Author: thijs
Date: 2014-01-22 09:40:15 +0000 (Wed, 22 Jan 2014)
New Revision: 25326
Modified:
data/CVE/list
Log:
moo-dle
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2014-01-22 09:23:31 UTC (rev 25325)
+++ data/CVE/list 2014-01-22 09:40:15 UTC (rev 25326)
@@ -3738,17 +3738,17 @@
RESERVED
CVE-2014-0010 [Cross-site request forgery vulnerability in profile fields]
RESERVED
- - moodle <unfixed>
+ - moodle 2.5.4-1
NOTE:
http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-42883
TODO: check which versions affected, sesskey seems checked in oldstable?
CVE-2014-0009 [Group constraints lacking in "login as"]
RESERVED
- - moodle <unfixed> (low)
+ - moodle 2.5.4-1 (low)
[squeeze] - moodle <no-dsa> (Minor issue)
NOTE:
http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-42643
CVE-2014-0008 [Config passwords visibility issue]
RESERVED
- - moodle <unfixed> (low)
+ - moodle 2.5.4-1 (low)
[squeeze] - moodle <no-dsa> (Minor issue)
NOTE:
http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-36721
CVE-2014-0007
_______________________________________________
Secure-testing-commits mailing list
[email protected]
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
