Alerts This Week
Warning Icon 1 566
Alerts This Week
Warning Icon 1 566

Stay Secure with the Latest Linux Advisories

Fedora Large Esm H800
Fedora

Fedora 44 Transmission 4.1.2 Important Clickjacking Fix CVE-2026-38978

Calendar White Jun 05, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 44 libre 4.8.1 Critical Update Details for Real-Time Communication

Calendar White Jun 05, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 44 NextCloud Update Denial of Service JSON Tampering 2026-30881a5be7

Calendar White Jun 05, 2026
Important
Fedora Large Esm H800
Fedora

Fedora 44 python-starlette Security Fix for CVE-2026-48710

Calendar White Jun 05, 2026
Critical
Fedora Large Esm H900
Fedora

Fedora 44 perl-Cpanel-JSON-XS Moderate Denial of Service CVE-2026-9516

Calendar White Jun 05, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 44 rubygem-yard High Path Traversal Fix Vuln 2026-acefc1fe48

Calendar White Jun 05, 2026
high
Fedora Large Esm H800
Fedora

Fedora 44 Rust Sequoia Sop Low-Severity Fix Advisory 2026-5c5f4f40a4

Calendar White Jun 05, 2026
Low
Fedora Large Esm H900
Fedora

Fedora 44 rust-sequoia-sq Low Threat Security Advisory 2026-5c5f4f40a4

Calendar White Jun 05, 2026
Low
Fedora Large Esm H900
Fedora

Fedora 44 rust-sequoia-wot Low Severity Security Fix 2026-5c5f4f40a4

Calendar White Jun 05, 2026
Low
Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found 10 articles for you...
89
Ls Advisories Fedora Esm H240
Price Tag 1security advisoryfedoraupdate

Fedora 42: 2025-83ab16425f critical: moodle web service risks

4.5.5. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-83ab16425f 2025-06-29 01:03:14.526427+00:00 -------------------------------------------------------------------------------- Name : moodle Product : Fedora 42 Version : 4.5.5 Release : 1.fc42 URL : https://moodle.org/ Summary : A Course Management System Description : Moodle is a course management system (CMS) - a free, Open Source software package designed using sound pedagogical principles, to help educators create effective online learning communities. -------------------------------------------------------------------------------- Update Information: 4.5.5 -------------------------------------------------------------------------------- ChangeLog: * Thu Jun 19 2025 Gwyn Ciesla - 4.5.5-1 - 4.5.5 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2373852 - CVE-2025-49518 moodle: IDOR allows fetching of recently accessed courses for other users via web service [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2373852 [ 2 ] Bug #2373856 - CVE-2025-49513 moodle: Password can be revealed in login page after log out due to caching [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2373856 [ 3 ] Bug #2373859 - CVE-2025-49514 moodle: SSRF risk via DNS rebind [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2373859 [ 4 ] Bug #2373861 - CVE-2025-49515 moodle: Course visibility not honoured consistently [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2373861 [ 5 ] Bug #2373862 - CVE-2025-49516 moodle: CSRF risk in badges backpack management [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2373862 [ 6 ] Bug #2373864 - CVE-2025-49517 moodle: Missing authorisation checks in BigBlueButton view page [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2373864 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-83ab16425f' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue . The release of Moodle 4.5.5 for Fedora 42 has been accompanied by a vital security notice detailing several vulnerabilities that necessitate immediate patching.. Fedora security advisory, Moodle course management system, Fedora update critical. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Jun 29, 2025 •Critical Fedora
89
Ls Advisories Fedora Esm H240
Price Tag 1security advisoryfedoraupdate

Fedora 41: Moodle Update 2025-edd8ed2afc - Critical Fixes for IDOR and RCE

Latest updates.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-edd8ed2afc 2025-04-23 02:12:49.731534+00:00 -------------------------------------------------------------------------------- Name : moodle Product : Fedora 41 Version : 4.4.8 Release : 1.fc41 URL : https://moodle.org/ Summary : A Course Management System Description : Moodle is a course management system (CMS) - a free, Open Source software package designed using sound pedagogical principles, to help educators create effective online learning communities. -------------------------------------------------------------------------------- Update Information: Latest updates. -------------------------------------------------------------------------------- ChangeLog: * Mon Apr 14 2025 Gwyn Ciesla - 4.4.8-1 - 4.4.8 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2361646 - CVE-2025-3647 moodle: IDOR when accessing the cohorts report [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2361646 [ 2 ] Bug #2361649 - CVE-2025-3645 moodle: IDOR in messaging web service allows access to some user details [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2361649 [ 3 ] Bug #2361652 - CVE-2025-3644 moodle: AJAX section delete does not respect course_can_delete_section() [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2361652 [ 4 ] Bug #2361655 - CVE-2025-3643 moodle: Reflected XSS risk in policy tool [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2361655 [ 5 ] Bug #2361658 - CVE-2025-3642 moodle: Authenticated remote code execution risk in the Moodle LMS EQUELLA repository [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2361658 [ 6 ] Bug #2361661 - CVE-2025-3641 moodle: Authenticated remote code execution risk in the Moodle LMS Dropbox repository [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2361661 [ 7 ] Bug #2361664 - CVE-2025-3638 moodle: CSRF risk in Brickfield tool's analysis request action [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2361664 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-edd8ed2afc' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: . Discover the latest Moodle update optimized for Fedora 41, addressing critical security vulnerabilities and enhancing overall platform security.. Course Management System, Fedora 41 Update, Moodle Security Fixes. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Apr 23, 2025 •Critical Fedora
Banner 2 1028x280 1708121730 1 1771599631
89
Ls Advisories Fedora Esm H240
Price Tag 1security advisorycriticalFedora

Fedora 36: FEDORA-2022-f7fdcb1820 Critical: Moodle Software Flaws

Fixes for multiple CVEs. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2022-f7fdcb1820 2022-12-07 01:41:55.062314 --------------------------------------------------------------------------------Name : moodle Product : Fedora 36 Version : 3.11.11 Release : 1.fc36 URL : https://moodle.org/ Summary : A Course Management System Description : Moodle is a course management system (CMS) - a free, Open Source software package designed using sound pedagogical principles, to help educators create effective online learning communities. --------------------------------------------------------------------------------Update Information: Fixes for multiple CVEs --------------------------------------------------------------------------------ChangeLog: * Mon Nov 28 2022 Gwyn Ciesla - 3.11.11-1 - 3.11.11 --------------------------------------------------------------------------------References: [ 1 ] Bug #2144705 - CVE-2021-23414 CVE-2022-45149 CVE-2022-45150 CVE-2022-45151 CVE-2022-45152 moodle: various flaws [fedora-35] https://bugzilla.redhat.com/show_bug.cgi?id=2144705 [ 2 ] Bug #2144706 - CVE-2021-23414 CVE-2022-45149 CVE-2022-45150 CVE-2022-45151 CVE-2022-45152 moodle: various flaws [fedora-36] https://bugzilla.redhat.com/show_bug.cgi?id=2144706 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-f7fdcb1820' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam, report it: . The latest Fedora 36 patch for Moodle rectifies several security vulnerabilities, improving overall functionality and reliability. Discover the details.. Fedora Update,Moodle Release,Course Management Security,Open Source Fixes. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Dec 07, 2022 •Critical Fedora
89
Ls Advisories Fedora Esm H240
Price Tag 1security advisorysecurity issuesoftware update

Fedora 37: FEDORA-2022-74a9c8e95f moderate: Moodle Various Flaws

Fixes for multiple CVEs. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2022-74a9c8e95f 2022-12-07 01:34:05.124035 --------------------------------------------------------------------------------Name : moodle Product : Fedora 37 Version : 4.1 Release : 1.fc37 URL : https://moodle.org/ Summary : A Course Management System Description : Moodle is a course management system (CMS) - a free, Open Source software package designed using sound pedagogical principles, to help educators create effective online learning communities. --------------------------------------------------------------------------------Update Information: Fixes for multiple CVEs --------------------------------------------------------------------------------ChangeLog: * Mon Nov 28 2022 Gwyn Ciesla - 4.1.0-1 - 4.1.0 --------------------------------------------------------------------------------References: [ 1 ] Bug #2144705 - CVE-2021-23414 CVE-2022-45149 CVE-2022-45150 CVE-2022-45151 CVE-2022-45152 moodle: various flaws [fedora-35] https://bugzilla.redhat.com/show_bug.cgi?id=2144705 [ 2 ] Bug #2144706 - CVE-2021-23414 CVE-2022-45149 CVE-2022-45150 CVE-2022-45151 CVE-2022-45152 moodle: various flaws [fedora-36] https://bugzilla.redhat.com/show_bug.cgi?id=2144706 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-74a9c8e95f' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam, report it: . The latest update for Moodle on Fedora 37 addresses critical problems and introduces important security improvements.. Fedora 37 Moodle Update, Course Management Security, Open Source Updates. . LinuxSecurity.com Team

Calendar 2 Dec 07, 2022 Fedora
Banner 2 1028x280 1708121730 1 1771599631
89
Ls Advisories Fedora Esm H240
Price Tag 1security advisorysecurity issuesoftware update

Fedora 35: FEDORA-2022-50c091d963 moderate security: Moodle XSS issue

Latest update.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2022-50c091d963 2022-09-21 01:21:16.550072 --------------------------------------------------------------------------------Name : moodle Product : Fedora 35 Version : 3.11.10 Release : 1.fc35 URL : https://moodle.org/ Summary : A Course Management System Description : Moodle is a course management system (CMS) - a free, Open Source software package designed using sound pedagogical principles, to help educators create effective online learning communities. --------------------------------------------------------------------------------Update Information: Latest update. --------------------------------------------------------------------------------ChangeLog: * Mon Sep 12 2022 Gwyn Ciesla - 3.11.10-1 - 3.11.10 --------------------------------------------------------------------------------References: [ 1 ] Bug #2126857 - CVE-2021-36568 www-apps/moodle: XSS via crafted topic fields https://bugzilla.redhat.com/show_bug.cgi?id=2126857 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-50c091d963' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines:https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam, report it: . The recent Fedora 35 patch tackles a vulnerability in Moodle and offers crucial guidance for system admins to execute the upgrade.. Fedora Moodle Update, Open Source Course Management, Upgrade Instructions. . LinuxSecurity.com Team

Calendar 2 Sep 20, 2022 Fedora
89
Ls Advisories Fedora Esm H240
Price Tag 1security advisorymoderateFedora

Fedora 35: FEDORA-2022-530fdc5202 Moderate: Moodle Security Fixes

Multiple CVE fixes.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2022-530fdc5202 2022-05-27 01:11:57.957539 --------------------------------------------------------------------------------Name : moodle Product : Fedora 35 Version : 3.11.7 Release : 1.fc35 URL : https://moodle.org/ Summary : A Course Management System Description : Moodle is a course management system (CMS) - a free, Open Source software package designed using sound pedagogical principles, to help educators create effective online learning communities. --------------------------------------------------------------------------------Update Information: Multiple CVE fixes. --------------------------------------------------------------------------------ChangeLog: * Wed May 18 2022 Gwyn Ciesla - 3.11.7-1 - 3.11.7 --------------------------------------------------------------------------------References: [ 1 ] Bug #2087632 - CVE-2022-30596 moodle: Stored XSS in assignment bulk marker allocation form via user ID number [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2087632 [ 2 ] Bug #2087633 - CVE-2022-30597 moodle: Description field hidden by user policies (hiddenuserfields) is still visible [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2087633 [ 3 ] Bug #2087634 - CVE-2022-30599 moodle: SQL injection risk in badge award criteria [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2087634 [ 4 ] Bug #2087635 - CVE-2022-30600 moodle: Failed login attempts counted incorrectly [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2087635 [ 5 ] Bug #2087636 - CVE-2022-30598 moodle: global search results reveal authors of content unexpectedly for some activities [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2087636 --------------------------------------------------------------------------------This update can be installed with the"dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-530fdc5202' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure . Fedora 35 brings a major update for Moodle, addressing important issues and boosting security while enhancing navigation and user controls for a better experience. Moodle Security Fixes, Fedora 35 Update, Course Management System, Security Advisories. . LinuxSecurity.com Team

Calendar 2 May 26, 2022 Fedora
Banner 2 1028x280 1708121730 1 1771599631
89
Ls Advisories Fedora Esm H240
Price Tag 1security advisoryfedoracritical

Fedora 35: 2022-03-22 Important Moodle Update, Critical SQL Injection Risk

3.11.6. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2022-09abde662f 2022-03-22 03:40:08.822733 --------------------------------------------------------------------------------Name : moodle Product : Fedora 35 Version : 3.11.6 Release : 1.fc35 URL : https://moodle.org/ Summary : A Course Management System Description : Moodle is a course management system (CMS) - a free, Open Source software package designed using sound pedagogical principles, to help educators create effective online learning communities. --------------------------------------------------------------------------------Update Information: 3.11.6 --------------------------------------------------------------------------------ChangeLog: * Mon Mar 14 2022 Gwyn Ciesla - 3.11.6-1 - 3.11.6 * Thu Jan 20 2022 Fedora Release Engineering - 3.11.5-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild --------------------------------------------------------------------------------References: [ 1 ] Bug #2063394 - moodle-3.11.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=2063394 [ 2 ] Bug #2064123 - CVE-2022-0985 moodle: Users with moodle/site:uploadusers but without moodle/user:delete could delete users [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2064123 [ 3 ] Bug #2064125 - CVE-2022-0984 moodle: possible to reach the profile field badge criteria on a course page [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2064125 [ 4 ] Bug #2064126 - CVE-2022-0983 moodle: SQL injection risk in badges criteria code [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2064126 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-09abde662f' at the command line. For more information, refer to the dnfdocumentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure . The recent Moodle 3.11.6 upgrade on Fedora 35 resolves significant vulnerabilities, improving overall security and user engagement.. Moodle Update, Fedora Security, SQL Injection Fix, CMS Software, Open Source. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Mar 21, 2022 •Important Fedora
89
Ls Advisories Fedora Esm H240
Price Tag 1security advisorycriticalsoftware update

Fedora 32: FEDORA-2021-50f63a0161 Critical: Moodle XSS Issues

Fixes for multiple CVEs. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-50f63a0161 2021-03-23 01:10:40.843751 --------------------------------------------------------------------------------Name : moodle Product : Fedora 32 Version : 3.8.8 Release : 1.fc32 URL : https://moodle.org/ Summary : A Course Management System Description : Moodle is a course management system (CMS) - a free, Open Source software package designed using sound pedagogical principles, to help educators create effective online learning communities. --------------------------------------------------------------------------------Update Information: Fixes for multiple CVEs --------------------------------------------------------------------------------ChangeLog: * Mon Mar 15 2021 Gwyn Ciesla - 3.8.8-1 - 3.8.8 --------------------------------------------------------------------------------References: [ 1 ] Bug #1939035 - CVE-2021-20279 moodle: Stored XSS via ID number user profile field [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1939035 [ 2 ] Bug #1939039 - CVE-2021-20280 moodle: Stored XSS and blind SSRF possible via feedback answer text [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1939039 [ 3 ] Bug #1939047 - CVE-2021-20281 moodle: User full name disclosure within online users block [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1939047 [ 4 ] Bug #1939049 - CVE-2021-20282 moodle: Bypass email verification secret when confirming account registration [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1939049 [ 5 ] Bug #1939053 - CVE-2021-20283 moodle: Fetching a user's enrolled courses via web services did not check profile access in each course [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1939053 --------------------------------------------------------------------------------This update can beinstalled with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-50f63a0161' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure . The latest enhancements in Fedora 32 for Moodle address various vulnerabilities. Discover crucial updates aimed at bolstering the security of the system.. Fedora Security Updates,Moodle Security Fix,Open Source Issues. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Mar 22, 2021 •Critical Fedora
Banner 2 1028x280 1708121730 1 1771599631
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics

Your message here