Branches for Dapper

Name Status Last Modified Last Commit
lp:ubuntu/dapper/moodle 1 Development 2009-06-25 06:38:48 UTC
6. Resynchronise with Debian.

Author: Daniel T Chen
Revision Date: 2006-01-09 13:49:39 UTC

Resynchronise with Debian.

lp:ubuntu/dapper-backports/moodle 1 Development 2009-06-25 06:39:06 UTC
7. Automated backport upload; no source ...

Author: John Dong
Revision Date: 2006-12-01 14:00:21 UTC

Automated backport upload; no source changes.

lp:ubuntu/dapper-security/moodle 1 Development 2009-06-25 06:38:53 UTC
7. * [SECURITY] Fix multiple XSS and SQL...

Author: Daniel T Chen
Revision Date: 2006-06-09 22:21:34 UTC

* [SECURITY] Fix multiple XSS and SQL injection vulnerabilities:
  - Due to a failure to properly sanitise user input, there's a
    PostgreSQL SQL injection vulnerability in
    lib/adodb/drivers/adodb-postgres64.inc.php as described in
    CVE-2006-0410. Patch applied from Debian #360395.
  - The embedded version of lib/adodb/adodb-pager.inc.php is
    susceptible to XSS as described in CVE-2006-0806. Patch applied
    from Debian #360396.
* References:
  http://bugs.debian.org/360395, CVE-2006-0410;
  http://bugs.debian.org/360396, CVE-2006-0806.
* debian/:
  - postinst: Handle the upgrade path from any previous packaging
    revision in Breezy and Dapper that depends on apache2 but
    mistakenly uses apache in the debconf template.
  - templates: Use apache2 by default since, well, that's what the
    dependency prefers. Now Moodle actually installs.
  (Closes: Malone #5501, Malone #47812).

lp:ubuntu/dapper-updates/moodle 1 Development 2009-06-25 06:39:01 UTC
7. * [SECURITY] Fix multiple XSS and SQL...

Author: Daniel T Chen
Revision Date: 2006-06-09 22:21:34 UTC

* [SECURITY] Fix multiple XSS and SQL injection vulnerabilities:
  - Due to a failure to properly sanitise user input, there's a
    PostgreSQL SQL injection vulnerability in
    lib/adodb/drivers/adodb-postgres64.inc.php as described in
    CVE-2006-0410. Patch applied from Debian #360395.
  - The embedded version of lib/adodb/adodb-pager.inc.php is
    susceptible to XSS as described in CVE-2006-0806. Patch applied
    from Debian #360396.
* References:
  http://bugs.debian.org/360395, CVE-2006-0410;
  http://bugs.debian.org/360396, CVE-2006-0806.
* debian/:
  - postinst: Handle the upgrade path from any previous packaging
    revision in Breezy and Dapper that depends on apache2 but
    mistakenly uses apache in the debconf template.
  - templates: Use apache2 by default since, well, that's what the
    dependency prefers. Now Moodle actually installs.
  (Closes: Malone #5501, Malone #47812).

14 of 4 results