[pkgsrc/trunk]: pkgsrc/www/drupal Update to 5.13

[adrianp <adrianp%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/356e86b18e9e
branches:  trunk
changeset: 551238:356e86b18e9e
user:      adrianp <adrianp%pkgsrc.org@localhost>
date:      Wed Dec 10 23:55:39 2008 +0000

description:
Update to 5.13

This release fixes security vulnerabilities. Sites are urged to upgrade immediately after reading the security announcement:

* SA-2008-073 - Drupal core - Multiple vulnerabilities

In addition to this security vulnerability, the following bugs have been fixed since the 5.12 release:

* #318102 by Damien Tournoud and Dave Reid: hook_exit() not invoked for some cached requests.
* #278821 by teezee. More isset() checking.
* #293612 by egfrith, Bart Jansens: let user_authenticate() be called without cookies previously set; allows web service modules to start a session with the authentication.
* #123556 by maartenvg and dvdweide. Do not show empty user info categories.
* #294450 by blakehall. Match up DB and form max length.
* More code style removing trivial differences with 6.x.
* #195161 by mcarbone with some modifications: only show 'login to post comments' if logging in actually lets you post comments. Backport by salvis.
* - Patch #342988 by ultimateboy: fixed order of attributes in PHPdoc.
* #280934 follow up by pwolanin: harden the cookie handling in sess_regenerate() by setting our session cookie to be an HTTP only cookie, thus reducing the risk of session stealing via XSS
* #324875 by pwolanin: improve HTTP_HOST checking, ensuring that the host is lowercased and only valid characters are allowed.
* #28776 by Uwe Hermann, Morbus Iff, jvandyk: Protect *.test files and SVN metafiles from being exposed under Drupal
* #299582 by hass: Remove outdated items from robots.txt and fix ordering of items to make stuff easier to find.

http://drupal.org/node/345467

diffstat:

 www/drupal/Makefile |  4 ++--
 www/drupal/distinfo |  8 ++++----
 2 files changed, 6 insertions(+), 6 deletions(-)

diffs (25 lines):

diff -r 15eec49c2d40 -r 356e86b18e9e www/drupal/Makefile
--- a/www/drupal/Makefile       Wed Dec 10 23:41:36 2008 +0000
+++ b/www/drupal/Makefile       Wed Dec 10 23:55:39 2008 +0000
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.34 2008/10/23 21:33:21 adrianp Exp $
+# $NetBSD: Makefile,v 1.35 2008/12/10 23:55:39 adrianp Exp $
 
-DISTNAME=      drupal-5.12
+DISTNAME=      drupal-5.13
 CATEGORIES=    www
 MASTER_SITES=  http://drupal.org/files/projects/
 
diff -r 15eec49c2d40 -r 356e86b18e9e www/drupal/distinfo
--- a/www/drupal/distinfo       Wed Dec 10 23:41:36 2008 +0000
+++ b/www/drupal/distinfo       Wed Dec 10 23:55:39 2008 +0000
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.25 2008/10/23 21:33:21 adrianp Exp $
+$NetBSD: distinfo,v 1.26 2008/12/10 23:55:39 adrianp Exp $
 
-SHA1 (drupal-5.12.tar.gz) = 42105736e9fae7796e8d338accc2f48a070e567e
-RMD160 (drupal-5.12.tar.gz) = f41e13157355a34e9a7fa70777e5ff71e51c863a
-Size (drupal-5.12.tar.gz) = 764327 bytes
+SHA1 (drupal-5.13.tar.gz) = 06fc9907f15ef9eec933bdf7974ea52c71ddd982
+RMD160 (drupal-5.13.tar.gz) = cf3c32849395dcf6c72d670791b8c3b9a03f4c7b
+Size (drupal-5.13.tar.gz) = 764729 bytes