debian/0000755000000000000000000000000011756503144007174 5ustar debian/compat0000644000000000000000000000000211255316505010367 0ustar 7 debian/drupal6.lintian0000644000000000000000000000030211236153431012115 0ustar drupal6: package-contains-upstream-install-documentation usr/share/doc/drupal6/INSTALL.mysql.txt drupal6: package-contains-upstream-install-documentation usr/share/doc/drupal6/INSTALL.pgsql.txt debian/README.Debian0000644000000000000000000001420311564050713011231 0ustar Drupal for Debian ----------------- 1. Introduction 2. Manual initial database generation and configuration 3. Enabling access in Apache 4. Database population script 5. Deleting the Drupal database 6. Changes to Apache 2 configuration 7. Securing your portal 8. Upgrading database from previous versions 9. Virtual hosts 10. Additional themes and modules 11. Privacy of session cookies A. Customizing themes B. Links for more support 1. Introduction --------------- The latest version of Drupal can always be found at . A running database server is needed for this package to work. It doesn't matter whether the DBMS runs on the same machine as the web server. MySQL and PostgreSQL servers are supported by this package. You can change the DBMS configuration after installation by running "dpkg-reconfigure drupal6" 2. Manual initial database generation and configuration ------------------------------------------------------- This is only necessary if you chose not to automatically create the database at installation time or if automatic creation failed. Directions on how to create a database for you drupal portal can be found in INSTALL.mysql.txt and INSTALL.pgsql.txt files in /usr/share/doc/drupal6. 3. Enabling access in Apache ---------------------------- Since version 6.20-1, drupal is not enabled by default in Apache 2. To enable web access to the drupal application, simply link the /etc/drupal/6/apache2.conf in /etc/apache2/conf.d/drupal6.conf with this command: ln -s /etc/drupal/6/apache2.conf /etc/apache2/conf.d/drupal6.conf 4. Database population script ----------------------------- Once a database is set up and configured, drupal needs to create tables and insert default records into it. This can be done running the install.php script on portal web site, e.g. http://localhost/drupal6/install.php 5. Deleting the Drupal database ------------------------------- The database may be deleted automatically on purging the package (debconf prompt the user asking to do it or not). If you want to purge the data stored at MySQl database manually you can use the following command: 'mysqladmin -p drop drupal6' being the user who admin MySQL. 6. Changes to Apache 2 configuration ------------------------------------ By default, Drupal passes path arguments to itself via its dynamically generated URLs. This results in URLs that look like "http://www.example.com/?q=node/83." This can make URLs hard to read and it prevents some search engines from indexing the pages with these URLs You can tell Drupal to use "clean URLs", eliminating the "?q=" in internal URLs, simply enabling mod_rewrite in apache 2 configuration (a2enmod rewrite). Please note that you may need to adjust the /etc/drupal/6/htaccess configuration file to match your site configuration. 7. Securing your portal ----------------------- It is very good security measure to restrict access to admin.php only to trusted IP's and localhost (you can see an example at /etc/drupal/6/htaccess) As an added security measure, is a good idea to set up a ssl-enabled web server in your apache, and allow access to admin page only to ssl streams. 8. Upgrading database from previous versions -------------------------------------------- From version 4.7.4 drupal packages will be separated for each major version. Automatic upgrading the database will not be attempted anymore. To upgrade an existing version of drupal, install the new package and manually configure the database to point to the existing database, then execute the upstream upgrade script by pointing a web browser to Then remove the old package. WARNING: be sure to _NOT_ remove the old package's database. 9. Virtual hosts ---------------- Drupal supports a setup with multiple virtual hosts. Each virtual host has its own configuration directory in /etc/drupal/6/sites/_virtualhost_. At install time the 'default' virtual host is created with the required settings.php configuration file. To create new virtual hosts simply duplicate the default virtual host directory and adjust the settings.php and dbconfig.php configuration files. This package supports running cron scripts on each virtual host, as long as you define the $base_url variable in the virtual host settings.php configuration file. 10. Additional modules and themes -------------------------------- Drupal looks for modules and themes in the modules/ and themes/ subdirectories, respectively. However, it would be a bad idea to put additional modules and themes into those directories because they might be overwritten on upgrades. Instead, create links to another directory that won't be touched by dpkg, e.g. in the /usr/local hierarchy: # ln -s /usr/local/share/drupal/modules /usr/share/drupal6/modules/local # ln -s /usr/local/share/drupal/themes /usr/share/drupal6/themes/local 11. Privacy of session cookies ------------------------------ Drupal does not set the secure flag for the session cookie in an https session, which can cause the cookie to be sent in http requests and make it easier for remote attackers to capture this cookie. If you are using drupal on an https connection you can fix this issue setting the session.cookie_secure PHP properties to on either in the global PHP configuration file or adding the following line to /etc/drupal/6/htaccess: php_value session.cookie_secure 1 A. Customizing themes --------------------- To create or customize a theme for your site, I recommend to start with an existing theme (as exmaple), copy it to a different location # cp -ai /etc/drupal/6/themes/example /etc/drupal/6/themes/Custom and modify this new created theme. You can now select your "Custom" theme in the Preferences menu from the admin interface. You should not modify and use an included theme in the package directly, as your changes could be overwritten next time you upgrade drupal. B. Links for more support ------------------------- * http://www.drupal.org/ - Drupal's project page for those willing to get involved in the ongoing development * http://www.drupal.org/node.php?id=253 - online installation guidelines -- Luigi Gangitano Mon, 11 Aug 2008 12:00:12 +0100 debian/docs0000644000000000000000000000011011236153432010031 0ustar MAINTAINERS.txt UPGRADE.txt INSTALL.mysql.txt INSTALL.pgsql.txt scripts debian/links0000644000000000000000000000030611236153432010230 0ustar etc/drupal/6/htaccess usr/share/drupal6/.htaccess etc/drupal/6/sites usr/share/drupal6/sites etc/drupal/6/profiles usr/share/drupal6/profiles var/lib/drupal6/files etc/drupal/6/sites/default/files debian/etc/0000755000000000000000000000000011754524170007747 5ustar debian/etc/apache.conf0000644000000000000000000000023611236153431012031 0ustar Alias /drupal6 /usr/share/drupal6 Options +FollowSymLinks AllowOverride All order allow,deny allow from all debian/etc/settings.php0000644000000000000000000001376311236153431012323 0ustar 'main_', * 'users' => 'shared_', * 'sessions' => 'shared_', * 'role' => 'shared_', * 'authmap' => 'shared_', * 'sequences' => 'shared_', * ); * * Database URL format: * $db_url = 'mysql://username:password@localhost/databasename'; * $db_url = 'mysqli://username:password@localhost/databasename'; * $db_url = 'pgsql://username:password@localhost/databasename'; */ require_once('dbconfig.php'); if (!isset($dbserver) || empty($dbserver)) $dbserver='localhost'; $db_url = "$dbtype://$dbuser:$dbpass@$dbserver/$dbname"; $db_prefix = ''; /** * Base URL (optional). * * If you are experiencing issues with different site domains, * uncomment the Base URL statement below (remove the leading hash sign) * and fill in the URL to your Drupal installation. * * You might also want to force users to use a given domain. * See the .htaccess file for more information. * * Examples: * $base_url = 'http://www.example.com'; * $base_url = 'http://www.example.com:8888'; * $base_url = 'http://www.example.com/drupal'; * $base_url = 'https://www.example.com:8888/drupal'; * * It is not allowed to have a trailing slash; Drupal will add it * for you. */ # $base_url = 'http://www.example.com'; // NO trailing slash! if (file_exists('baseurl.php')) include_once('baseurl.php'); /** * PHP settings: * * To see what PHP settings are possible, including whether they can * be set at runtime (ie., when ini_set() occurs), read the PHP * documentation at http://www.php.net/manual/en/ini.php#ini.list * and take a look at the .htaccess file to see which non-runtime * settings are used there. Settings defined here should not be * duplicated there so as to avoid conflict issues. */ ini_set('arg_separator.output', '&'); ini_set('magic_quotes_runtime', 0); ini_set('magic_quotes_sybase', 0); ini_set('session.cache_expire', 200000); ini_set('session.cache_limiter', 'none'); ini_set('session.cookie_lifetime', 2000000); ini_set('session.gc_maxlifetime', 200000); ini_set('session.save_handler', 'user'); ini_set('session.use_only_cookies', 1); ini_set('session.use_trans_sid', 0); ini_set('url_rewriter.tags', ''); /** * Drupal automatically generates a unique session cookie name for each site * based on on its full domain name. If you have multiple domains pointing at * the same Drupal site, you can either redirect them all to a single domain * (see comment in .htaccess), or uncomment the line below and specify their * shared base domain. Doing so assures that users remain logged in as they * cross between your various domains. */ # $cookie_domain = 'example.com'; /** * Variable overrides: * * To override specific entries in the 'variable' table for this site, * set them here. You usually don't need to use this feature. This is * useful in a configuration file for a vhost or directory, rather than * the default settings.php. Any configuration setting from the 'variable' * table can be given a new value. * * Remove the leading hash signs to enable. */ # $conf = array( # 'site_name' => 'My Drupal site', # 'theme_default' => 'minnelli', # 'anonymous' => 'Visitor', # ); debian/watch0000644000000000000000000000012411576423603010223 0ustar version=3 ftp://ftp.drupal.org/pub/drupal/files/projects/drupal-(6[\d\.]+)\.tar\.gz debian/copyright0000644000000000000000000000335311255316656011137 0ustar This package was debianized by Hugo Espuny on Sat, 29 Jun 2002 22:13:16 +0200. The current Debian Maintainer is Luigi Gangitano It was downloaded from http://www.drupal.org Upstream authors: Dries Buytaert James Walker Moshe Weitzman Charlie Lowe Steven Wittens Károly Négyesi Gabor Hojtsy Richard Archer Matt Westgate Piotr Krukowiecki Károly Négyesi Jeremy Andrews Károly Négyesi Hilko Bengen Gerhard Killesreiter Copyright: 2000-2008 Dries Buytaert This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License with the Debian GNU/Linux distribution in file /usr/share/common-licenses/GPL-2; if not, write to the Free Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA. On Debian systems, the complete text of the GNU General Public License, version 2, can be found in /usr/share/common-licenses/GPL-2. The Debian packaging is (C) 2006-2008, Luigi Gangitano and is licensed under the GPL, see above. debian/drupal6.postinst0000644000000000000000000000237411527542150012360 0ustar #!/bin/bash # postinst script for drupal set -e dbc_generate_include='php:/etc/drupal/6/sites/default/dbconfig.php' dbc_generate_include_owner='root:www-data' dbc_generate_include_perms='640' dbc_pgsql_createdb_encoding='UTF8' . /usr/share/debconf/confmodule # source dbconfig-common stuff'); . /usr/share/dbconfig-common/dpkg/postinst dbc_go drupal6 $@ if [ "$DPKG_DEBUG" = "developer" ]; then set -x fi package_name="drupal6" datadir="/var/lib/${package_name}" filesdir="${datadir}/files" backupdir="${datadir}/backups" pkgdir="/usr/share/${package_name}" docdir="/usr/share/doc/${package_name}" upgradesdir="${docdir}/upgrades" configdir="/etc/drupal/6" default_configfile="${configdir}/sites/default/settings.php" includefile="${configdir}/apache.conf" cronfile="/etc/cron.d/${package_name}" OLDVERSION="$2" case "$1" in configure) # Permissions dpkg-statoverride --list $filesdir || dpkg-statoverride --add --force --update www-data www-data 0750 $filesdir ;; abort-upgrade|abort-remove|abort-deconfigure) ;; *) echo "postinst called with unknown argument \`$1'" >&2 exit 1 ;; esac # dh_installdeb will replace this with shell code automatically # generated by other debhelper scripts. #DEBHELPER# exit 0 debian/control0000644000000000000000000000203411754523660010601 0ustar Source: drupal6 Section: web Priority: extra Maintainer: Luigi Gangitano Build-Depends: debhelper (>= 7.0.50~) Homepage: http://www.drupal.org/ Standards-Version: 3.9.3.0 Xs-Vcs-Svn: svn://alioth.debian.org/svn/pkg-drupal/branches/drupal6 Xs-Vcs-Browser: http://svn.debian.org/wsvn/pkg-drupal/branches/drupal6 Package: drupal6 Architecture: all Depends: ${misc:Depends}, apache2 | httpd, php5, php5-mysql | php5-pgsql, php5-gd, default-mta | mail-transport-agent, wwwconfig-common (>= 0.0.37), mysql-client | virtual-mysql-client | postgresql-client, dbconfig-common, curl Recommends: mysql-server | postgresql Description: fully-featured content management framework Drupal is a dynamic web site platform which allows an individual or community of users to publish, manage and organize a variety of content, Drupal integrates many popular features of content management systems, weblogs, collaborative tools and discussion-based community software into one easy-to-use package. . This package contains version 6 of Drupal. debian/drupal6.install0000644000000000000000000000047411236153430012136 0ustar *.php usr/share/drupal6 includes usr/share/drupal6 misc usr/share/drupal6 modules usr/share/drupal6 themes usr/share/drupal6 robots.txt usr/share/drupal6 profiles etc/drupal/6 debian/etc/apache.conf etc/drupal/6 debian/etc/settings.php etc/drupal/6/sites/default debian/cron.sh usr/share/drupal6/scripts debian/drupal6.prerm0000644000000000000000000000025311236153431011611 0ustar #! /bin/bash # prerm script for ${package_name} # set -e . /usr/share/debconf/confmodule . /usr/share/dbconfig-common/dpkg/prerm dbc_go drupal6 $@ #DEBHELPER# exit 0 debian/changelog0000644000000000000000000007441611756500344011061 0ustar drupal6 (6.26-1.1) unstable; urgency=high * Non-maintainer upload. * Added missing PACKAGE variable in d/rules (Closes: #673295) -- Raúl Benencia Mon, 21 May 2012 14:39:32 -0300 drupal6 (6.26-1) unstable; urgency=high [ Luigi Gangitano ] * Urgency high due to security fixes * New upstream release - Fixes Access bypass, Cross Site Request Forgery, Multiple vulnerabilities (Ref: SA-CORE-2012-001, CVE-2012-0826, CVE-2012-0827) (Closes: #658738) * debian/* - Switch to source format 3.0 (quilt) * debian/control - Bumped Standard-Version to 3.9.3.0, no change needed -- Luigi Gangitano Thu, 10 May 2012 20:48:41 +0200 drupal6 (6.22-1) unstable; urgency=low [ Luigi Gangitano ] * New upstream release (Closes: #628896) * debian/control - Bumped Standard-Version to 3.9.2.0, no change needed - Removed article from start of Description: field * debian/watch - Updated watch file to changed upstream repo -- Luigi Gangitano Thu, 16 Jun 2011 15:55:08 +0200 drupal6 (6.20-2) unstable; urgency=low * debian/patches/21-ssl-cache-control - Added patch to fix Attachment downloads on HTTPS with IE7 (Closes: #624467) * debian/README.Debian - Fixed typo (Closes: #616307) -- Luigi Gangitano Mon, 16 May 2011 00:18:13 +0200 drupal6 (6.20-1) unstable; urgency=low [ Luigi Gangitano ] * New upstream release (Closes: #613343) * debian/watch - Updated watch file to changed upstream repo * debian/{drupal6.post{inst,rm},README.Debian} - Removed automatic link in apache2 configuration directory, added instructions on how to enable to README.Debian (Closes: #565738) -- Luigi Gangitano Fri, 18 Feb 2011 20:00:12 +0100 drupal6 (6.18-1) unstable; urgency=high [ Luigi Gangitano ] * Urgency high due to security fixes * New upstream release - Fixes multiple remote vulnerabilities (Closes: #592716) (Ref: SA-CORE-2010-002, CVE-TBA) * debian/control - Bumped Standard-Version to 3.9.1.0, no change needed -- Luigi Gangitano Tue, 24 Aug 2010 16:17:22 +0200 drupal6 (6.17-2) unstable; urgency=low * debian/control - Removed dependency on exim4, now depends on default-mda (Closes: #587239) - Bumped Standard-Version to 3.9.0, no change needed * debian/drupal6.postrm - Made postrm check for restart.sh in case dependencies were not properly installed (thanks to Bhavani Shankar.R, from Ubuntu) -- Luigi Gangitano Wed, 30 Jun 2010 19:56:57 +0200 drupal6 (6.17-1) unstable; urgency=low [ Luigi Gangitano ] * New upstream release * debian/cron.sh - Added --fail option to curl to work around missing base_url in configuration files (Closes: #561419) * debian/cron.d - Fixed conditional to avoid warnings on removed package (Closes: #582430) -- Luigi Gangitano Sun, 06 Jun 2010 22:31:57 +0200 drupal6 (6.16-1) unstable; urgency=high [ Luigi Gangitano ] * Urgency high due to security fixes * New upstream release - Fixes multiple vulnerabilities (Closes: #572439) (Ref: SA-CORE-2010-001, CVE-TBA) -- Luigi Gangitano Fri, 12 Mar 2010 14:04:02 +0100 drupal6 (6.15-2) UNRELEASED; urgency=low [ Alexandre De Dommelin ] * Added patch to remove warnings about Drupal core updates (Closes: #521288) * Bump Standards-Version from 3.8.3 to 3.8.4 (no changes needed) -- Luigi Gangitano Wed, 10 Feb 2010 17:11:35 +0100 drupal6 (6.15-1) unstable; urgency=low * New upstream release (Closes: #561726) - Fixes several XSS vulnerabilities (Closes: #562165) (Ref: SA-CORE-2009-009, CVE-2009-4369, CVE-2009-4370, CVE-2009-4371) * debian/rules - Use dh_prep instead of dh_clean -k * debian/control - Upgraded versioned dependency on debhelper to 7 * debian/README.source - Added directions on source handling -- Luigi Gangitano Mon, 11 Jan 2010 19:47:13 +0100 drupal6 (6.14-1) unstable; urgency=low * New upstream release - Removed security patches integrate upstream + 20_SA-CORE-2009-007 - Fixes multiple vulnerabilities (Ref: SA-CORE-2009-008) (Closes: #547140) * debian/control - Bumped Standard-Version to 3.8.3, no change needed * debian/compat - Switch debhelper compatibility to 7 * debian/copyright - Added reference to copyright file with version -- Luigi Gangitano Sun, 20 Sep 2009 04:57:57 +0200 drupal6 (6.13-1) UNRELEASED; urgency=low * New upstream release -- Luigi Gangitano Mon, 13 Jul 2009 19:42:38 +0200 drupal6 (6.12-1.1) unstable; urgency=high * Non-maintainer upload by the Security Team. * Apply upstream patch to fix: - XSS in the forum module - Input format access bypass via signatures - Password leakage via URLs (no CVE id yet; SA-CORE-2009-007; Closes: #535435). -- Nico Golde Mon, 06 Jul 2009 20:27:45 +0200 drupal6 (6.12-1) unstable; urgency=low [ Luigi Gangitano ] * New upstream release (Closes: #529309) (Acknoledges NMU by Security Team) (Closes: #531386) - Removed security patch integrate upstream + 20_xss * debian/{control,rules,links} - Removed dependency on libjs-jquery and use jquery.js from drupal sources to avoid conflict with newer version of jquery (Closes: #530779) -- Luigi Gangitano Tue, 02 Jun 2009 18:25:58 +0200 drupal6 (6.11-1.1) unstable; urgency=high * Non-maintainer upload by the Security Team. * Fix several XSS issues (SA-CORE-2009-006; Closes: #529190). -- Nico Golde Thu, 28 May 2009 20:45:35 +0200 drupal6 (6.11-1) unstable; urgency=low [ Luigi Gangitano ] * New upstream release - Fixes XSS vulnerability (Ref: SA-CORE-2009-005, CVE-2009-1575, CVE-2009-1576) (Closes: #526378) -- Luigi Gangitano Mon, 04 May 2009 19:56:12 +0200 drupal6 (6.10-1) unstable; urgency=low [ Luigi Gangitano ] * New upstream release - This version fixes two Windows-only security issues (Ref: SA-CORE-2009-003, SA-CORE-2009-004) Debian is not affected by this vulnerabilites -- Luigi Gangitano Sun, 01 Mar 2009 18:26:25 +0100 drupal6 (6.9-1) unstable; urgency=low [ Luigi Gangitano ] * New upstream release - Removed security patch integrate upstream + 12_SA-2008-073 + 13_SA-CORE-2009-001 * debian/cron.sh - Handle sites/all correctly (Closes: #513522) -- Luigi Gangitano Mon, 16 Feb 2009 19:37:31 +0100 drupal6 (6.6-3) unstable; urgency=high [ Luigi Gangitano ] * Urgency high due to security fixes * debian/patches/13_SA-CORE-2009-001 - Added upstream patch fixing multiple vulnerabilities (Ref: SA-CORE-2009-001, CVE-TBD) -- Luigi Gangitano Fri, 16 Jan 2009 01:49:58 +0100 drupal6 (6.6-2) unstable; urgency=high * debian/patches/12_SA-2008-073 - Moved NMU changes to dpatch file * debian/control - Added dependency on ${misc:Depends} to make lintian happy * debian/drupal6.{postinst,postrm} - Changed apache configuration link name to drupal6.conf, to avoid collision with drupal5 (Closes: #509769, #505146) - Set default Postgres encoding to UTF8 (Closes: #508506) * debian/README.Debian - Fixed link to installation script (Closes: 507914) -- Luigi Gangitano Thu, 08 Jan 2009 20:49:51 +0100 drupal6 (6.6-1.1) unstable; urgency=high * Non-maintainer upload. * Urgency high because this fixes a security issue * Include upstream patch for SA-2008-073, to fix a security issue: The update system is vulnerable to Cross site request forgeries. Malicious users may cause the superuser (user 1) to execute old updates that may damage the database. (Ref: SA-2008-073, CVE-2008-6170, CVE-2008-6532, CVE-2008-6533) (Closes: #508473) -- Patrick Schoenfeld Fri, 12 Dec 2008 09:30:28 +0100 drupal6 (6.6-1) unstable; urgency=high [ Luigi Gangitano ] * Urgency high due to security fixes * New upstream release - Fixes two security vulnerabilities (Ref: SA-2008-067, CVE-2008-6171) (Closes: #503222) * debian/drual6.postrm - Fixed missing -e option to make lintian happy * debian/patches/10_cronjob.dpatch - Added patch descritpion to make lintian happy * debian/control - Bumped Standard-Version to 3.8.0, no change needed * debian/{control,rules,links} - Added dependency on libjs-jquery and use jquery.js from it -- Luigi Gangitano Fri, 24 Oct 2008 23:06:15 +0200 drupal6 (6.5-1) unstable; urgency=low [ Luigi Gangitano ] * New upstream release - Removed security patch integrate upstream + 11-SA-2008-060 -- Luigi Gangitano Mon, 20 Oct 2008 23:59:27 +0200 drupal6 (6.4-2) unstable; urgency=high [ Luigi Gangitano ] * Urgency high due to security fixes * debian/patches/11-SA-2008-060 - Added upstream patch fixing several security vulnerabilities (Ref: SA-2008-060, CVE-TBA) (Closes: #501640) * debian/README.Debian - Added a notice about cookie security and session.cookie_secure configuration (Ref: CVE-2008-3661) (Closes: #501058) -- Luigi Gangitano Fri, 14 Oct 2008 15:47:20 +0200 drupal6 (6.4-1) unstable; urgency=low [ Luigi Gangitano ] * New upstream release - Fixes several XSS vulnerabilities (Ref: SA-2008-047, CVE-TBD) -- Luigi Gangitano Fri, 15 Aug 2008 01:35:59 +0200 drupal6 (6.3-1) unstable; urgency=low [ Luigi Gangitano ] * New upstream release (Closes: 465833) * debian/links - Changed files directory link to match new upstream configuration * debian/README.Debian - Fixed references to database population script and added instructions to enable apache2 mod_rewrite. -- Luigi Gangitano Mon, 11 Aug 2008 19:16:04 +0200 drupal6 (6.0-1) UNRELEASED; urgency=low [ Luigi Gangitano ] * New upstream branch 6.0 * debian/* - Rename file and directories from 5 to 6 - In debian/control switch to Source: drupal6 -- Luigi Gangitano Mon, 11 Aug 2008 12:00:12 +0100 drupal5 (5.7-1) unstable; urgency=low [ Luigi Gangitano ] * New upstream release - Fixes several non-security related bugs (Closes: #464876) * debian/po/hu.po - Updated Hungarian debconf templates translation (Thanks to Miklos Lukacs) (Closes: #459378) * debian/cron.sh - Fixed cron script for multisite setup (thanks to Fernando Lucas Rodriguez) (Closes: #464599) * debian/watch - Removed unused 'uupdate' token -- Luigi Gangitano Tue, 12 Feb 2008 11:40:29 +0100 drupal5 (5.6-2) unstable; urgency=low [ Luigi Gangitano ] * debian/cron.d - Fix typo in cron script that makes it running every minutes, set it to one hour (Closes: #456182) -- Luigi Gangitano Sat, 26 Jan 2008 20:51:39 +0100 drupal5 (5.6-1) unstable; urgency=high [ Luigi Gangitano ] * Urgency high due to security fixes * New upstream release - Fixes Cross site request forgery in Aggregator module (Ref: SA-2008-005, CVE-TBA) - Fixes Cross site scripting vulnerability with IE6 and user submitted UTF8 input (Ref: SA-2008-006, CVE-TBA) * debian/cron.d - Run cron script every hour and not every 5 minutes (Closes: #456182) * debian/rules - Removed binary-arch section, moved all actions to binary-indep * debian/control - Swapped httpd | apache2 order to comply with policy - Bumped Standard-Version to 3.7.3, no change needed -- Luigi Gangitano Fri, 11 Jan 2008 15:02:09 +0100 drupal5 (5.5-1) unstable; urgency=high [ Luigi Gangitano ] * Urgency high due to security fixes * New upstream release - Fixes SQL Injection vulnerability in contributed modules (Ref: DRUPAL-SA-2007-031, CVE-2007-6299) * debian/cron.sh - Added check of BASE_URL in baseurl.php (Closes: #448774) -- Luigi Gangitano Fri, 07 Dec 2007 21:29:18 +0100 drupal5 (5.3-1) unstable; urgency=high [ Luigi Gangitano ] * Urgency high due to security fixes * New upstream release - Fixes several security vulnerabilities + DRUPAL-SA-2007-024 (Ref: CVE-2007-5595) + DRUPAL-SA-2007-025 (Ref: CVE-2007-5593) + DRUPAL-SA-2007-026 (Ref: CVE-2007-5596) + DRUPAL-SA-2007-029 (Ref: CVE-2007-5594) + DRUPAL-SA-2007-030 (Ref: CVE-2007-5597) -- Luigi Gangitano Sat, 20 Oct 2007 09:52:38 +0200 drupal5 (5.2-3) unstable; urgency=low * debian/drupal5.install - Install default robots.txt (Closes: #440291) * debian/control - Changed Recommends to postgresql -- Luigi Gangitano Thu, 23 Aug 2007 15:44:15 +0200 drupal5 (5.2-2) unstable; urgency=low * debian/README.Debian - Fixed references to configuration directory * debian/etc/settings.php - Apply fixes from upstream version (Closes: #435433) -- Luigi Gangitano Fri, 27 Jul 2007 02:12:20 +0200 drupal5 (5.2-1) unstable; urgency=high [ Luigi Gangitano ] * Urgency high due to security fixes * New upstream release - Fixes XSS in server variables (Ref: DRUPAL-SA-2007-018, CVE: TBD) - Fixes XSRF in Forms API (Ref: DRUPAL-SA-2007-017, CVE: TBD) * debian/copyright - Fixed FSF address to make lintian happy * debian/control - Removed dependencies on php4 - Updated httpd real package dependency to apache2 - Changed Build-Depend-Indep to Build-Depend (policy 7.6) -- Luigi Gangitano Fri, 27 Jul 2007 01:48:04 +0200 drupal5 (5.1-3) unstable; urgency=low [ Luigi Gangitano ] * debian/control - Removed dependencies on 8.1 version of postgresql packages - Fixed typo in postgresql-server package (Closes: #429229) -- Luigi Gangitano Wed, 29 Jun 2007 21:39:33 +0200 drupal5 (5.1-2) unstable; urgency=low [ Luigi Gangitano ] - debian/control * Added Xs-Vcs-{Svn,Browser} tags - debian/README.Debian * Added istructions on Postgres database install and PHP memory limit (Closes: #427001) [ Bart Cornelis (cobaco) ] - New Norwegian Bokmael translation by Hans Fredrik Nordhaug -- Luigi Gangitano Tue, 13 Mar 2007 00:21:14 +0100 drupal5 (5.1-1) unstable; urgency=low [ Luigi Gangitano ] * New upstream release (Closes: #409522) * debian/{links,drupal5.install,cron.d,etc/apache.conf} - Applied patch from Karl-Heinz Nirschl fixing paths [ Bart Cornelis ] Translations * Updated Dutch translation by Bart Cornelis * Updated Japanese translation by Hideki Yamane * Updated German translation by Helge Kreutzmann (Closes: #413891) * Updated Portuguese translation by Miguel Figueiredo (Closes: #413905) * New Swedisch Translation by Daniel Nylander * New Tamil translation by Tirumurti Vasudevan (Closes: #413824) * New Czech translation by Miroslav Kure (Closes: #413798) * New Russion translation by Yuriy Talakan (Closes: #414063) * New Basque translation by Piarres Beobide (Closes: #413966) * New Galician translation by Jacobo Tarrio (Closes: #413764) -- Luigi Gangitano Sat, 10 Mar 2007 20:04:24 +0100 drupal5 (5.0-1) UNRELEASED; urgency=low * (NOT RELEASED YET) New upstream release * debian/* - Rename file and directories from 4.7 to 5 - In debian/control switch to Source: drupal5 - Add watch file * debian/control - Removed Suggests on ssl enabled packages - Removed dependencies on apache and added dependency on httpd | apache - Added dependency on php4-gd | php5-gd * debian/{rules,drupal5.install} - Removed reference to not-existing directory 'database' * debian/patches/10_cronjob.dpatch - Updated patch to new cron script -- Luigi Gangitano Fri, 26 Jan 2007 20:04:24 +0100 drupal (4.7.5-2) UNRELEASED; urgency=low [ Luigi Gangitano ] * NOT RELEASED YET * debian/control - Bumped Standards-Version to 3.7.2 (no change needed) - Removed dependency on postgsql-{client,server}-8.0 which is not in the archive anymore * Translations - Updated Dutch translations by Bart Cornelis -- Bart Cornelis (cobaco) Tue, 23 Jan 2007 11:50:45 +0100 drupal (4.7.5-1) unstable; urgency=low * New upstream release - Fixes Denial of Service (DRUPAL-SA-2007-002) - Fixes CSS Vulnerability (DRUPAL-SA-2007-001) -- Luigi Gangitano Sun, 7 Jan 2007 00:33:33 +0100 drupal (4.7.4-3) unstable; urgency=low * debian/po/fr.po - Updated French debconf templates translation (Thanks to Thomas Huriaux) (Closes: #404967) * debian/control - Add php5 dependency (Closes: #405162) -- Luigi Gangitano Sun, 7 Jan 2007 00:13:36 +0100 drupal (4.7.4-2) unstable; urgency=low * debian/control - Fixed dependency on postgresql-client - Removed dependency on makepasswd (not needed since we use dbconfig.common) - Removed dependency on php4-cli (not needed with new cron script) - Promote Recommends: php4 to Depends: php4 * debian/etc/settings.php - Fix warning if baseurl.php does not exists * debian/copyright - Fixed copyright information as requested by ftp-master -- Luigi Gangitano Tue, 5 Dec 2006 15:37:25 +0100 drupal (4.7.4-1) unstable; urgency=low * Prepare package for new inclusion in Debian - Thanks to Karl-Heinz Nirschl for keeping this package in his repository and allowing me to start from his work - Change (binary) package name to drupal-4.7 allowing for multiple version to be installed concurrently, so admins can control upgrade between releases - Add dependency on dbconfig-common and switch custom config script to use functions provided by dbconfig-common (Closes: #366692) - Removed unused templates - Added dependency on curl for cron script execution - Take over removal request (Closes: #375496) - Update to latest revision (Closes: #307821, #365047, #365709) -- Luigi Gangitano Thu, 23 Nov 2006 21:53:19 +0100 drupal (4.7.4-0brainlog1) unstable; urgency=low * new upstream release because patches do not apply cleanly * fixes: DRUPAL-SA-2006-024, DRUPAL-SA-2006-025, DRUPAL-SA-2006-026 -- Karl-Heinz Nirschl Fri, 20 Oct 2006 19:26:16 +0200 drupal (4.7.2-0brainlog4) unstable; urgency=low * add security fix DRUPAL-SA-2006-011 XSS Vulnerability in user module * move scripts dir to doc -- Karl-Heinz Nirschl Thu, 3 Aug 2006 19:46:57 +0200 drupal (4.7.2-0brainlog3) unstable; urgency=low * fix initial database generation - now checks for mysql version -- Karl-Heinz Nirschl Sat, 8 Jul 2006 13:13:12 +0200 drupal (4.7.2-0brainlog2) unstable; urgency=low * Using a fresh tarball and no .svn files. * Fix x. permissions. * Use debian mysql maint password for mysql install -- Tzafrir Cohen Fri, 7 Jul 2006 15:59:41 +0300 drupal (4.7.2-0brainlog1) unstable; urgency=low * new upstream release * add patch handling to package - make cron job less verbose -- Karl-Heinz Nirschl Fri, 16 Jun 2006 17:13:50 +0200 drupal (4.7.1-0brainlog1) unstable; urgency=low * new upstream version -- Karl-Heinz Nirschl Mon, 29 May 2006 14:01:48 +0200 drupal (4.6.5-0brainlog1) unstable; urgency=low * update to drupal 4.6.5 (new upstream) -- Karl-Heinz Nirschl Mon, 29 May 2006 13:58:55 +0200 drupal (4.6.3-0brainlog1) unstable; urgency=low * New upstream version (Closes: #307821) * based on the drupal 4.5.2-4 debian package * remove the auto update database stuff * added debconf entry for the base_url -- Karl-Heinz Nirschl Thu, 29 Sep 2005 19:10:17 +0200 drupal (4.5.2-4) unstable; urgency=low * [Miguel Figueiredo ] Added Portuguese translation (Closes: #301394) * [Valentina Commissari ] Added Italian translation (Closes: #301946) * [Gleydson Mazioli da Silva ] Updated Brazilian Portuguese translation. * Fixed typo in package description (Closes: #306997) -- Hilko Bengen Thu, 19 May 2005 21:23:27 +0200 drupal (4.5.2-3) unstable; urgency=high * Fixes "Bypass access via comments" problem mentioned in http://drupal.org/node/19009. Patch from Gerhard Killesreiter, thanks. I consider this a critical bug, hence urgency=high. * [Sergio Talens-Oliag ] Updated Spanish and Catalan Debconf translations and converted them to UTF-8. -- Hilko Bengen Tue, 22 Mar 2005 11:14:36 +0100 drupal (4.5.2-2) unstable; urgency=low * Changed includes/bootstrap.inc: conf.php (or $site.php) is loaded from /etc/drupal directly, without the need for any link. * Removed indentations from sed script which is used to edit the configuration file. * Rolled back session.inc to version found in 4.5.1; fixes bug documented in http://drupal.org/node/15666 * Added documentation about manual update procedure in README.Debian and Debconf templates (Closes: #293804) * Added documentation about adding modules and themes that are not part of the package. * NEWS.Debian mentions where to get Marvin and UnConeD themes that used to be part of the Drupal distribution. -- Hilko Bengen Tue, 15 Mar 2005 15:16:26 +0100 drupal (4.5.2-1) unstable; urgency=low * New upstream version (Closes: #290745; That was fast, wasn't it?) * Updates Japanese Debconf template, thanks to Hideki Yamane (Closes: #290439) * The config file /etc/drupal/conf.php is only generated if it hasn't existed. It is no longer edited. -- Hilko Bengen Sun, 16 Jan 2005 14:49:50 +0100 drupal (4.5.1-2) unstable; urgency=low * /etc/drupal/conf.php is no longer a conffile (Closes: #289624) * Should install with mysql-client-4.1 now (Closes: #285733) -- Hilko Bengen Wed, 12 Jan 2005 02:16:28 +0100 drupal (4.5.1-1) unstable; urgency=low * New upstream version (Closes: #277547, #289216, #278345) * Marvin and UnConeD have been split off into separate packages, as they are not officially supported by upstream any longer. * Added Japanese Debconf template (Closes: #288040) -- Hilko Bengen Sun, 9 Jan 2005 04:21:03 +0100 drupal (4.4.2-2) unstable; urgency=low * Bump version dependency to 0.0.37 where better support for PostgreSQL is included (Closes: 263730) * Another patch to node.module for DB-independennce (Closes: 258015) -- Hilko Bengen Wed, 18 Aug 2004 00:39:58 +0200 drupal (4.4.2-1) unstable; urgency=low * New upstream bugfix release - PostgreSQL support fixed in node.module (Closes: #258015, #258016) * Fixed sed statement in postinst so it will work with woody's sed. (Closes: #257529) * Depends: sharutils (Closes: #258156) * Cron script checks whether /usr/share/drupal/scripts/cron.sh exists and is executable (Closes: #251853) -- Hilko Bengen Tue, 20 Jul 2004 00:03:06 +0200 drupal (4.4.1-3) unstable; urgency=low * Included Marvin and Unconed themes from contrib (Closes: #255039) -- Hilko Bengen Mon, 28 Jun 2004 14:34:40 +0200 drupal (4.4.1-2) unstable; urgency=high * Applied admin_node.patch from against the "Invalid argument supplied for foreach() in /usr/share/drupal/modules/node.module" error (Closes: #242992) * Fixed removal of links in webserver directories * Shut up cron.sh (Closes: #251853) * Install misc/ directory (images and css) (Closes: #253550) * Fixed PostgreSQL removal, added some docs (Closes: #253282) -- Hilko Bengen Thu, 10 Jun 2004 16:06:47 +0200 drupal (4.4.1-1) unstable; urgency=low * New upstream version (Closes: #246307) * Added to cron.d (Closes: #242199) * Create language in database/database.pgsql (Closes: #242572) * Fixed dependencies (Closes: #242622): - Depends on php4-cgi (since it's used by maintainer scripts) - Recommends: php4 | libapache2-mod-php4 (After all, one _can_ run Drupal with a PHP-CGI setup * Fixed generation of links in webserver directories (Closes: #249488) * Out-of-the-box support for multiple sites (Closes: #246009) * Put themes directory under /usr/share/drupal. Themes are no longer handled as conffiles. * Fixed path to database.mysql in README.Debian (Closes: #246414) -- Hilko Bengen Tue, 25 May 2004 10:12:34 +0200 drupal (4.3.2-3) unstable; urgency=low * Rewrote README.Debian, copying substantial parts from the INSTALL file (Closes: #240505) * Re-added a (commented-out) directive for restricting access to admin.php to htaccess file -- Hilko Bengen Sun, 28 Mar 2004 17:38:11 +0200 drupal (4.3.2-2) unstable; urgency=low * [Bart Cornelis ] Added Dutch debconf translation (Closes: #232230) * [Sergio Talens-Oliag ] Added Spanish and Catalan debconf translations (Closes: #235018 * [Gleydson Mazioli da Silva ] Added Brazilian Portugese debconf translation (Closes: #185829) * [Christian Perrier ] Added French debconf translation (Closes: #200722) * Added German debconf translation -- Hilko Bengen Tue, 16 Mar 2004 00:43:55 +0100 drupal (4.3.2-1) unstable; urgency=low * New maintainer (Closes: #227771) * New upstream release (Closes: #204241, #220066) - Test shows that kuro5hin RSS feed can be imported just fine (Closes: #184252) - The encoding bug in ping.module appears to have been fixed (Closes: #215643) * Revamped installation and automatic upgrade procedure - Update sets password in config.php _and_ database (Closes: #193545) - It's possible to install the package without performing any database setup at all (Closes: #201202) * Fixed /etc/drupal/apache.conf (Closes: #219143) * Basic PostgreSQL support -- user and database are created (Closes: #186563) * Should work with apache2 (Closes: #235912) -- Hilko Bengen Thu, 11 Mar 2004 17:30:11 +0100 drupal (4.1.0-10) unstable; urgency=low * Maintainer field set to QA Group * New Brazilian Portuguese debconf template translation, provided by Andre Luis Lopes . Closes: #228109 -- Emanuele Rocca Sun, 1 Feb 2004 20:35:04 +0100 drupal (4.1.0-9.1) unstable; urgency=low * NMU * French debconf templates translation. Closes: #200722 * Correction to english templates for (I guess) better english and formulations. Closes: #186566 * Brazilian portuguese debconf tempaltes translation. Closes: #185829 -- Christian Perrier Tue, 16 Sep 2003 08:55:38 +0200 drupal (4.1.0-9) unstable; urgency=low * Two corrections in postinst to allow manually setting up the DB on upgrade. -- Hugo Espuny Wed, 19 Mar 2003 22:02:50 +0100 drupal (4.1.0-8) unstable; urgency=low * Added patch from drupal.org (Closes: #185217) * Minor typo on apache.conf * Now htaccess is set up dynamically. * Example of restricted admin.php is now at htaccess * Debconf now does not repeat questions after preconfiguring. -- Hugo Espuny Wed, 19 Mar 2003 20:09:45 +0100 drupal (4.1.0-7) unstable; urgency=high * Added securing point to README.Debian * Alias directive on /etc/drupal/apache.conf now is changed dynamically according with debconf question. -- Hugo Espuny Fri, 14 Mar 2003 20:33:29 +0100 drupal (4.1.0-6) unstable; urgency=high * Corrected postrm problem whe downgrading to certain versions. -- Hugo Espuny Fri, 14 Mar 2003 19:38:15 +0100 drupal (4.1.0-5) unstable; urgency=low * Corrected mv themes order in rules file. -- Hugo Espuny Fri, 14 Mar 2003 19:22:12 +0100 drupal (4.1.0-4) unstable; urgency=low * Corrected themes moving engine. (Closes: #184752) * Themes are now configfiles (since 4.1.0-2). I forgot to say... -- Hugo Espuny Fri, 14 Mar 2003 17:30:45 +0100 drupal (4.1.0-3) unstable; urgency=low * Updated to policy version 3.5.9 -- Hugo Espuny Fri, 14 Mar 2003 00:28:18 +0100 drupal (4.1.0-2) unstable; urgency=low * Corrected directive "AllowOverride None" to "AllowOverride All" in /etc/drupal/apache.conf. (Closes: #184183) * Corrected directive to in /etc/drupal/apache.conf. * Corrected cron file, postinst and templates. Now debconf asks for the whole URL, not only TCP port. (Closes: #184182) (Closes: #184182) Thanks to John Goerzen to point me those. * News feed now works properly. (Closes: #184252) (Closes: #184253) -- Hugo Espuny Wed, 12 Mar 2003 18:25:35 +0100 drupal (4.1.0-1) unstable; urgency=high * New upstream version (Closes: #178506) (Closes: #173107) * Moved to use po-debconf. * Fixed README.Debian (Closes: #173103) (Closes: #184111) -- Hugo Espuny Fri, 7 Mar 2003 21:09:02 +0100 drupal (4.0-4) unstable; urgency=low * Corrected a bug on cron.d file. -- Hugo Espuny Wed, 11 Dec 2002 22:39:16 +0100 drupal (4.0-3) unstable; urgency=low * Corrected /etc/cron.d/drupal (thanx to Paul van Tilburg ). (Closes: #172153) * Corrected link in README.Debian. (Closes: #169949) * Changed priority to extra. * postrm now executes an abort install properly. * Updated policy standars to 3.5.8 -- Hugo Espuny Tue, 10 Dec 2002 00:38:36 +0100 drupal (4.0-2) unstable; urgency=low * Minor typo correction in templates file. * Minor bug correction about webserver port in postinst. * Added versioned dependency on wget to support HTTPS * Moved update.php to /usr/share/doc/drupal/upgrades -- Hugo Espuny Wed, 30 Oct 2002 16:54:06 +0100 drupal (4.0-1) unstable; urgency=low * New debian package. (Closes: #164676) * Code taken from phpnuke package. -- Hugo Espuny Tue, 29 Oct 2002 21:21:26 +0100 debian/rules0000755000000000000000000000127211756477151010266 0ustar #!/usr/bin/make -f # Uncomment this to turn on verbose mode. #export DH_VERBOSE=1 #export DH_OPTIONS=-v PACKAGE=drupal6 %: dh $@ override_dh_installdirs: dh_installdirs -X.svn -XCVS override_dh_install: dh_install -XCVS -X.svn # fix permissions find $(CURDIR)/debian/$(PACKAGE)/usr/share/drupal6 \ -name '*.png' -o -name '*.jpg' | xargs chmod a-x chmod +x $(CURDIR)/debian/$(PACKAGE)/usr/share/drupal6/scripts/* # rm $(CURDIR)/debian/$(PACKAGE)/usr/share/drupal6/misc/jquery.js install -m640 .htaccess debian/drupal6/etc/drupal/6/htaccess install -m644 debian/drupal6.lintian debian/drupal6/usr/share/lintian/overrides/drupal6 override_dh_installdocs: dh_installdocs -XCVS -X.svn debian/examples0000644000000000000000000000004411236153431010724 0ustar sites/default/default.settings.php debian/patches/0000755000000000000000000000000011754524170010623 5ustar debian/patches/10_cronjob.patch0000644000000000000000000000067611754522517013614 0ustar Author: Description: Disable reporting to system log every cron run --- a/includes/common.inc +++ b/includes/common.inc @@ -2787,7 +2787,7 @@ // Record cron time variable_set('cron_last', time()); - watchdog('cron', 'Cron run completed.', array(), WATCHDOG_NOTICE); + #watchdog('cron', 'Cron run completed.', array(), WATCHDOG_NOTICE); // Release cron semaphore variable_del('cron_semaphore'); debian/patches/20_drupal_core_updates.patch0000644000000000000000000000713611754522520016175 0ustar Author: Alexandre De Dommelin Description: Remove warnings about available Drupal core updates --- a/modules/update/update.fetch.inc +++ b/modules/update/update.fetch.inc @@ -152,12 +152,10 @@ $status = update_requirements('runtime'); $params = array(); $notify_all = (variable_get('update_notification_threshold', 'all') == 'all'); - foreach (array('core', 'contrib') as $report_type) { - $type = 'update_'. $report_type; - if (isset($status[$type]['severity']) - && ($status[$type]['severity'] == REQUIREMENT_ERROR || ($notify_all && $status[$type]['reason'] == UPDATE_NOT_CURRENT))) { - $params[$report_type] = $status[$type]['reason']; - } + + if (isset($status['update_contrib']['severity']) + && ($status['update_contrib']['severity'] == REQUIREMENT_ERROR || ($notify_all && $status['update_contrib']['reason'] == UPDATE_NOT_CURRENT))) { + $params['contrib'] = $status['update_contrib']['reason']; } if (!empty($params)) { $notify_list = variable_get('update_notify_emails', ''); --- a/modules/update/update.module +++ b/modules/update/update.module @@ -73,15 +73,13 @@ case 'admin/build/modules': include_once './includes/install.inc'; $status = update_requirements('runtime'); - foreach (array('core', 'contrib') as $report_type) { - $type = 'update_'. $report_type; - if (isset($status[$type]['severity'])) { - if ($status[$type]['severity'] == REQUIREMENT_ERROR) { - drupal_set_message($status[$type]['description'], 'error'); - } - elseif ($status[$type]['severity'] == REQUIREMENT_WARNING) { - drupal_set_message($status[$type]['description'], 'warning'); - } + + if (isset($status['update_contrib']['severity'])) { + if ($status['update_contrib']['severity'] == REQUIREMENT_ERROR) { + drupal_set_message($status['update_contrib']['description'], 'error'); + } + elseif ($status['update_contrib']['severity'] == REQUIREMENT_WARNING) { + drupal_set_message($status['update_contrib']['description'], 'warning'); } } return '

'. t('See the available updates page for information on installed modules and themes with new versions released.', array('@available_updates' => url('admin/reports/updates'))) .'

'; @@ -202,7 +200,7 @@ module_load_include('inc', 'update', 'update.compare'); $data = update_calculate_project_data($available); // First, populate the requirements for core: - $requirements['update_core'] = _update_requirement_check($data['drupal'], 'core'); + //$requirements['update_core'] = _update_requirement_check($data['drupal'], 'core'); // We don't want to check drupal a second time. unset($data['drupal']); if (!empty($data)) { --- a/modules/update/update.report.inc +++ b/modules/update/update.report.inc @@ -222,6 +222,13 @@ 'disabled-theme' => t('Disabled themes'), ); foreach ($project_types as $type_name => $type_label) { + if ( $type_name == "core" ) { + $deb_message = array( array('class' => 'info','data' => array("Drupal core updates (including security patches) are applied by your sysadmin through the Debian package management system, you don't need to manually download them."))); + $output .= "\n

". $type_label ."

\n"; + $output .= theme('table', $header, $deb_message,array('class' => 'update')); + continue; + } + if (!empty($rows[$type_name])) { ksort($rows[$type_name]); $output .= "\n

". $type_label ."

\n"; debian/patches/21-ssl-cache-control.patch0000644000000000000000000000137111754522522015405 0ustar Author: Luigi Gangitano Description: Fixes download issue with IE7 on HTTPS --- a/includes/file.inc +++ b/includes/file.inc @@ -869,6 +869,14 @@ drupal_set_header('Pragma: private'); } + // IE cannot download private files because it cannot store files downloaded + // over https in the browser cache. The problem can be solved by sending + // custom headers to IE. See http://support.microsoft.com/kb/323308/en-us + if (isset($_SERVER['HTTPS']) && ($_SERVER['HTTPS'] == 'on')) { + drupal_set_header('Cache-Control: private'); + drupal_set_header('Pragma: private'); + } + foreach ($headers as $header) { // To prevent HTTP header injection, we delete new lines that are // not followed by a space or a tab. debian/patches/series0000644000000000000000000000011111754522520012026 0ustar 10_cronjob.patch 20_drupal_core_updates.patch 21-ssl-cache-control.patch debian/cron.d0000644000000000000000000000017411403026711010271 0ustar 0 * * * * www-data if test -x /usr/share/drupal6/scripts/cron.sh ; then /usr/share/drupal6/scripts/cron.sh ; fi debian/README.source0000644000000000000000000000024311322673115011345 0ustar This package uses dpatch to manage all modifications to the upstream source. Please refer to /usr/share/doc/dpatch/README.source.gz in package dpatch for details. debian/source/0000755000000000000000000000000011754524170010474 5ustar debian/source/format0000644000000000000000000000001411754522515011703 0ustar 3.0 (quilt) debian/drupal6.postrm0000644000000000000000000000433311527542227012023 0ustar #! /bin/bash # postrm script for ${package_name} # set -e if [ -f /usr/share/debconf/confmodule ]; then . /usr/share/debconf/confmodule fi # source dbconfig-common stuff if [ -f /usr/share/dbconfig-common/dpkg/postrm ]; then . /usr/share/dbconfig-common/dpkg/postrm dbc_go drupal6 $@ fi # summary of how this script can be called: # * `remove' # * `purge' # * `upgrade' # * `failed-upgrade' # * `abort-install' # * `abort-install' # * `abort-upgrade' # * `disappear' overwrit>r> # for details, see http://www.debian.org/doc/debian-policy/ or # the debian-policy package if [ "$DPKG_DEBUG" = "developer" ]; then set -x fi package_name="drupal6" datadir="/var/lib/${package_name}/" backupdir="${datadir}backups/" nukedir="/usr/share/${package_name}/" docdir="/usr/share/doc/${package_name}/" sqlfile="${docdir}database/database.mysql" upgradesdir="${docdir}upgrades/" configdir="/etc/drupal/6/" configfile="${configdir}conf.php" includefile="${configdir}apache.conf" dbconfigfile="${configdir}/sites/default/dbconfig.php" cronfile="/etc/cron.d/${package_name}" webserver="apache2" case "$1" in purge|remove) # Un-configure webservers if [ -L /etc/$webserver/conf.d/drupal6.conf ]; then rm -f /etc/$webserver/conf.d/drupal6.conf || true restart="$i $restart" fi servers="apache2" # may not exist if package was manually installed if [ -r /usr/share/wwwconfig-common/restart.sh ]; then . /usr/share/wwwconfig-common/restart.sh fi # Remove configuration files (conf.php, $SITE.php) rm -f /etc/drupal/sites/default/settings.php if [ "$1" = "purge" ]; then rm -f ${dbconfigfile} if which ucf >/dev/null 2>&1; then ucf --purge ${dbconfigfile} fi db_purge || true fi ;; upgrade|failed-upgrade|abort-install|abort-upgrade|disappear) ;; *) echo "postrm called with unknown argument \`$1'" >&2 exit 1 ;; esac # dh_installdeb will replace this with shell code automatically # generated by other debhelper scripts. #DEBHELPER# exit 0 debian/cron.sh0000755000000000000000000000074211403026340010462 0ustar #!/bin/sh # $Id: cron.sh 1878 2008-02-12 10:56:45Z luigi $ for site in /etc/drupal/6/sites/* ; do BASE_URL="" if [ ! "`basename $site`" = "all" ]; then for file in $site/baseurl.php $site/settings.php; do [ -f "$file" ] && BASE_URL=`grep '^$base_url' $file | cut -d"'" -f2` [ "X$BASE_URL" != "X" ] && break done if [ "X$BASE_URL" = "X" ] ; then BASE_URL='http://localhost/drupal6' fi curl --fail --silent --compressed --location $BASE_URL/cron.php fi done debian/dirs0000644000000000000000000000017311236153431010052 0ustar etc/drupal/6/sites/default var/lib/drupal6/files var/lib/drupal6/backups usr/share/doc/drupal6 usr/share/lintian/overrides debian/drupal6.config0000644000000000000000000000216011236153430011727 0ustar #!/bin/bash # Debconf config script for Drupal set -e # Source debconf library . /usr/share/debconf/confmodule if [ -f /usr/share/dbconfig-common/dpkg/config ]; then # we support mysql and pgsql dbc_dbtypes="mysql, pgsql" dbc_dbname=drupal6 dbc_dbuser=drupal6 # source dbconfig-common stuff . /usr/share/dbconfig-common/dpkg/config --debconf-ok dbc_go drupal6 $@ fi if [ "$DPKG_DEBUG" = "developer" ]; then set -x fi ################################################## # Begin installation directories definition block# ################################################## package_name="drupal6" datadir="/var/lib/${package_name}" backupdir="${datadir}/backups/" docdir="/usr/share/doc/${package_name}" upgradesdir="${docdir}/upgrades" configdir="/etc/drupal/6" configfile="${configdir}/conf.php" includefile="${configdir}/apache.conf" ################################################ # End installation directories definition block # ################################################ ######################################################################## # The actual configuration OLDVERSION="$2" db_stop exit 0