~ubuntu-branches/ubuntu/trusty/moodle/trusty : changes

~ubuntu-branches/ubuntu/trusty/moodle/trusty » Changes from revision 37

From Revision 36 to 17

Rev	Summary	Authors	Tags	Date
36	* New upstream release, fixing security issues: * New upstream release, fixing security issues: - MSA-14-0001 Config passwords visibility issue [CVE-2014-0008] - MSA-14-0002 Group constraints lacking in "login as" [CVE-2014-0009] - MSA-14-0003 CSRF vulnerability in profile fields [CVE-2014-0010] * Move /var/lib/moodle directory into package. * Revert back to bundled yui3. Unfortunately, version in Debian and of upstream are not compatible (closes: #735312).	Thijs Kinkhorst	2.5.4-1	10 years ago
35	* Drop unused libjs-yui dependency (closes: #730104). * Drop unused libjs-yui dependency (closes: #730104). * Replace bundled yui3 with dependency on packaged libjs-yui3-min. * Add virtual-mysql-{server,client} dependency alternatives (closes: #732895). * Change owner of config.php from www-data to root. * Checked for policy 3.9.5, no changes necessary.	Thijs Kinkhorst	2.5.3-3	10 years ago
34	Fix syntax error in generated config.php. Fix syntax error in generated config.php.	Thijs Kinkhorst	2.5.3-2	10 years ago
33	* New upstream version: 2.5.3. * New upstream version: 2.5.3. - Incorporates CAS security patch. - Fixes security issues CVE-2013-4522, CVE-2013-4523, CVE-2013-4524, CVE-2013-4525, CVE-2013-6780.	Thijs Kinkhorst	2.5.3-1	10 years ago
32	* New upstream version: 2.5.2. * New upstream version: 2.5.2. - Incorporates S3 security patch.	Thijs Kinkhorst	2.5.2-1	10 years ago
31	* Update debconf translation for * Update debconf translation for Swedish, thanks Martin Bagge (closes: #717323); Italian, thanks Beatrice Torracca (closes: #717162); French, thanks Julien Patriarca (closes: #717548); Czech, thanks Michal Simunek (closes: #717550). * Add Breaks/Replaces moodle-book; integrated since Moodle 2.3.	Thijs Kinkhorst	2.5.1-2	10 years ago
30	* New upstream version: 2.5.1. * New upstream version: 2.5.1. - Fixes security issues: CVE-2013-2242 CVE-2013-2243 CVE-2013-2244 CVE-2013-2245 CVE-2013-2246 * Depend on apache2 instead of obsolete apache2-mpm-prefork. * Use packaged libphp-phpmailer (closes: #429339), adodb, HTMLPurifier, PclZip. * Update debconf translations, thanks Salvatore Merone, Pietro Tollot, Joe Hansen, Yuri Kozlov, Holger Wansing, Américo Monteiro, Adriano Rafael Gomes, victory, Michał Kułach. (closes: #716972, #716986, #717080, #717108, #717278)	Thijs Kinkhorst	2.5.1-1	10 years ago
29	New upstream version: 2.2.6 (Build: 20121112) New upstream version: 2.2.6 (Build: 20121112)	Tomasz Muras	2.2.6.dfsg-1	11 years ago
28	* Non-maintainer upload. * Non-maintainer upload. * Backport multiple security issues from upstream's MOODLE_22_STABLE branch. - MSA-12-0057: MDL-29872 - Access issue through repository Fixes CVE-2012-5471 - MSA-12-0058: MDL-32785 - Possible form data manipulation issue Fixes CVE-2012-5472 - MSA-12-0059: MDL-34448 - Information leak in Database activity module Fixes CVE-2012-5473 - MSA-12-0061: MDL-33791 - Remote code execution through Portfolio API Fixes CVE-2012-5479 - MSA-12-0062: MDL-35558 - Information leak in Database activity module Fixes CVE-2012-5480	Didier Raboud	2.2.3.dfsg-2.6	11 years ago
27	* Non-maintainer brown-paper bag upload. * Non-maintainer brown-paper bag upload. * Fix the preinst shell syntax to properly drop the left-over symlink in favour of the shipped directory. (Closes: #689506 fo real now)	Didier Raboud	2.2.3.dfsg-2.5	11 years ago
26	* Non-maintainer upload. * Non-maintainer upload. * Drop a left-over symlink in favour of the shipped directory. (Closes: #689506)	Didier Raboud	2.2.3.dfsg-2.4	11 years ago
25	* Non-maintainer upload. * Non-maintainer upload. * Backport multiple security issues from upstream's MOODLE_22_STABLE branch. (Closes: #687924) - MSA-12-0051: MDL-30792 - File upload size constraint issue Fixes CVE-2012-4400 - MSA-12-0052: MDL-28207 - Course topics permission issue Fixes CVE-2012-4401 - MSA-12-0053: MDL-34585 - Blog file access issue Fixes CVE-2012-4407 - MSA-12-0054: MDL-34519 - Course reset permission issue Fixes CVE-2012-4408 - MSA-12-0055: MDL-34368 - Web service access token issue Fixes CVE-2012-4402	Didier Raboud	2.2.3.dfsg-2.3	11 years ago
24	* Non-maintainer upload. * Non-maintainer upload. * Backport multiple security issues from upstream's MOODLE_22_STABLE branch. (Closes: #682203) - MDL-31692 mod_lti - ensure that various mforms are used properly Fixes CVE-2012-3389 - MDL-33916 Ensure that capabilities are checked for cached user enrolments Fixes CVE-2012-3388	Didier Raboud	2.2.3.dfsg-2.2	11 years ago
23	* Non-maintainer upload. * Non-maintainer upload. * Backport multiple security issues from upstream's MOODLE_22_STABLE branch (Closes: #682203) - MDL-33808 - format title on the repository instance screen - MDL-33808 - incorrect cleaning of repository names Both patches fix CVE-2012-3393. - MDL-23254 Authentication : used httpswwwroot as root url during authentication procedure where $PAGE->https_required() is specified. Fix CVE-2012-3394 - MDL-27675 - Feedback module abuses data_submitted Fix CVE-2012-3395 - MDL-34045 fix invalid idnumber field type in cohort form Fix CVE-2012-3396 - MDL-33466: Group restriction should hide activity even with 'show availability' option Fix CVE-2012-3397	Didier Raboud	2.2.3.dfsg-2.1	11 years ago
22	Don't depend on ucf during purge (closes: #678027) Don't depend on ucf during purge (closes: #678027)	Tomasz Muras	2.2.3.dfsg-2	11 years ago
21	New upstream version: 2.2.3+ (Build: 20120615) New upstream version: 2.2.3+ (Build: 20120615) closes: #674163	Tomasz Muras	2.2.3.dfsg-1	11 years ago
20	Fix path to cron (closes: #669229) Fix path to cron (closes: #669229)	Tomasz Muras	2.2.2.dfsg-2	12 years ago
19	* New upstream version: 2.2.2+ (Build: 20120412) * New upstream version: 2.2.2+ (Build: 20120412) closes: #658865,#664260,#647489,#443949,#441013,#505044,#375290 * Updated Standards-Versions to 3.9.3 * Removing Dan from maintainers (thanks for all your work Dan!)	Tomasz Muras	2.2.2.dfsg-1	12 years ago
18	* Backporting security fixes from Moodle 1.9.17 * Backporting security fixes from Moodle 1.9.17 - MSA-12-00013 DB activtity export does not respect groups (CVE-2012-1155, closes: #668411)	Tomasz Muras	1.9.9.dfsg2-6	12 years ago
17	* Backporting security fixes from Moodle 1.9.15 and 1.9.16 * Backporting security fixes from Moodle 1.9.15 and 1.9.16 (closes: #652235) - MSA-11-0054 Personal information leak - MSA-11-0045 Potential to masquerade through MNet (CVE-2011-4584) - MSA-11-0046 Insecure authentication transmission (CVE-2011-4585) - MSA-11-0047 Possible injection attack in Calendar (CVE-2011-4586) - MSA-11-0048 Password loss issue (CVE-2011-4587) - MSA-11-0049 Network restriction ineffective with MNet (CVE-2011-4588) - MSA-12-0007 Email injection prevention (CVE-2012-0796) - MSA-12-0006 Additional email address validation (CVE-2012-0795) - MSA-12-0005 Encryption enhancement (CVE-2012-0794) - MSA-12-0004 Added profile image security (CVE-2012-0793) - MSA-12-0003 Added password protection - MSA-12-0002 Personal information leak, previously MSA-11-0040 (CVE-2011-4308 and CVE-2012-0792) - MSA-12-0001 Recaptcha transmission consistency issue	Tomasz Muras	1.9.9.dfsg2-5	12 years ago

Older »