[LINK] Drupal for whitehouse.gov

[grove at zeta.org.au]

On Mon, 26 Oct 2009, stephen at melbpc.org.au wrote:

> Yet the system — known as Drupal — alone won't make it more secure on its
> own, cautioned Ari Schwartz of the Center for Democracy and Technology.
>
> "The platform that they're moving to is just something to hang other
> things on," he said. "They need to keep up-to-date with the latest
> security patches."

And Drupal just got a whole slew of those.....

ESB-2009.1432 - [Win][UNIX/Linux] Drupal Third Party Modules: Execute arbitrary code/commands - Remote/unauthenticated
(22/10/2009)

ESB-2009.1421 - [Win][UNIX/Linux] Webform (Drupal third-party module): Administrator compromise - Remote with user interaction
(15/10/2009)

ESB-2009.1418.2 - UPDATE [Win][UNIX/Linux] Drupal third-party modules: Multiple vulnerabilities
(15/10/2009)

ESB-2009.1390 - [Win][UNIX/Linux] Shared Sign On (Drupal third-party module): Multiple vulnerabilities
(12/10/2009)

ESB-2009.1299.2 - UPDATE [Win][UNIX/Linux] Drupal third-party modules: Cross-site request forgery - Existing account
(07/10/2009)

ESB-2009.1359.2 - UPDATE [Win][UNIX/Linux] Drupal third-party modules: Multiple vulnerabilities
(01/10/2009)

ESB-2009.1336.2 - UPDATE [Win][UNIX/Linux] Meta tags / Nodewords, Markdown Preview, Devel (Drupal third-party modules):: Multiple vulnerabilities
(29/09/2009)

ESB-2009.1298 - [Win][UNIX/Linux] Drupal core: Cross-site request forgery - Existing account
(17/09/2009)




-- 
Rachel Polanskis                 Kingswood, Greater Western Sydney, Australia
grove at zeta.org.au                http://www.zeta.org.au/~grove/grove.html
    "The perversity of the Universe tends towards a maximum." - Finagle's Law