lp:ubuntu/dapper-security/moodle

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

7. By Daniel T Chen on 2006-06-09

* [SECURITY] Fix multiple XSS and SQL injection vulnerabilities:
  - Due to a failure to properly sanitise user input, there's a
    PostgreSQL SQL injection vulnerability in
    lib/adodb/drivers/adodb-postgres64.inc.php as described in
    CVE-2006-0410. Patch applied from Debian #360395.
  - The embedded version of lib/adodb/adodb-pager.inc.php is
    susceptible to XSS as described in CVE-2006-0806. Patch applied
    from Debian #360396.
* References:
  http://bugs.debian.org/360395, CVE-2006-0410;
  http://bugs.debian.org/360396, CVE-2006-0806.
* debian/:
  - postinst: Handle the upgrade path from any previous packaging
    revision in Breezy and Dapper that depends on apache2 but
    mistakenly uses apache in the debconf template.
  - templates: Use apache2 by default since, well, that's what the
    dependency prefers. Now Moodle actually installs.
  (Closes: Malone #5501, Malone #47812).

6. By Daniel T Chen on 2006-01-09

Resynchronise with Debian.

5. By Stephan Rügamer on 2005-12-28

Resynchronise with Debian.

4. By Andrew Mitchell on 2005-10-13

* Resync with debian (security update)
* changed dependencys to php5
* changed apache dependency to apache2
* References
  CAN-2005-2247

3. By Isaac Clerencia on 2004-12-29

* Urgency high as upstream release fixes several security bugs
* New upstream release
* Write database creation errors and warn the user about it,
closes: #285842, #285842

2. By Isaac Clerencia on 2004-06-04

* New upstream release, closes: #252693
* Added "exec 0<&1" to postinst to fix hang when ucf asks the user

1. By Isaac Clerencia on 2004-06-04

Import upstream version 1.3.1