Your message dated Wed, 17 Aug 2005 05:17:05 -0700 with message-id <E1E5Mqv-0008Tc-00@spohr.debian.org> and subject line Bug#316903: fixed in drupal 4.5.5-1 has caused the attached Bug report to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what I am talking about this indicates a serious mail system misconfiguration somewhere. Please contact me immediately.) Debian bug tracking system administrator (administrator, Debian Bugs database) -------------------------------------- Received: (at submit) by bugs.debian.org; 4 Jul 2005 17:49:13 +0000

From md@linux.it Mon Jul 04 10:49:13 2005 Return-path: <md@linux.it> Received: from attila.bofh.it [213.92.8.2] (postfix) by spohr.debian.org with esmtp (Exim 3.35 1 (Debian)) id 1DpV4D-00023Z-00; Mon, 04 Jul 2005 10:49:13 -0700 Received: by attila.bofh.it (Postfix, from userid 10) id B08185F7DA; Mon, 4 Jul 2005 19:49:11 +0200 (CEST) Received: by wonderland.linux.it (Postfix, from userid 1001) id E95701C544; Mon, 4 Jul 2005 19:37:32 +0200 (CEST) Date: Mon, 4 Jul 2005 19:37:32 +0200 From: Marco d'Itri <md@linux.it> To: Debian Bug Tracking System <submit@bugs.debian.org> Subject: the cron job breaks when not site is configured Message-ID: <20050704173732.GA7901@wonderland.linux.it> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="HcAYCG3uE/tztfnV" Content-Disposition: inline X-Reportbug-Version: 3.15 X-Debbugs-Cc: md@linux.it User-Agent: Mutt/1.5.9i Delivered-To: submit@bugs.debian.org X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 (1.212-2003-09-23-exp) on spohr.debian.org X-Spam-Status: No, hits=-11.0 required=4.0 tests=BAYES_00,HAS_PACKAGE, X_DEBBUGS_CC autolearn=ham version=2.60-bugs.debian.org_2005_01_02 X-Spam-Level:

--HcAYCG3uE/tztfnV Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Package: drupal Severity: normal Tags: patch /usr/share/drupal/scripts/cron.sh: for i in /etc/drupal/*.php; do + test -e $i || continue Or it will break when there are no *.php files in /etc/drupal/. --=20 ciao, Marco --HcAYCG3uE/tztfnV Content-Type: application/pgp-signature; name="signature.asc" Content-Description: Digital signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.1 (GNU/Linux) iD8DBQFCyXPcFGfw2OHuP7ERAj4CAJ9LNb/5VUT7RN39d0KNCdkJXDn+OwCgggk9 lwKJv9mt7JEzZ6PDSWOqhGI= =Q5vV -----END PGP SIGNATURE----- --HcAYCG3uE/tztfnV-- --------------------------------------- Received: (at 316903-close) by bugs.debian.org; 17 Aug 2005 12:22:11 +0000

From katie@spohr.debian.org Wed Aug 17 05:22:11 2005 Return-path: <katie@spohr.debian.org> Received: from katie by spohr.debian.org with local (Exim 3.36 1 (Debian)) id 1E5Mqv-0008Tc-00; Wed, 17 Aug 2005 05:17:05 -0700 From: Hilko Bengen <bengen@debian.org> To: 316903-close@bugs.debian.org X-Katie: $Revision: 1.56 $ Subject: Bug#316903: fixed in drupal 4.5.5-1 Message-Id: <E1E5Mqv-0008Tc-00@spohr.debian.org> Sender: Archive Administrator <katie@spohr.debian.org> Date: Wed, 17 Aug 2005 05:17:05 -0700 Delivered-To: 316903-close@bugs.debian.org X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 (1.212-2003-09-23-exp) on spohr.debian.org X-Spam-Level: X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER autolearn=no version=2.60-bugs.debian.org_2005_01_02

Source: drupal Source-Version: 4.5.5-1 We believe that the bug you reported is fixed in the latest version of drupal, which is due to be installed in the Debian FTP archive: drupal_4.5.5-1.diff.gz to pool/main/d/drupal/drupal_4.5.5-1.diff.gz drupal_4.5.5-1.dsc to pool/main/d/drupal/drupal_4.5.5-1.dsc drupal_4.5.5-1_all.deb to pool/main/d/drupal/drupal_4.5.5-1_all.deb drupal_4.5.5.orig.tar.gz to pool/main/d/drupal/drupal_4.5.5.orig.tar.gz A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 316903@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Hilko Bengen <bengen@debian.org> (supplier of updated drupal package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.7 Date: Tue, 16 Aug 2005 02:15:26 +0200 Source: drupal Binary: drupal Architecture: source all Version: 4.5.5-1 Distribution: unstable Urgency: high Maintainer: Hilko Bengen <bengen@debian.org> Changed-By: Hilko Bengen <bengen@debian.org> Description: drupal - fully-featured content management/discussion engine Closes: 316903 Changes: drupal (4.5.5-1) unstable; urgency=HIGH . * Justification: Fixes security vulnerability * New upstream version - Fixes the following XMLRPC vulnerability: CAN-2005-2498 / DRUPAL-SA-2005-004: Through the bundled xmlrpc module, an attacker could execute arbitrary PHP code on the target site (see http://drupal.org/files/sa-2005-004/advisory.txt). * cron.sh fix for the case when no sites are configured (Closes: #316903) Files: 27ed51e1f53ff6024bdd23a9e87b3646 609 web extra drupal_4.5.5-1.dsc c09b71288678f73c42317f77de8d2f1d 465874 web extra drupal_4.5.5.orig.tar.gz 165c46da155ec19dc7457017fae4f479 42749 web extra drupal_4.5.5-1.diff.gz f1c6692e296fdeaa0ba125feac88215b 482908 web extra drupal_4.5.5-1_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.1 (GNU/Linux) iD8DBQFDAToMUCgnLz/SlGgRAtflAJ417u+ILQUxTwNw6sJWr+yO1liRAgCgrkux v3/Ts61dYqZIQ3UtmjVNvCg= =ufAw -----END PGP SIGNATURE-----