Accepted moodle 1.8.2.dfsg-3+lenny3 (source all)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: RIPEMD160
Format: 1.8
Date: Wed, 09 Dec 2009 12:19:30 +0000
Source: moodle
Binary: moodle
Architecture: source all
Version: 1.8.2.dfsg-3+lenny3
Distribution: stable-security
Urgency: high
Maintainer: Moodle Packaging Team <pkg-moodle-maintainers@lists.alioth.debian.org>
Changed-By: Dan Poltawski <talktodan@gmail.com>
Description:
moodle - Course Management System for Online Learning
Closes: 559531
Changes:
moodle (1.8.2.dfsg-3+lenny3) stable-security; urgency=high
.
[ Dan Poltawski ]
* Fix multiple security issues (closes: 559531):
- MSA-09-0019: SQL injection in update_record
- MSA-09-0022: Multiple CSRF vunrabilities (CVE-2009-4297)
- MSA-09-0023: User account disclosure in LAMS module (CVE-2009-4297)
- MSA-09-0024: Insufficient access control in glossary (CVE-2009-4299)
- MSA-09-0026: Invalid application access control in MNET interface (CVE-2009-4301)
- MSA-09-0027: Login information can be sent unsecured even when site is configured
to use SSL for logins (CVE-2009-4302)
- MSA-09-0028: Multiple backup/restore related issues (CVE-2009-4303)
- MSA-09-0031: SQL injection in SCORM module (CVE-2009-4305)
- MSA-09-0010: Unzip binary may create symbolic links pointing outside
of dataroot on unix/linux servers
- MSA-09-0011: Glossary, database and forum ratings are not verified
after submission
.
[ Francois Marier ]
* Update maintainer email address
Checksums-Sha1:
0e2dae09c09e0e243bd091ea44ab8231db588a73 1332 moodle_1.8.2.dfsg-3+lenny3.dsc
3ac9d9bc3a2927f8a5c16304e5daa192366cf972 67070 moodle_1.8.2.dfsg-3+lenny3.diff.gz
9f781e2af71fa86d79ce5279624597245eb9109c 8628382 moodle_1.8.2.dfsg-3+lenny3_all.deb
Checksums-Sha256:
8b34ede3f07011771c8ea0cfc3e49ceb867a5dd546631aca8b74d30ed6f5e3e6 1332 moodle_1.8.2.dfsg-3+lenny3.dsc
54e3b50928ae2d7e090c81d228e35f00b6221f4fa18d8bce70c8138a04136628 67070 moodle_1.8.2.dfsg-3+lenny3.diff.gz
b2212198157af674d0d5651001b79f17fc0ce3268ac5d3614e15403a4a6d8034 8628382 moodle_1.8.2.dfsg-3+lenny3_all.deb
Files:
e6692ee05c7eda37d36ef9a0d24ce2ae 1332 web optional moodle_1.8.2.dfsg-3+lenny3.dsc
e8843f3e443495842705c040c0d98779 67070 web optional moodle_1.8.2.dfsg-3+lenny3.diff.gz
1985ebd60f8f9f2fb03a25e9b0c58c50 8628382 web optional moodle_1.8.2.dfsg-3+lenny3_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
iEYEAREDAAYFAktk4toACgkQrynHGRJLYfrIeACfdyO4+xs82/CPUmkhhRpcFE+N
/2IAoJheOUv9n58wDQ0JVyMAU3/wgSh7
=WII4
-----END PGP SIGNATURE-----
Accepted:
moodle_1.8.2.dfsg-3+lenny3.diff.gz
to main/m/moodle/moodle_1.8.2.dfsg-3+lenny3.diff.gz
moodle_1.8.2.dfsg-3+lenny3.dsc
to main/m/moodle/moodle_1.8.2.dfsg-3+lenny3.dsc
moodle_1.8.2.dfsg-3+lenny3_all.deb
to main/m/moodle/moodle_1.8.2.dfsg-3+lenny3_all.deb