Author: jmm Date: 2015-02-02 11:39:07 +0000 (Mon, 02 Feb 2015) New Revision: 31904
Modified: data/CVE/list Log: moodle fixed Modified: data/CVE/list =================================================================== --- data/CVE/list 2015-02-02 11:23:14 UTC (rev 31903) +++ data/CVE/list 2015-02-02 11:39:07 UTC (rev 31904) @@ -8634,19 +8634,19 @@ CVE-2014-7849 RESERVED CVE-2014-7848 (lib/phpunit/bootstrap.php in Moodle 2.6.x before 2.6.6 and 2.7.x ...) - - moodle <unfixed> (bug #775842) + - moodle 2.7.5+dfsg-1 (bug #775842) [squeeze] - moodle <end-of-life> (Unsupported in squeeze-lts) NOTE: http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-47287 CVE-2014-7847 (iplookup/index.php in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x ...) - - moodle <unfixed> (bug #775842) + - moodle 2.7.5+dfsg-1 (bug #775842) [squeeze] - moodle <end-of-life> (Unsupported in squeeze-lts) NOTE: http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-47321 CVE-2014-7846 (tag/tag_autocomplete.php in Moodle through 2.4.11, 2.5.x before 2.5.9, ...) - - moodle <unfixed> (bug #775842) + - moodle 2.7.5+dfsg-1 (bug #775842) [squeeze] - moodle <end-of-life> (Unsupported in squeeze-lts) NOTE: http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-47965 CVE-2014-7845 (The generate_password function in Moodle through 2.4.11, 2.5.x before ...) - - moodle <unfixed> (bug #775842) + - moodle 2.7.5+dfsg-1 (bug #775842) [squeeze] - moodle <end-of-life> (Unsupported in squeeze-lts) NOTE: http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-47050 CVE-2014-7844 @@ -8683,39 +8683,31 @@ - resteasy 3.0.6-2 (bug #770544) NOTE: https://issues.jboss.org/browse/RESTEASY-1130 CVE-2014-7838 (Multiple cross-site request forgery (CSRF) vulnerabilities in the ...) - - moodle <unfixed> (bug #775842) + - moodle 2.7.5+dfsg-1 (bug #775842) [squeeze] - moodle <end-of-life> (Unsupported in squeeze-lts) - NOTE: http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-48019 -CVE-2014-7837 (mod/wiki/admin.php in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x ...) - - moodle <unfixed> (bug #775842) - [squeeze] - moodle <end-of-life> (Unsupported in squeeze-lts) - NOTE: http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-47949 -CVE-2014-7836 (Multiple cross-site request forgery (CSRF) vulnerabilities in the LTI ...) - - moodle <unfixed> (bug #775842) - [squeeze] - moodle <end-of-life> (Unsupported in squeeze-lts) NOTE: http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-47924 CVE-2014-7835 (webservice/upload.php in Moodle 2.6.x before 2.6.6 and 2.7.x before ...) - - moodle <unfixed> (bug #775842) + - moodle 2.7.5+dfsg-1 (bug #775842) [squeeze] - moodle <end-of-life> (Unsupported in squeeze-lts) NOTE: http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-47868 CVE-2014-7834 (mod/forum/externallib.php in Moodle 2.6.x before 2.6.6 and 2.7.x ...) - - moodle <unfixed> (bug #775842) + - moodle 2.7.5+dfsg-1 (bug #775842) [squeeze] - moodle <end-of-life> (Unsupported in squeeze-lts) NOTE: http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-45303 CVE-2014-7833 (mod/data/edit.php in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x ...) - - moodle <unfixed> (bug #775842) + - moodle 2.7.5+dfsg-1 (bug #775842) [squeeze] - moodle <end-of-life> (Unsupported in squeeze-lts) NOTE: http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-47697 CVE-2014-7832 (mod/lti/launch.php in the LTI module in Moodle through 2.4.11, 2.5.x ...) - - moodle <unfixed> (bug #775842) + - moodle 2.7.5+dfsg-1 (bug #775842) [squeeze] - moodle <end-of-life> (Unsupported in squeeze-lts) NOTE: http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-47921 CVE-2014-7831 (lib/classes/grades_external.php in Moodle 2.7.x before 2.7.3 does not ...) - - moodle <unfixed> (bug #775842) + - moodle 2.7.5+dfsg-1 (bug #775842) [squeeze] - moodle <end-of-life> (Unsupported in squeeze-lts) NOTE: http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-47766 CVE-2014-7830 (Cross-site scripting (XSS) vulnerability in mod/feedback/mapcourse.php ...) - - moodle <unfixed> (bug #775842) + - moodle 2.7.5+dfsg-1 (bug #775842) [squeeze] - moodle <end-of-life> (Unsupported in squeeze-lts) NOTE: http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-47865 CVE-2014-7829 (Directory traversal vulnerability in ...) _______________________________________________ Secure-testing-commits mailing list Secure-testing-commits@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits