Author: thijs
Date: 2013-07-10 13:09:16 +0000 (Wed, 10 Jul 2013)
New Revision: 22900
Modified:
data/CVE/list
Log:
old moodle issue forwarded
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2013-07-10 12:54:07 UTC (rev 22899)
+++ data/CVE/list 2013-07-10 13:09:16 UTC (rev 22900)
@@ -12843,6 +12843,7 @@
[squeeze] - moodle <no-dsa> (Minor issue)
[wheezy] - moodle 2.2.3.dfsg-2.6~wheezy1
NOTE: https://github.com/tpyo/amazon-s3-php-class/pull/36
+ NOTE: https://tracker.moodle.org/browse/MDL-40615
CVE-2012-6086 [zabbix insecure curl usage]
RESERVED
- zabbix <unfixed> (bug #697443)
@@ -86787,7 +86788,7 @@
{DSA-1528-1}
- serendipity 1.3~b1-1 (low; bug #469667)
CVE-2008-0123 (Cross-site scripting (XSS) vulnerability in install.php for
Moodle ...)
- - moodle <unfixed> (unimportant)
+ - moodle 1.9.8-1 (unimportant)
NOTE: the issue itself has a quite small attack vector
NOTE: and considering that the apache configuration that comes
NOTE: with moodle limits connections to localhost this is no issue
_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
