Alerts This Week
Warning Icon 1 612
Alerts This Week
Warning Icon 1 612

Fedora 39: 2024-9df8ef935b Critical: Moodle Security Fixes

fedora
Calendar Grey June 27, 2024
Dist Fedora Esm H88
Debian 12's WordPress security notice addresses multiple threats, emphasizing crucial patches for website administration.
Fix for multiple CVEs

Summary

Moodle is a course management system (CMS) - a free, Open Source software

package designed using sound pedagogical principles, to help educators create

effective online learning communities.

Update Information:

Fix for multiple CVEs

Topics%20covered

Topics Covered

security advisory update Fedora XSS critical fix Moodle CSRF risk

Change Log

* Tue Jun 18 2024 Gwyn Ciesla - 4.3.5-1 - 4.3.5

References


[ 1 ] Bug #2292945 - CVE-2024-38273 moodle: BigBlueButton web service leaks meeting joining information to users who should not have access [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2292945 [ 2 ] Bug #2292946 - CVE-2024-38274 moodle: stored XSS via calendar's event title when deleting the event [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2292946 [ 3 ] Bug #2292951 - CVE-2024-38276 moodle: CSRF risks due to misuse of confirm_sesskey [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2292951 [ 4 ] Bug #2292953 - CVE-2024-38277 moodle: QR login key and auto-login key for the Moodle mobile app should be generated as separate keys [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2292953

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-9df8ef935b' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: moodle
Product: Fedora 39
Version: 4.3.5
Release: 1.fc39
URL: https://moodle.org/
Summary: A Course Management System

Topics%20covered

Topics Covered

security advisory update Fedora XSS critical fix Moodle CSRF risk

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here