Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Fedora 20 Moodle Security Update FEDORA-2015-4530 Critical DoS Threat

fedora
Calendar Grey April 5, 2015
Dist Fedora Esm H88
The upgrade to Moodle 2.6.10 on Fedora 20 addresses vulnerabilities and improves the overall functionality for e-learning.
Update to latest versions of the respective branches

Summary

Moodle is a course management system (CMS) - a free, Open Source software

package designed using sound pedagogical principles, to help educators create

effective online learning communities.

Update Information:

Update to latest versions of the respective branches. f20 has been updated from 2.5.x to 2.6.x because 2.5.x is EOL.

Topics%20covered

Topics Covered

security advisory security issue Fedora Moodle course management

Change Log

* Tue Mar 24 2015 Jon Ciesla - 2.6.10-1 - 2.6.10, fix for security issues, 2.5.x EOL. * Fri Nov 14 2014 Jon Ciesla - 2.5.9-1 - 2.5.9, fix for security issues. * Fri Sep 12 2014 Jon Ciesla - 2.5.8-1 - 2.5.8, fix for security issues. * Mon Jul 21 2014 Jon Ciesla - 2.5.7-1 - 2.5.7, Fix for CVE-2014-3541, CVE-2014-3542, CVE-2014-3543, - CVE-2014-3544, CVE-2014-3545, CVE-2014-3546, CVE-2014-3547, - CVE-2014-3548, CVE-2014-3549, CVE-2014-3550, CVE-2014-3551, - CVE-2014-3552, CVE-2014-3553 * Wed May 21 2014 Jon Ciesla - 2.5.6-1 - CVE-2014-0213, CVE-2014-0214, CVE-2014-0215, CVE-2014-0216, - CVE-2014-0217, CVE-2014-0218 - Drop upstreamed tinymce patch. * Wed Mar 19 2014 Jon Ciesla - 2.5.5-1 - Fix for CVE-2014-0122, CVE-2014-0123, CVE-2014-0124, - CVE-2014-0125, CVE-2014-0126, CVE-2014-0127, CVE-2014-0129 * Wed Jan 22 2014 Jon Ciesla - 2.5.4-1 - Fix for CVE-2014-0008,9,10.

References


[ 1 ] Bug #1203205 - CVE-2015-2269 CVE-2015-2268 CVE-2015-2267 CVE-2015-2266 CVE-2015-2272 CVE-2015-2273 CVE-2015-2270 CVE-2015-2271 moodle: multiple flaws in moodle [epel-6] https://bugzilla.redhat.com/show_bug.cgi?id=1203205 [ 2 ] Bug #1190119 - CVE-2015-1493 moodle: Directory Traversal Attack possible through some files serving JS (MSA-15-0009) [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1190119 [ 3 ] Bug #1203203 - CVE-2015-2269 CVE-2015-2268 CVE-2015-2267 CVE-2015-2266 CVE-2015-2272 CVE-2015-2273 CVE-2015-2270 CVE-2015-2271 moodle: multiple flaws in moodle [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1203203

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update moodle' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: moodle
Product: Fedora 20
Version: 2.6.10
Release: 1.fc20
URL: https://moodle.org/
Summary: A Course Management System

Topics%20covered

Topics Covered

security advisory security issue Fedora Moodle course management

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here