the menu item fields are displayed after clicking the 'Menu item settings' link. I think it helps make best use of screen real estate, but we'll leave that verdict up to the usability experts. Let's remove the js file if it's the only thing stopping this patch from being submitted. I thought it might be worth exploring, especially for form pre and form post regions of the node form. [1] http://asitis.org/tmp/menu_quick_link_form.png [2] http://asitis.org/tmp/drupal.js ------------------------------------------------------------------------ January 24, 2005 - 23:34 : mathias Woops. Setting status to 'patch'. ------------------------------------------------------------------------ January 25, 2005 - 15:17 : Bèr Kessels +1 on the feature, I use menu_otf all the time. -1 for the javascript. Not that i am against it, ion contrary. I think we should not start implementing JS on a per-case basis, but we should introduce a javascript system that can do your accordeon-magick on any element. So it should wait IMO. ------------------------------------------------------------------------ January 25, 2005 - 17:07 : Dries I agree with Ber: +1 for the feature, -1 for the Javascript. This would (or should) be easy to implement/integrate as soon the new node forms are done. Both the new node forms, and this feature are crucial. ------------------------------------------------------------------------ January 27, 2005 - 22:39 : mathias Attachment: http://drupal.org/files/issues/menu_quick_link_0.patch (4.12 KB) Okay, here's the latest patch, footloose and javascript free. ------------------------------------------------------------------------ February 1, 2005 - 10:04 : robertDouglass +1 to the feature, with or without javascript. The Menu item title:* is showing that it is required, but it can't be required as that would force users to create menu items (and it doesn't validate to be required). The patch does, however, open up a big can of permissions worms, and lacks configuration. I would like to see a checkbox on the Workflow (/admin/node/configure/types/{type}) page so that I can hide this on a per-type basis. Then, I think we need some way of limiting this by role, by user, and by menu. I would at least want an "excluded menus" list where I could, say turn off the main Navigation menu so that people don't go and trash it. Very cool feature in a very important direction! I sincerely hope this makes it into the code freeze. ------------------------------------------------------------------------ February 3, 2005 - 00:37 : Anonymous I removed the required mark next to menu item form field. Thanks for spotting that. I don't completely understand what you mean by this patch 'opening up a big can of permissions worms'. User's with 'administer menus' permission are simply given an easier way to add menu items while creating content. I think it's better to keep it simple to begin with. http://asitis.org/tmp/menu_quick_link_form.png [3] There actually is a configuration interface (settings/menu). Your menu cache probably needed to be cleared after applying the patch :-) On that page you can choose which node types acquire the quick menu item form field as well as define the default menu item. I disagree with putting the menu item form visibility settings on the admin/node/configure/types/{type} page. Those settings are for the default state of the node instance, not what's visible on the form field. For example, I wouldn't want to see a list of all 'form pre' and 'form post' fields on that page to select from, but it could be useful as a standard interface elsewhere. [3] http://asitis.org/tmp/menu_quick_link_form.png ------------------------------------------------------------------------ February 3, 2005 - 00:40 : mathias Last comment by 'learning to login' mathias. ------------------------------------------------------------------------ February 6, 2005 - 12:23 : Dries I'm going to put this on hold until the collapsbile form groups [4] settled. I encourage you to participate in the design and discussion so that it meets your requirements. The same should be done for other parts of the node edit form, so let's try to come up with a generic solution that can be used through an API that shields you from all Javascript details. [4] http://drupal.org/node/16204 ------------------------------------------------------------------------ March 14, 2005 - 00:13 : killes(a)www.drop.org Hmm, should we have a status "on hold"? I am unsure what to do with this one. It still applies. ------------------------------------------------------------------------ March 29, 2005 - 12:15 : TDobes +1 on this... trying to explain to users that they need to add their pages, then add their pages to the menu system (and explain why) was incredibly difficult... menu_otf has helped with this, and I think this sort of functionality really belongs in core. ------------------------------------------------------------------------ March 29, 2005 - 16:05 : Dries Yes, we need something like this in core but as explained, there is a depency on the new node form (and collapsible form/page elements in particular). Is anyone going to work on this? I'm determined to help get this in core ASAP but can't take a lead in this. Takers? ------------------------------------------------------------------------ June 24, 2005 - 23:41 : mathias Attachment: http://drupal.org/files/issues/menu_otf.patch (3.76 KB) Now that collapsible form/page elements are in core it's time to revisit this patch. Attached is the latest version pulled straight from the menu_otf module. Here's a screenshot of it in action: http://asitis.org/images/motf/motf-add-item.png ------------------------------------------------------------------------ June 27, 2005 - 21:01 : Dries 1. Use quotes around strings when indexing an array. It generates warnings. See menu_nodeapi(). AFAIK, the $a3 and $a4 style parameters are deprecated. It's no longer necessary to specify these as module_invoke_all() and friends got fixed. 2. The form descriptions talk about a 'quick item form'. I have no idea what that means, or what it refers to. 3. I'm not too happy with the global 'Default parent item' setting. Is this really necessary? Less settings is better. 4. t('Menu item deleted.') We updated the status messages a couple weeks ago. Messages like these have been reworded for clarity and to use the proper tone. Read up on the old issue for details, or poll either Stefan or occy. (I asked them to write some guidelines, not sure they did. I can't seem to find any though.) 5. There is an ul { at the bottom of the patch? 6. The GUI seems to mix 'menu item' and 'link'. This might be potentially confusing. ------------------------------------------------------------------------ July 1, 2005 - 07:04 : mathias Attachment: http://drupal.org/files/issues/menu_fast_edit_0.patch (3.17 KB) Patch has been updated per Dries' suggestions.

1 0

[drupal-devel] [bug] Deleting Images in node/edit does not delete
by drumm 02 Jul '05

02 Jul '05

Issue status update for http://drupal.org/node/24528 -Project: Image +Project: Drupal -Version: 4.6.0 +Version: 4.6.0 -Component: image.module +Component: upload.module Category: bug reports Priority: normal Assigned to: Anonymous Reported by: jamida Updated by: drumm Status: patch Setting the correct project/component. drumm Previous comments: ------------------------------------------------------------------------ June 7, 2005 - 21:38 : jamida Attachment: http://drupal.org/files/issues/ImageScreenshot.jpg (66.6 KB) After I've uploaded an image I usually see 3 images in the node/##/edit URL In the attachments section there are: 1) THUMBNAIL eg image.thumbnail.jpg 2) PREVIEW eg image.preview.jpg 3) ORIGINAL eg image.jpg This section gives me the option to either list or delete these files. When I select the "delete" checkbox and then hit "submit" at the bottom of the page, the chosen file disappears from the "Attachments" box, but it does NOT get deleted from the directory. It would be nice to either have the DELETE checkbox work correctly or to remove the DELETE option (since it appears to be broken). ------------------------------------------------------------------------ June 29, 2005 - 17:26 : dtan Attachment: http://drupal.org/files/issues/upload.module.delete.patch (979 bytes) Actually a patch to the upload.module. The filepath was not being recognized. This was also the case when the entire node was being deleted. ------------------------------------------------------------------------ June 29, 2005 - 21:38 : dtan Attachment: http://drupal.org/files/issues/forms_noreq_validate_0.patch (1.03 KB) html in patch again :( ------------------------------------------------------------------------ June 29, 2005 - 21:51 : dtan Attachment: http://drupal.org/files/issues/upload_module_delete.patch (979 bytes) what the? ------------------------------------------------------------------------ June 30, 2005 - 14:03 : mfb +1

1 0

[drupal-devel] Bug#316362: acknowledged by developer (Bug#316362: fixed in drupal 4.5.4-1)
by Hilko Bengen 02 Jul '05

02 Jul '05

Aleksey I Zavilohin <villain(a)ems.ru> writes: > Hmm, where fix in stable? I think you can`t upload new version in > sarge. Maybe need contact with Security Team? I have done that. Alas, there hasn't been any response yet.

1 0

[drupal-devel] Processed: Re: drupal: [INTL:de] German PO file corrections
by owner＠bugs.debian.org 01 Jul '05

01 Jul '05

Processing commands for control(a)bugs.debian.org: > reopen 313702 Bug#313702: drupal: [INTL:de] German PO file corrections Bug reopened, originator not changed. > thanks Stopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator (administrator, Debian Bugs database)

1 0

[drupal-devel] Processed: And sarge?
by owner＠bugs.debian.org 01 Jul '05

01 Jul '05

Processing commands for control(a)bugs.debian.org: > reopen 316362 Bug#316362: security problem with drupal Bug reopened, originator not changed. > tags 316362 + sarge, security Bug#316362: security problem with drupal There were no tags set. Tags added: sarge, security > thanks Stopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator (administrator, Debian Bugs database)

1 0

[drupal-devel] [bug] Theming tablesort icons is inconsistent
by Jose A Reyero 01 Jul '05

01 Jul '05

Issue status update for http://drupal.org/node/11927 Project: Drupal Version: cvs Component: theme system Category: bug reports Priority: normal Assigned to: Robin Monks Reported by: stefan nagtegaal Updated by: Jose A Reyero Status: patch +1 Tested the patch -applies with some line shift-, and it works Jose A Reyero Previous comments: ------------------------------------------------------------------------ October 22, 2004 - 17:56 : stefan nagtegaal Attachment: http://drupal.org/files/issues/tablesort-sorting-theme-improvement.patch (1.25 KB) Attached is a patch for tablesort.inc much cleaner, friendlier and more consistent way to theme the tablesort icons. Marking as a bug becuase it is inconsistent with the rest of drupal.. Please review and apply! ------------------------------------------------------------------------ October 22, 2004 - 17:57 : stefan nagtegaal Setting status to 'Patch' instead of 'Fixed' so it shows up in the patch queue ------------------------------------------------------------------------ October 23, 2004 - 17:27 : Dries Please move the proposed theme functions to includes/theme.inc (so Doxygen includes them in the list of theme_ functions). ------------------------------------------------------------------------ October 23, 2004 - 21:39 : Steven We should avoid entities like   in the code. This can be achieved through CSS instead in the theme. ------------------------------------------------------------------------ October 23, 2004 - 21:41 : Steven (ack submitted too early) Also, I wonder about the granularity of these theme functions. I don't see the point in putting ascending/descending in a separate function: they are different styles for the same element (the tablesort indicator). ------------------------------------------------------------------------ October 24, 2004 - 01:08 : Dries Stefan's patch actually removes the entities, not (or is my jet lag worse than it appears)? ------------------------------------------------------------------------ October 24, 2004 - 11:56 : stefan nagtegaal Attachment: http://drupal.org/files/issues/tablesort-sorting-theme-improvement_0.patch (1.73 KB) Updated patch which removes the and moves the theme_tablesort_asc() and theme_tablesort_desc() to theme.inc. This is much better imo than the current approach.. ------------------------------------------------------------------------ October 24, 2004 - 16:10 : Steven Yeah the entity was actually a +1... I should stop doing so much things at the same time. My other concern is still valid though: theme functions should theme page /elements/, not versions of that element. Otherwise we would have theme_node(), theme_node_sticky(), theme_node_teaser(), ... ------------------------------------------------------------------------ November 15, 2004 - 13:25 : Dries I agree with Steven. We should have a function called theme_tablesort_header($style) where $style can be either 'ascending' or 'descending'. ------------------------------------------------------------------------ June 20, 2005 - 13:43 : Robin Monks Attachment: http://drupal.org/files/issues/tablesort_header.patch (1.49 KB) Here is a new patch with theme_tablesort_header($style) that takes either asc or desc as arguments. Tested to work on Drupal CVS HEAD. Robin ------------------------------------------------------------------------ June 20, 2005 - 13:47 : Bèr Kessels I am not sure about teh switch; AFAIK there will be only asc and desc. So an if would be enough. Saves some lines of code, like "break"s; etc. ------------------------------------------------------------------------ June 20, 2005 - 14:32 : Robin Monks Attachment: http://drupal.org/files/issues/tablesort_header_0.patch (1.6 KB) Here is a new patch using if instead of the switch. Robin ------------------------------------------------------------------------ June 20, 2005 - 14:43 : Robin Monks Attachment: http://drupal.org/files/issues/tablesort_header_1.patch (1.61 KB) Thox suggested using indicator instead of header. Robin ------------------------------------------------------------------------ July 1, 2005 - 05:59 : mfb +1 looks good.

1 0

[drupal-devel] Bug#315869: marked as done ([l10n] Initial Czech translation of drupal debconf messages)
by owner＠bugs.debian.org 01 Jul '05

01 Jul '05

Your message dated Fri, 01 Jul 2005 12:02:27 -0400 with message-id <E1DoNyF-0001pJ-00(a)newraff.debian.org> and subject line Bug#315869: fixed in drupal 4.5.4-1 has caused the attached Bug report to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what I am talking about this indicates a serious mail system misconfiguration somewhere. Please contact me immediately.) Debian bug tracking system administrator (administrator, Debian Bugs database) -------------------------------------- Received: (at submit) by bugs.debian.org; 26 Jun 2005 16:10:50 +0000 >From kurem(a)vychodil.inf.upol.cz Sun Jun 26 09:10:50 2005 Return-path: <kurem(a)vychodil.inf.upol.cz> Received: from csnt.inf.upol.cz [158.194.80.80] by spohr.debian.org with esmtp (Exim 3.35 1 (Debian)) id 1DmZic-00063z-00; Sun, 26 Jun 2005 09:10:50 -0700 Received: from vychodil.inf.upol.cz ([158.194.80.12]) by CSNT.inf.upol.cz with Microsoft SMTPSVC(6.0.3790.1830); Sun, 26 Jun 2005 18:10:41 +0200 Received: from kurem by vychodil.inf.upol.cz with local (Exim 3.35 #1 (Debian)) id 1DmZeu-00043V-00 for <submit(a)bugs.debian.org>; Sun, 26 Jun 2005 18:07:00 +0200 Date: Sun, 26 Jun 2005 18:07:00 +0200 From: Miroslav Kure <kurem(a)upcase.inf.upol.cz> To: submit(a)bugs.debian.org Subject: [l10n] Initial Czech translation of drupal debconf messages Message-ID: <20050626160659.GA15588(a)vychodil.inf.upol.cz> Mime-Version: 1.0 Content-Type: multipart/mixed; boundary="mP3DRpeJDSE+ciuQ" Content-Disposition: inline User-Agent: Mutt/1.3.28i Sender: Miroslav Kure <kurem(a)vychodil.inf.upol.cz> X-OriginalArrivalTime: 26 Jun 2005 16:10:41.0177 (UTC) FILETIME=[9948D890:01C57A69] Delivered-To: submit(a)bugs.debian.org X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 (1.212-2003-09-23-exp) on spohr.debian.org X-Spam-Status: No, hits=-4.4 required=4.0 tests=BAYES_20,HAS_PACKAGE, UPPERCASE_25_50 autolearn=no version=2.60-bugs.debian.org_2005_01_02 X-Spam-Level: --mP3DRpeJDSE+ciuQ Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Package: drupal Severity: wishlist Tags: l10n, patch Hi, in attachement there is initial Czech translation (cs.po) of drupal debconf messages, please include it. -- Miroslav Kure --mP3DRpeJDSE+ciuQ Content-Type: text/plain; charset=iso-8859-2 Content-Disposition: attachment; filename="cs.po.gz" Content-Transfer-Encoding: quoted-printable =1F=8B=08=08>=D1=BEB=00=03cs.po=00=B5YMo=14I=12=BD=F3+R=80=04h=DC=1F6`=98^v= =18=C0=8C=86=DD=B1`=B1=99=91F+=AD=B2=AB=B2=BB=CB]=95Y=CA=8F=F6t#~=02=DA3=F2= =C9G=0E=D6=DCW=82K=DB=FFk_d=D6g=DBf=C0=06=0E=D0teF=BDx=11=F9"2=FA=DA=95k=0C= =7Fv5=97&=E5Vi=B3=C6=92=11=9B+=C7=B8=16L*=CBF<K=D2=84k=B6=9F=D8 =B3=13=C1^<= g#=A53n=D7=D8XX+=FE=B0=C1J=AC"=97 i=B9M=94d=89a=FBJc=8B=16<N=E4x=8D =93=8B(= =E1i:gFD=B4=C8=B0X=C4I=C4=AD=88=99U=C1=8A=9D`gi_t=C7]6=9C3=ED=A4=84=8DAX=E2= =FF$r=A4XG=B2=1B7=0B=10=B7=80=EB=A7$=15=E6=C6'W=FD=0C8B=B3=A7=D2=EA9V=86=B5= ;*=13~-=BD=96=D0{=A8=A3$=02,=96=ABN,=86=91=92#O =9F=F1$=E5=C3=14=9Fl=E3M=F8=D3sF=F7=CC=04=8Bz=E0=A2W=EF=EB=BD|=FAhk=FBi=C7= =12=CF=8D=3DJ=B3=89=B5=F9=A0=D7=DB=DF=DF=EFbq=C2eW=E9q/=916=ED=A5=EB}y=BE= =91`fK=CCD=AAr=A1A=A5=F2=F1=92=C2=93=C92.=9D=E7=1A=0C[=C4l=97=DEF=A1#=8A=BA= =D8=9F=99q=12=B3=ABW=E9=83=B1=9A>]}=A1=D5=1EB=D3y=16w~=85M01`=B1v9O=FF-=F1= =F8=A5=C8=11=D2=CE6=ED=EC<vc=D3=D9U=03=E6=1F=E1=05=9D'=085=B1=D7=D9BD=07l= =A3=DF=BF=DB=E9ot=FA=9B=AC=DF=1Fll~=D7_=EF=F7=8B=C5=9D=97b=96=98=D5=B5=9B= =9D=8DM=B6~=7F=D0_=FF=AE=BFQ=AC=FD=85=1B=DB=A9=13t=C0=B6=13=AD=F0y=C6=FE=E9= =10=8D=07S=FC=9D=FDXp=17-~(6=C9=B1=E3c=D1=D9=15<=1B=B0'=0B=11M=D8=83=B0=A8C= =BCv"=FA=EA=C741=D64=88=0F=BB=B7=9F=81=E6=CA=FF=F5n=00=F2DI=8B=EC=EE=EC=CEs= =00=A6\=EA=E5)O=E4=DFX=84=90=1Ba=FF=FEj=F7=A7=CE=FD=F6Z=C2=3D=12=BA=F3TF=8A= N=C1=80=DD=1F&=96=D6\=B9=D6e=C1=D4P=A9TpI_l =13=E9$'=12=AF\=1B=B0n=B7gE=86= =B7X=84,=03=11B=0F=EE=94=81{=E4=AC=A2l=8D|=94#=E2^=B0-=1F,=16s=CB=87=DC=88= =87ut=7F=9D=DB=99:y=87\=F0=0F=97=87=8B=A4X=8D=B3^=9A=9A=CE=1F~=05d =A0=C0A= =C9h=18=8F"a=0C%%=AF=90=AD1=9E*9=0E=AA=92=C8=C4B=18=92=05R=97=160 v=91Ed=0D= =9E1=D8S=9A=0E-,=8C=9C=F4=D2=C1rMi=9F=CE=81=95=14#=E2=92=0DEAC\{=E4=C9=81= =82xY=81=A1=9CGS$=C6=1AI=0C=DB=9E=EF=FC=EB=17=7F.=94=B1c-=E8=7F%@=D3m=9D=8C= G=B0Q8=05=08c5=C3=07=93=EB=E5=E1L=1E=1F=ACA#=EC=C9;1t{=82=E5'=EF=96G=C6=BA= =9CNd=C95^8=13l =9A=96=EF=D9=D0=C5=10X=18=9D=85=98=089/v=A5=EE=E4Pb=05=B6=A9=19=FE%=1E=A6= =E0=01^=E2hV=D6=C2=B3=B9=B1=CB=F7=D9=BC=F0B=8A=A1"=9B=0DW=8C =C6=E2=E5![p2O= B=D0=08u=F7=EB=84=FA=8C<D=A2=FBJQr &=10IR=A7=8CO=05pI|=87:=C3W=F3=95=1C=E0)= U=0C=E8=D6=1Ft8):X)U=BD=C6=08=3DC2L=B8A=C4=05=B4Z=10=D9=FB=13|,=CC=85P'=D2X= `=12=F1J$+=06@b=15=81=E5Q=1D+=86(.=86s+=8E=DFR0f!89=8F)=D2S@=DBKN>6=96W=F9= =EE=02hd=C1Z=88G=AE=A6.=86=81X=0D=8F=0FX=00=C4#Q=1D=BC=3Dqrh=F1Dz=00=12=E4= =F2=99=F0 =DF=08=F5=87=C2=E3K=C4k}=B3=0C=D8K'k&]=1E=93h=84=ED=0D=AD=D8=C9= =9D=B1H=163=A5=07t=D4=18G=1A=D2 =E5QR{~ =B1=A8=11=C1=D9gu=CB=E1=F2=B1=F6=FD= Bu=DA=B4=CA=18=0E=B7JI=01\=0E=80=D0t=9C&/=CFk=ED<=83=ADJ: =F1=C1 =18=96=9E=C6=85X=14"=E0E=03"Be?=08=84=E5f=EAs=B0=99=D3=ED=F4y=E1C=8A= =8C@=FD=00=07=CB#=10=88=1C@=E4=F4=C9!=82=08`=8B*=C0k,s=06_=02ZI =94=C3V=E7= =9A7C-=80=0EE=03xy=BA<:~+=A6=04=DEe=D8=8F=08=E0=C8=9B=AFu|[=E4?*Z=852=1B=F0= =AEH=C4D =08=A9=9B=1D=E8_=AE=D0=97Ph8=DB=17C6=D4j=DF=04U~P=B410w}=E7=D9=EE= =D3^=B0=D5=CD'=F9=0Fm=FA^::TG=8D|=F2=C7-S'=1F%=84=8Ax5d=DDK=9CV=8B *=A8?=1A= =D5;=CEz=C1=E5=89=D8m=A6=D1~=92=A6=945C=E4 =8A =D4=85=DA@=8D^K=86=F2=C9Re= =9A=05=82=C4=99=A0=C7b/=B1=80=BB=B0=A8=0Ct=B0=B1=98=E4^4=D4b=C1=17=CB=C3TM= =E0=E1=A1=E4-=F0F=A4=E8=BE>=13=FB=ED~=89}=AB=C4-=E48=91=A2Ly=03=E8=BE=BC=86= d=AC=D1n=B5=B4%=94=11=7F=C8=CB=85=0DDV#=E0=9F=8B=E8=EE)D=85VS=B1=0D=C6o=98= =8A=E6=F3=00=85-y=A3=DEU=E7=E9=C2=D0=EE=9C&=ABx=0F=8F3=B4=1F0F=DD%=91=A6=91= l=B8=0D=A0=C5=98=A0=94=B2=EB=AF=E9=9F75=D8W'=1F=13=9Ca=91=1A* {=D9=F2=3D=8A= Se=05aW=9A7=90#ssu=FC=16:=C1=8F=DF&=B5=B9=DA=91=9C=1B=83=ABR=FC=B9=AET,=BF(= 6zzW=CBc=DB=AF=EB=AF=C9=B37=E7{=F5=B30i=BB=C1=98=9C=F6=AA=B4=F2=0D}=A2s=88= =9Ey_=E8p =A9i=18=92=BC*Mm=9D=9C=A3=CEC=9A=A0=DAP-=1C=C7=96<?=8Fs5;>8=FE/ =AEL=A6=A8= =13V=A3S=A3Z=E0RH=CC=F2=A8{=E1=14=BA=BB^=A5=D0J=D3=A2=F6=A5=08=A9C=99=F3=17= =992Ka=0E=926=E5=A7=D2=FB+@=F3=E5=ADDR=E9=98=97=82=BA=81=85>=E0B)!5=F4=B1U@= =ABN=A3!=D9=D5.=AAFg=B9=94+=FAz=CF=97=0E=92=C1$=C7-=92T{=DAJ=A8=CC=15=E6]= =F7=12=A9r=F7=DE=A7=C3P=9A[M=ED=CF=E4=FD=C2h=9E=F9&=B5=DCN=B5=B3=98!=80zJY\= x=18jY=8Cn=A6ZT=C6g,=80=DC=F7'=8D=92=E2=FB=8CEL=B9=BB=E0h=E2-=A5t=84{=C4=DC= /=A7=AB=06e=F9=F2p=A2bjS'=E4=E6=C5=D3{=F3=CEy=BC=B6=93=FA=1F!=E6=9F=E2=F0= =CBj=F0=E6=F7Uo*25;u=87=0D=9D=3Dei=D9=B6=81[=ED=97=C6=0F=9Bg=9F=B4N=9Eq=BF= =F5)=C9Tx~|@=89YtXSw=89=0E=F6=DE=9D=15=DC=D4F=8A=86=10S=F7=80~=F5=8B=F1=FBF= "=9A=A8=055=12=BEU=987=E8=FE=D6=CE=E0=C0C=83=1B=F0=A9+/=E4=17w=F1=DE=8C=EB^= =9A=0C{a,=D4+V=15=8Du%=D9=C1?=EAn=C9=F1=C8i]=B6N=9E=1A=DF=D4=D3=93=AD=C7=DB= ;m=B5=F9=BD=F0x=CF=E0F=E0E=9B=AE=C7=B0u=FE=9B=97G=19=A4=892U=14=C4=80=15=BA =F0LY=EA*k=F6fmE*=BB=9F=B6"e.=B5=C9=17=F5b=F77J=FA~Cc=1CT=EE=A6=B9=05=17=A9= =D9=9F(=97=C6~:=A1=E4(=19;=BD:=A0=A8 =F8=CDw=BEe=13ts~k-=0C=0D=E8=1B=96=C1= =95pGl_=E4=9B=D8A=BE=F8\=D0U=F3=FB=8A=BA=9E=A8=98=DE=B1=11Z~=11=9F=9A=1CyE= =AF=F4=9F=C4'=9D=F0T]=F0=E5=DF=DF=AE=E6X=96=1E=FAR=94=A98=19=CD=0B=9A=FC=A4= =12=BD=05=FD=8F>=BE9=05=8C$=D20=C5=96=FF=CB5=9F96-=E8=E5=FE=8A=81=FE=05)4T= =DA=B5=8C=04=D8=17D=BD=DE?=DDG~=16ou=06^=8E=B6=F5=FE=BDS=00=AA=E9=D9=D90=9E= =A1j$=E5Uk=15=07=BF(=8E=F5=D3s=C8Ss=85U$=8D=C9=CBa=EB=02=F8=0DP=F9>=B2B=D6= =1At=14=B8=FC=E5:|=DFl=81=DAj=B4=E3' .=8C@*=F84=AB8k=1E=D2=BC=E7=93_R=E4*= =E6=10=EC=B4}=CF=FB=12=976n=9F&=BA=ED=0EM1=8A6Y;=D9=98=E24=A67=7F=0D]=8A=EC= =E4O=88-=1B.?@=B3r=E7'S=F2=F2=B0=C38<=1C=CC=90=A0=F4=0B=04S=8D=F1_Y=18=AF= =BFVi\Lv=DE=B0 =87=EA=FB =DFH9=19=AF=E1"m=CB=8AR=95R=8B=8C=19=D5=B3=C0=A2= =AER9B=CF=85=8A=8C=BE=0Bb=99=84=E9c=8E[{B=C3=0C=84=1ET=95=C6=CE=C9=93v&<=9E= =A7s=A8o*=16T=8F=DARS=08=CD=BC=9A=EB=85!P=CB=1D=1Ax=C3r(I=1F=E8=D5=F5=98=C7= =CF=13=87=F3=B4Q=D7=BB=ECw=A0=9CP=CF=1D=9F=FC9S=B1+=86=84aR=F2=9E"=B4:=A3k= =0E=AE=CE=0D=F4WHD=9A=82=A1=B70>=DF=88^\-&hm=19=1FY=9A=075=E2S=0Fi=9D=FF=11= `=E4hH\Of =F3=D3=04;t=98.=D1=1CP=AFN=97=AE=BF6=89=15=FF=D1J=D97=8D=C1=0F=8D= =86 @=E3g7=9A=A6=85=EE =F8cz=C5o>=8D]a=A0=88=AA,=D2tu=B4=87Rb=F2=E3=830=84/= =C7=B5I=DDa=C1S=90=C1=F6=C4=1E=CB=8E=0F=D2=A4=8A=C2=D0=E1=D2y=DE=F0 =A6%?=D7=0B?(&=ED @=AE=88=A7=C8Z=BF&=B6}"/W=DD=BApX=CF=18=DA=F8CD=A3=D7=15= =FD~=DE=EC:=BFZE=AB=01=EC=04=3DS=CE=E6=CE=0E=1A=85t=F9=C1=FF=9E=12=A8q=83= =CB=BF=E9=FAk-=0C=BA=BC=C6=00=A4=F1=D5=FF=01U=F2=A4=BA=16=1F=00=00 --mP3DRpeJDSE+ciuQ-- --------------------------------------- Received: (at 315869-close) by bugs.debian.org; 1 Jul 2005 16:21:19 +0000 >From katie(a)ftp-master.debian.org Fri Jul 01 09:21:19 2005 Return-path: <katie(a)ftp-master.debian.org> Received: from newraff.debian.org [208.185.25.31] (mail) by spohr.debian.org with esmtp (Exim 3.35 1 (Debian)) id 1DoOGV-0004Jg-00; Fri, 01 Jul 2005 09:21:19 -0700 Received: from katie by newraff.debian.org with local (Exim 3.35 1 (Debian)) id 1DoNyF-0001pJ-00; Fri, 01 Jul 2005 12:02:27 -0400 From: Hilko Bengen <bengen(a)debian.org> To: 315869-close(a)bugs.debian.org X-Katie: $Revision: 1.56 $ Subject: Bug#315869: fixed in drupal 4.5.4-1 Message-Id: <E1DoNyF-0001pJ-00(a)newraff.debian.org> Sender: Archive Administrator <katie(a)ftp-master.debian.org> Date: Fri, 01 Jul 2005 12:02:27 -0400 Delivered-To: 315869-close(a)bugs.debian.org X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 (1.212-2003-09-23-exp) on spohr.debian.org X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER autolearn=no version=2.60-bugs.debian.org_2005_01_02 X-Spam-Level: X-CrossAssassin-Score: 4 Source: drupal Source-Version: 4.5.4-1 We believe that the bug you reported is fixed in the latest version of drupal, which is due to be installed in the Debian FTP archive: drupal_4.5.4-1.diff.gz to pool/main/d/drupal/drupal_4.5.4-1.diff.gz drupal_4.5.4-1.dsc to pool/main/d/drupal/drupal_4.5.4-1.dsc drupal_4.5.4-1_all.deb to pool/main/d/drupal/drupal_4.5.4-1_all.deb drupal_4.5.4.orig.tar.gz to pool/main/d/drupal/drupal_4.5.4.orig.tar.gz A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 315869(a)bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Hilko Bengen <bengen(a)debian.org> (supplier of updated drupal package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster(a)debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.7 Date: Fri, 1 Jul 2005 17:27:59 +0200 Source: drupal Binary: drupal Architecture: source all Version: 4.5.4-1 Distribution: unstable Urgency: high Maintainer: Hilko Bengen <bengen(a)debian.org> Changed-By: Hilko Bengen <bengen(a)debian.org> Description: drupal - fully-featured content management/discussion engine Closes: 313449 313702 315869 316362 Changes: drupal (4.5.4-1) unstable; urgency=HIGH . * New upstream version (Closes: #316362) - Fixes two serious security bugs (see http://drupal.org/files/sa-2005-002/advisory.txt and http://drupal.org/files/sa-2005-003/advisory.txt) * README.Debian now mentions that the site-wide configuration files are to be found in /etc/drupal (Closes: #313449) * [Jens Seidel <jensseidel(a)users.sf.net>] Corrected minor typos in German Debconf translation (Closes: #313702) * [Miroslav Kure <kurem(a)upcase.inf.upol.cz>] Added Czech Debconf translation (Closes: #315869) Files: a8c9a11230369f6fad46e91b8b1d4306 609 web extra drupal_4.5.4-1.dsc 53f8c8a65a02b5328945d6bade47691c 472270 web extra drupal_4.5.4.orig.tar.gz 70a127c9abf132e95c93fe3776e7828c 42560 web extra drupal_4.5.4-1.diff.gz 4578b3442f901b012409d1e5a72b1206 488206 web extra drupal_4.5.4-1_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.1 (GNU/Linux) iD8DBQFCxWeSUCgnLz/SlGgRArJBAKDWDC56uEeIWdb8E5fFJhTl6gLvlQCeL3HC 4Rz2eHTwqaMKSP6e0RPxMm4= =WEB1 -----END PGP SIGNATURE-----

1 0

[drupal-devel] Bug#313702: marked as done (drupal: [INTL:de] German PO file corrections)
by owner＠bugs.debian.org 01 Jul '05

01 Jul '05

Your message dated Fri, 01 Jul 2005 12:02:27 -0400 with message-id <E1DoNyF-0001pH-00(a)newraff.debian.org> and subject line Bug#313702: fixed in drupal 4.5.4-1 has caused the attached Bug report to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what I am talking about this indicates a serious mail system misconfiguration somewhere. Please contact me immediately.) Debian bug tracking system administrator (administrator, Debian Bugs database) -------------------------------------- Received: (at maintonly) by bugs.debian.org; 14 Jun 2005 21:30:07 +0000 >From tux-master(a)web.de Tue Jun 14 14:30:07 2005 Return-path: <tux-master(a)web.de> Received: from smtp05.web.de [217.72.192.209] by spohr.debian.org with esmtp (Exim 3.35 1 (Debian)) id 1DiIz1-0004Ks-00; Tue, 14 Jun 2005 14:30:07 -0700 Received: from [84.180.153.47] (helo=pluto.sol) by smtp05.web.de with asmtp (TLSv1:DES-CBC3-SHA:168) (WEB.DE 4.105 #291) id 1DiIyV-00021S-00 for maintonly(a)bugs.debian.org; Tue, 14 Jun 2005 23:29:37 +0200 Received: from jens by pluto.sol with local (Exim 4.50) id 1DiIx3-0006QG-Ei; Tue, 14 Jun 2005 23:28:05 +0200 Date: Tue, 14 Jun 2005 23:28:05 +0200 From: Jens Seidel <jensseidel(a)users.sf.net> To: maintonly(a)bugs.debian.org Subject: drupal: [INTL:de] German PO file corrections Message-ID: <20050614212805.GA24688@pluto> Mime-Version: 1.0 Content-Type: multipart/mixed; boundary="u3/rZRmxL6MmkK24" Content-Disposition: inline Content-Transfer-Encoding: 8bit User-Agent: Mutt/1.5.9i Sender: tux-master(a)web.de X-Sender: tux-master(a)web.de Delivered-To: maintonly(a)bugs.debian.org X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 (1.212-2003-09-23-exp) on spohr.debian.org X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE autolearn=no version=2.60-bugs.debian.org_2005_01_02 X-Spam-Level: --u3/rZRmxL6MmkK24 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Package: drupal Version: 4.5.3-2 Severity: minor Tags: patch l10n Hi, attached you will find an update of the German PO file de.po. Note that this is a semi automatic created mail which contains all issues I found during checking most of Debians German PO files. This includes also encoding but mostly typo fixes. Please contact upstream for non-native Debian packages to incorporate the changes (even if Debians version is old) since I noticed that the same errors are made again and again over all packages. Jens --u3/rZRmxL6MmkK24 Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: attachment; filename="de.po.diff" Content-Transfer-Encoding: 8bit --- de.po.gz.orig/drupal_4.5.3-2_de.po 2005-06-11 16:42:49.000000000 +0200 +++ de.po.gz/drupal_4.5.3-2_de.po 2005-06-14 18:17:44.000000000 +0200 @@ -39,7 +39,7 @@ "package, for MySQL or PostgreSQL databases." msgstr "" "Drupal benötigt Zugang zu einer Datenbank und vorbereiteteDatenstrukturen. " -"Diese Datenbnk kann automatisch von diesem Paketangelegt werden; zur Auswahl " +"Diese Datenbank kann automatisch von diesem Paketangelegt werden; zur Auswahl " "stehen MySQL- oder PostgreSQL-Datenbanken." #. Type: boolean @@ -50,7 +50,7 @@ "already exists or if no database server has been setup when Drupal is " "installed." msgstr "" -"Automatisches Anlegen der Datenbank st nicht sinnvoll, falls bereits eine " +"Automatisches Anlegen der Datenbank ist nicht sinnvoll, falls bereits eine " "Drupal-Datenbank existiert oder falls zur Installationszeit kein " "Datenbanksystem installiert und eingerichtet ist." --u3/rZRmxL6MmkK24-- --------------------------------------- Received: (at 313702-close) by bugs.debian.org; 1 Jul 2005 16:21:18 +0000 >From katie(a)ftp-master.debian.org Fri Jul 01 09:21:18 2005 Return-path: <katie(a)ftp-master.debian.org> Received: from newraff.debian.org [208.185.25.31] (mail) by spohr.debian.org with esmtp (Exim 3.35 1 (Debian)) id 1DoOGU-0004JI-00; Fri, 01 Jul 2005 09:21:18 -0700 Received: from katie by newraff.debian.org with local (Exim 3.35 1 (Debian)) id 1DoNyF-0001pH-00; Fri, 01 Jul 2005 12:02:27 -0400 From: Hilko Bengen <bengen(a)debian.org> To: 313702-close(a)bugs.debian.org X-Katie: $Revision: 1.56 $ Subject: Bug#313702: fixed in drupal 4.5.4-1 Message-Id: <E1DoNyF-0001pH-00(a)newraff.debian.org> Sender: Archive Administrator <katie(a)ftp-master.debian.org> Date: Fri, 01 Jul 2005 12:02:27 -0400 Delivered-To: 313702-close(a)bugs.debian.org X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 (1.212-2003-09-23-exp) on spohr.debian.org X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER autolearn=no version=2.60-bugs.debian.org_2005_01_02 X-Spam-Level: X-CrossAssassin-Score: 3 Source: drupal Source-Version: 4.5.4-1 We believe that the bug you reported is fixed in the latest version of drupal, which is due to be installed in the Debian FTP archive: drupal_4.5.4-1.diff.gz to pool/main/d/drupal/drupal_4.5.4-1.diff.gz drupal_4.5.4-1.dsc to pool/main/d/drupal/drupal_4.5.4-1.dsc drupal_4.5.4-1_all.deb to pool/main/d/drupal/drupal_4.5.4-1_all.deb drupal_4.5.4.orig.tar.gz to pool/main/d/drupal/drupal_4.5.4.orig.tar.gz A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 313702(a)bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Hilko Bengen <bengen(a)debian.org> (supplier of updated drupal package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster(a)debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.7 Date: Fri, 1 Jul 2005 17:27:59 +0200 Source: drupal Binary: drupal Architecture: source all Version: 4.5.4-1 Distribution: unstable Urgency: high Maintainer: Hilko Bengen <bengen(a)debian.org> Changed-By: Hilko Bengen <bengen(a)debian.org> Description: drupal - fully-featured content management/discussion engine Closes: 313449 313702 315869 316362 Changes: drupal (4.5.4-1) unstable; urgency=HIGH . * New upstream version (Closes: #316362) - Fixes two serious security bugs (see http://drupal.org/files/sa-2005-002/advisory.txt and http://drupal.org/files/sa-2005-003/advisory.txt) * README.Debian now mentions that the site-wide configuration files are to be found in /etc/drupal (Closes: #313449) * [Jens Seidel <jensseidel(a)users.sf.net>] Corrected minor typos in German Debconf translation (Closes: #313702) * [Miroslav Kure <kurem(a)upcase.inf.upol.cz>] Added Czech Debconf translation (Closes: #315869) Files: a8c9a11230369f6fad46e91b8b1d4306 609 web extra drupal_4.5.4-1.dsc 53f8c8a65a02b5328945d6bade47691c 472270 web extra drupal_4.5.4.orig.tar.gz 70a127c9abf132e95c93fe3776e7828c 42560 web extra drupal_4.5.4-1.diff.gz 4578b3442f901b012409d1e5a72b1206 488206 web extra drupal_4.5.4-1_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.1 (GNU/Linux) iD8DBQFCxWeSUCgnLz/SlGgRArJBAKDWDC56uEeIWdb8E5fFJhTl6gLvlQCeL3HC 4Rz2eHTwqaMKSP6e0RPxMm4= =WEB1 -----END PGP SIGNATURE-----

1 0

[drupal-devel] Bug#313449: marked as done (drupal: Virtual Domain implementation/documentation flawed)
by owner＠bugs.debian.org 01 Jul '05

01 Jul '05

Your message dated Fri, 01 Jul 2005 12:02:27 -0400 with message-id <E1DoNyF-0001pF-00(a)newraff.debian.org> and subject line Bug#313449: fixed in drupal 4.5.4-1 has caused the attached Bug report to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what I am talking about this indicates a serious mail system misconfiguration somewhere. Please contact me immediately.) Debian bug tracking system administrator (administrator, Debian Bugs database) -------------------------------------- Received: (at submit) by bugs.debian.org; 13 Jun 2005 19:01:07 +0000 >From tcharron(a)vito.badkarma.mine.nu Mon Jun 13 12:01:07 2005 Return-path: <tcharron(a)vito.badkarma.mine.nu> Received: from www.toddcharron.com (badkarma.mine.nu) [216.8.139.42] by spohr.debian.org with smtp (Exim 3.35 1 (Debian)) id 1DhuBH-0003rG-00; Mon, 13 Jun 2005 12:01:07 -0700 Received: (qmail 29613 invoked by uid 1000); 13 Jun 2005 19:01:03 -0000 Message-ID: <20050613190103.29612.qmail(a)badkarma.mine.nu> Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit From: Todd Charron <tcharron(a)vito.badkarma.mine.nu> To: Debian Bug Tracking System <submit(a)bugs.debian.org> Subject: drupal: Virtual Domain implementation/documentation flawed X-Mailer: reportbug 3.8 Date: Mon, 13 Jun 2005 15:01:03 -0400 Delivered-To: submit(a)bugs.debian.org X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 (1.212-2003-09-23-exp) on spohr.debian.org X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE autolearn=no version=2.60-bugs.debian.org_2005_01_02 X-Spam-Level: Package: drupal Version: 4.5.3-2 Severity: normal According to the README.Debian file virtual hosts have the user create a conf file in /etc/drupal/hostname.conf. Earlier however the README.Debian refers to includes/www.yourserver.com.php (this appears to be from the drupal install docs). The debian-update.php script seems to follow the latter. It uses the HTTP_HOST server variable (which would produce something like www.yourserver.com and appends .php on the end. It also looks in the include/ dir for the file. Shouldn't the config file be www.yourserver.com.php and located in /etc/drupal/? If so, then line 70 in debian-update.php should use /etc/drupal/ instead of include/ and the docs should be updated accordingly. Todd -- System Information: Debian Release: 3.1 Architecture: i386 (i686) Kernel: Linux 2.6.8-2-686 Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968) Versions of packages drupal depends on: ii apache 1.3.33-6 versatile, high-performance HTTP s ii apache2 2.0.54-4 next generation, scalable, extenda ii apache2-mpm-prefork [apache2 2.0.54-4 traditional model for Apache2 ii debconf 1.4.30.13 Debian configuration management sy ii makepasswd 1.10-2 Generate and encrypt passwords ii mysql-client [virtual-mysql- 4.0.24-10 mysql database client binaries ii php4-cli 4:4.3.10-15 command-line interpreter for the p ii php4-mysql 4:4.3.10-15 MySQL module for php4 ii qmail [mail-transport-agent] 1.03-24 Secure, reliable, efficient, simpl ii wwwconfig-common 0.0.43 Debian web auto configuration -- debconf information: * drupal/remove_backups: false drupal/createuser_failed: * drupal/db_auto_update: false drupal/dropdb_failed: drupal/upgradedb_impossible: * drupal/dbgeneration: false drupal/dbtype: MySQL drupal/database_doremove: false drupal/createdb_failed: drupal/dbserver: localhost * drupal/webserver: apache2 drupal/upgradedb_failed: drupal/dbname: drupal drupal/dbuser: drupal drupal/dbadmin: root drupal/initdb_failed: drupal/conffile_failed: --------------------------------------- Received: (at 313449-close) by bugs.debian.org; 1 Jul 2005 16:13:06 +0000 >From katie(a)ftp-master.debian.org Fri Jul 01 09:13:06 2005 Return-path: <katie(a)ftp-master.debian.org> Received: from newraff.debian.org [208.185.25.31] (mail) by spohr.debian.org with esmtp (Exim 3.35 1 (Debian)) id 1DoO8Y-00015i-00; Fri, 01 Jul 2005 09:13:06 -0700 Received: from katie by newraff.debian.org with local (Exim 3.35 1 (Debian)) id 1DoNyF-0001pF-00; Fri, 01 Jul 2005 12:02:27 -0400 From: Hilko Bengen <bengen(a)debian.org> To: 313449-close(a)bugs.debian.org X-Katie: $Revision: 1.56 $ Subject: Bug#313449: fixed in drupal 4.5.4-1 Message-Id: <E1DoNyF-0001pF-00(a)newraff.debian.org> Sender: Archive Administrator <katie(a)ftp-master.debian.org> Date: Fri, 01 Jul 2005 12:02:27 -0400 Delivered-To: 313449-close(a)bugs.debian.org X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 (1.212-2003-09-23-exp) on spohr.debian.org X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER autolearn=no version=2.60-bugs.debian.org_2005_01_02 X-Spam-Level: X-CrossAssassin-Score: 2 Source: drupal Source-Version: 4.5.4-1 We believe that the bug you reported is fixed in the latest version of drupal, which is due to be installed in the Debian FTP archive: drupal_4.5.4-1.diff.gz to pool/main/d/drupal/drupal_4.5.4-1.diff.gz drupal_4.5.4-1.dsc to pool/main/d/drupal/drupal_4.5.4-1.dsc drupal_4.5.4-1_all.deb to pool/main/d/drupal/drupal_4.5.4-1_all.deb drupal_4.5.4.orig.tar.gz to pool/main/d/drupal/drupal_4.5.4.orig.tar.gz A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 313449(a)bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Hilko Bengen <bengen(a)debian.org> (supplier of updated drupal package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster(a)debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.7 Date: Fri, 1 Jul 2005 17:27:59 +0200 Source: drupal Binary: drupal Architecture: source all Version: 4.5.4-1 Distribution: unstable Urgency: high Maintainer: Hilko Bengen <bengen(a)debian.org> Changed-By: Hilko Bengen <bengen(a)debian.org> Description: drupal - fully-featured content management/discussion engine Closes: 313449 313702 315869 316362 Changes: drupal (4.5.4-1) unstable; urgency=HIGH . * New upstream version (Closes: #316362) - Fixes two serious security bugs (see http://drupal.org/files/sa-2005-002/advisory.txt and http://drupal.org/files/sa-2005-003/advisory.txt) * README.Debian now mentions that the site-wide configuration files are to be found in /etc/drupal (Closes: #313449) * [Jens Seidel <jensseidel(a)users.sf.net>] Corrected minor typos in German Debconf translation (Closes: #313702) * [Miroslav Kure <kurem(a)upcase.inf.upol.cz>] Added Czech Debconf translation (Closes: #315869) Files: a8c9a11230369f6fad46e91b8b1d4306 609 web extra drupal_4.5.4-1.dsc 53f8c8a65a02b5328945d6bade47691c 472270 web extra drupal_4.5.4.orig.tar.gz 70a127c9abf132e95c93fe3776e7828c 42560 web extra drupal_4.5.4-1.diff.gz 4578b3442f901b012409d1e5a72b1206 488206 web extra drupal_4.5.4-1_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.1 (GNU/Linux) iD8DBQFCxWeSUCgnLz/SlGgRArJBAKDWDC56uEeIWdb8E5fFJhTl6gLvlQCeL3HC 4Rz2eHTwqaMKSP6e0RPxMm4= =WEB1 -----END PGP SIGNATURE-----

1 0

[drupal-devel] Bug#316362: marked as done (security problem with drupal)
by owner＠bugs.debian.org 01 Jul '05

01 Jul '05

Your message dated Fri, 01 Jul 2005 12:02:27 -0400 with message-id <E1DoNyF-0001pM-00(a)newraff.debian.org> and subject line Bug#316362: fixed in drupal 4.5.4-1 has caused the attached Bug report to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what I am talking about this indicates a serious mail system misconfiguration somewhere. Please contact me immediately.) Debian bug tracking system administrator (administrator, Debian Bugs database) -------------------------------------- Received: (at submit) by bugs.debian.org; 30 Jun 2005 12:34:00 +0000 >From villain(a)ems.ru Thu Jun 30 05:34:00 2005 Return-path: <villain(a)ems.ru> Received: from router.ems.ru (relay-suttk.ems.ru) [62.165.34.129] by spohr.debian.org with esmtp (Exim 3.35 1 (Debian)) id 1DnyEy-0004zm-00; Thu, 30 Jun 2005 05:34:00 -0700 Received: from mail.ems.ru (localhost [127.0.0.1]) by mail.ems.ru (postfix) with ESMTP id 125C31AA68A for <submit(a)bugs.debian.org>; Thu, 30 Jun 2005 18:33:59 +0600 (YEKST) Received: from support.office.ems.chel.su (unknown [195.54.20.1]) by mail.ems.ru (postfix) with ESMTP for <submit(a)bugs.debian.org>; Thu, 30 Jun 2005 18:33:59 +0600 (YEKST) Received: by support.office.ems.chel.su (Postfix, from userid 1000) id C0EA22C56D; Thu, 30 Jun 2005 18:33:55 +0600 (YEKST) Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit From: Aleksey I Zavilohin <villain(a)ems.ru> To: Debian Bug Tracking System <submit(a)bugs.debian.org> Subject: security problem with drupal X-Mailer: reportbug 3.8 Date: Thu, 30 Jun 2005 18:33:55 +0600 Message-Id: <20050630123355.C0EA22C56D(a)support.office.ems.chel.su> X-Virus-Scanned: ClamAV using ClamSMTP Delivered-To: submit(a)bugs.debian.org X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 (1.212-2003-09-23-exp) on spohr.debian.org X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE autolearn=no version=2.60-bugs.debian.org_2005_01_02 X-Spam-Level: Package: drupal Version: 4.5.3-2 Severity: grave Justification: user security hole See http://drupal.org/files/sa-2005-002/advisory.txt ---------------------------------------------------------------------------- Drupal security advisory DRUPAL-SA-2005-002 ---------------------------------------------------------------------------- Advisory ID: DRUPAL-SA-2005-002 Date: 2005-jun-29 Security risk: highly critical Impact: system access Where: from remote Vulnerability: arbitrary PHP code execution ---------------------------------------------------------------------------- Description ----------- Kuba Zygmunt discovered a flaw in the input validation routines of Drupal's filter mechanism. An attacker could execute arbitrary PHP code on a target site when public comments or postings are allowed. Versions affected ----------------- Drupal 4.5.0, 4.5.1, 4.5.2, 4.5.3 Drupal 4.6.0, 4.6.1 Solution -------- Either disable public comments and postings, or upgrade to the latest Drupal version: - If you cannot upgrade immediately, you can secure your site by disabling public postings and comments. Log in as an administrator, go to "administer >> access control" and make sure that untrusted roles don't have the permissions to submit or edit content. - If you are running Drupal 4.5.x, then upgrade to Drupal 4.5.4. - If you are running Drupal 4.6.x, then upgrade to Drupal 4.6.2. Contact ------- The security contact for Drupal can be reached at security(a)drupal.org or using the form at http://drupal.org/contact. -- System Information: Debian Release: 3.1 APT prefers testing APT policy: (500, 'testing') Architecture: i386 (i686) Kernel: Linux 2.6.8-2-686 Locale: LANG=ru_RU.KOI8-R, LC_CTYPE=ru_RU.KOI8-R (charmap=KOI8-R) Versions of packages drupal depends on: ii apache 1.3.33-6 versatile, high-performance HTTP s ii debconf 1.4.30.13 Debian configuration management sy ii makepasswd 1.10-2 Generate and encrypt passwords ii mysql-client-4.1 [mysql-clie 4.1.11a-4 mysql database client binaries ii php4-cli 4:4.3.10-15 command-line interpreter for the p ii php4-mysql 4:4.3.10-15 MySQL module for php4 ii postfix [mail-transport-agen 2.1.5-9 A high-performance mail transport ii wwwconfig-common 0.0.43 Debian web auto configuration -- debconf information excluded --------------------------------------- Received: (at 316362-close) by bugs.debian.org; 1 Jul 2005 16:08:05 +0000 >From katie(a)ftp-master.debian.org Fri Jul 01 09:08:05 2005 Return-path: <katie(a)ftp-master.debian.org> Received: from newraff.debian.org [208.185.25.31] (mail) by spohr.debian.org with esmtp (Exim 3.35 1 (Debian)) id 1DoO3g-0006Tk-00; Fri, 01 Jul 2005 09:08:05 -0700 Received: from katie by newraff.debian.org with local (Exim 3.35 1 (Debian)) id 1DoNyF-0001pM-00; Fri, 01 Jul 2005 12:02:27 -0400 From: Hilko Bengen <bengen(a)debian.org> To: 316362-close(a)bugs.debian.org X-Katie: $Revision: 1.56 $ Subject: Bug#316362: fixed in drupal 4.5.4-1 Message-Id: <E1DoNyF-0001pM-00(a)newraff.debian.org> Sender: Archive Administrator <katie(a)ftp-master.debian.org> Date: Fri, 01 Jul 2005 12:02:27 -0400 Delivered-To: 316362-close(a)bugs.debian.org X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 (1.212-2003-09-23-exp) on spohr.debian.org X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER autolearn=no version=2.60-bugs.debian.org_2005_01_02 X-Spam-Level: Source: drupal Source-Version: 4.5.4-1 We believe that the bug you reported is fixed in the latest version of drupal, which is due to be installed in the Debian FTP archive: drupal_4.5.4-1.diff.gz to pool/main/d/drupal/drupal_4.5.4-1.diff.gz drupal_4.5.4-1.dsc to pool/main/d/drupal/drupal_4.5.4-1.dsc drupal_4.5.4-1_all.deb to pool/main/d/drupal/drupal_4.5.4-1_all.deb drupal_4.5.4.orig.tar.gz to pool/main/d/drupal/drupal_4.5.4.orig.tar.gz A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 316362(a)bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Hilko Bengen <bengen(a)debian.org> (supplier of updated drupal package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster(a)debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.7 Date: Fri, 1 Jul 2005 17:27:59 +0200 Source: drupal Binary: drupal Architecture: source all Version: 4.5.4-1 Distribution: unstable Urgency: high Maintainer: Hilko Bengen <bengen(a)debian.org> Changed-By: Hilko Bengen <bengen(a)debian.org> Description: drupal - fully-featured content management/discussion engine Closes: 313449 313702 315869 316362 Changes: drupal (4.5.4-1) unstable; urgency=HIGH . * New upstream version (Closes: #316362) - Fixes two serious security bugs (see http://drupal.org/files/sa-2005-002/advisory.txt and http://drupal.org/files/sa-2005-003/advisory.txt) * README.Debian now mentions that the site-wide configuration files are to be found in /etc/drupal (Closes: #313449) * [Jens Seidel <jensseidel(a)users.sf.net>] Corrected minor typos in German Debconf translation (Closes: #313702) * [Miroslav Kure <kurem(a)upcase.inf.upol.cz>] Added Czech Debconf translation (Closes: #315869) Files: a8c9a11230369f6fad46e91b8b1d4306 609 web extra drupal_4.5.4-1.dsc 53f8c8a65a02b5328945d6bade47691c 472270 web extra drupal_4.5.4.orig.tar.gz 70a127c9abf132e95c93fe3776e7828c 42560 web extra drupal_4.5.4-1.diff.gz 4578b3442f901b012409d1e5a72b1206 488206 web extra drupal_4.5.4-1_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.1 (GNU/Linux) iD8DBQFCxWeSUCgnLz/SlGgRArJBAKDWDC56uEeIWdb8E5fFJhTl6gLvlQCeL3HC 4Rz2eHTwqaMKSP6e0RPxMm4= =WEB1 -----END PGP SIGNATURE-----

1 0