Fedora 9 Update: drupal-6.10-1.fc9

[updates at fedoraproject.org]

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2009-2175
2009-02-27 23:42:24
--------------------------------------------------------------------------------

Name        : drupal
Product     : Fedora 9
Version     : 6.10
Release     : 1.fc9
URL         : http://www.drupal.org
Summary     : An open-source content-management platform
Description :
Equipped with a powerful blend of features, Drupal is a Content Management
System written in PHP that can support a variety of websites ranging from
personal weblogs to large community-driven websites.  Drupal is highly
configurable, skinnable, and secure.

--------------------------------------------------------------------------------
Update Information:

Fixes for selinux issues and cron issues, as well as an upgrade to 6.10 to fix a
security flaw.    Prior updates to 6.9 fixed the selinux and cron issues, but
were in testing when the security fix was released.    IMPORTANT: This update
changes the location of the 'files' directories for each site from:
/etc/drupal/<sitename>/files  to  /var/lib/drupal/files/<sitename>  to allow
running drupal on a host in SELinux enforcing mode. This will require manual
intervention. Immediately after update, you'll need to move your files
directories and symlink to them from their old locations.    There is a script
in the new package docs, /usr/share/doc/drupal-6.10/drupal-files-migrator.sh,
that will work in some circumstances. It includes the commands needed to relabel
the SELinux contexts on your files, and is intended more as a guide than to be
run as-is. I have found issues with installations where one site is a symlink to
another. Patches welcome! Fixes for selinux issues and cron issues, no code or
database changes, packaging only.    IMPORTANT: This update changes the location
of the 'files' directories for each site from:  /etc/drupal/<sitename>/files  to
/var/lib/drupal/files/<sitename>  to allow running drupal on a host in SELinux
enforcing mode. This will require manual intervention. Immediately after update,
you'll need to move your files directories and symlink to them from their old
locations.    There is a script in the new package docs,
/usr/share/doc/drupal-6.9/drupal-files-migrator.sh, that will work in some
circumstances. It includes the commands needed to relabel the SELinux contexts
on your files, and is intended more as a guide than to be run as-is. I have
found issues with installations where one site is a symlink to another. Patches
welcome!
--------------------------------------------------------------------------------
ChangeLog:

* Thu Feb 26 2009 Jon Ciesla <limb at jcomserv.net> - 6.10-1
- Update to 6.10, SA-CORE-2009-003.
* Tue Feb 17 2009 Jon Ciesla <limb at jcomserv.net> - 6.9-2
- Drop pre script for files move, 472642.
- Updated drupal-README.fedora.
- Mark cron job noreplace, BZ 485567.
* Thu Jan 15 2009 Jon Ciesla <limb at jcomserv.net> - 6.9-1
- Upgrade to 6.9, SA-CORE-2009-001.
* Fri Jan  2 2009 Jon Ciesla <limb at jcomserv.net> - 6.8-1
- Upgrade to 6.8.
- Move files directories from sites to /var/lib/drupal/files/N for selinux reasons, 472642.
- Included script to move files outside of default, use at your own risk, patches welcome.
* Thu Dec 11 2008 Jon Ciesla <limb at jcomserv.net> - 6.7-1
- Upgrade to 6.7, SA-2008-073.
* Wed Oct 22 2008 Jon Ciesla <limb at jcomserv.net> - 6.6-1
- Upgrade to 6.6, SA-2008-067.
* Thu Oct  9 2008 Jon Ciesla <limb at jcomserv.net> - 6.5-1
- Upgrade to 6.5, SA-2008-060.
- Added notes to README and drupal.conf re CVE-2008-3661.
* Thu Aug 14 2008 Jon Ciesla <limb at jcomserv.net> - 6.4-1
- Upgrade to 6.4, SA-2008-047.
* Thu Jul 10 2008 Jon Ciesla <limb at jcomserv.net> - 6.3-1
- Upgrade to 6.3, upstream security fixes, SA-2008-044.
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #472642 - SELinux denies access to /etc/drupal/default/files/
        https://bugzilla.redhat.com/show_bug.cgi?id=472642
  [ 2 ] Bug #485567 - /etc/cron.hourly/drupal as a config file
        https://bugzilla.redhat.com/show_bug.cgi?id=485567
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update drupal' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------