lp:ubuntu/saucy-proposed/moodle

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

32. By Thijs Kinkhorst on 2013-09-09

* New upstream version: 2.5.2.
  - Incorporates S3 security patch.

31. By Thijs Kinkhorst on 2013-08-04

* Update debconf translation for
  Swedish, thanks Martin Bagge (closes: #717323);
  Italian, thanks Beatrice Torracca (closes: #717162);
  French, thanks Julien Patriarca (closes: #717548);
  Czech, thanks Michal Simunek (closes: #717550).
* Add Breaks/Replaces moodle-book; integrated since Moodle 2.3.

30. By Thijs Kinkhorst on 2013-07-19

* New upstream version: 2.5.1.
  - Fixes security issues:
    CVE-2013-2242 CVE-2013-2243 CVE-2013-2244 CVE-2013-2245
    CVE-2013-2246
* Depend on apache2 instead of obsolete apache2-mpm-prefork.
* Use packaged libphp-phpmailer (closes: #429339), adodb,
  HTMLPurifier, PclZip.
* Update debconf translations, thanks Salvatore Merone, Pietro Tollot,
  Joe Hansen, Yuri Kozlov, Holger Wansing, Américo Monteiro,
  Adriano Rafael Gomes, victory, Michał Kułach.
  (closes: #716972, #716986, #717080, #717108, #717278)

29. By Tomasz (Tomek) Muras on 2012-11-15

New upstream version: 2.2.6 (Build: 20121112)

28. By Didier Raboud on 2012-11-12

* Non-maintainer upload.

* Backport multiple security issues from upstream's MOODLE_22_STABLE
  branch.
  - MSA-12-0057: MDL-29872 - Access issue through repository
    Fixes CVE-2012-5471
  - MSA-12-0058: MDL-32785 - Possible form data manipulation issue
    Fixes CVE-2012-5472
  - MSA-12-0059: MDL-34448 - Information leak in Database activity module
    Fixes CVE-2012-5473
  - MSA-12-0061: MDL-33791 - Remote code execution through Portfolio API
    Fixes CVE-2012-5479
  - MSA-12-0062: MDL-35558 - Information leak in Database activity module
    Fixes CVE-2012-5480

27. By Didier Raboud on 2012-10-31

* Non-maintainer brown-paper bag upload.

* Fix the preinst shell syntax to properly drop the left-over symlink
  in favour of the shipped directory. (Closes: #689506 fo real now)

26. By Didier Raboud on 2012-10-28

* Non-maintainer upload.

* Drop a left-over symlink in favour of the shipped directory.
 (Closes: #689506)

25. By Didier Raboud on 2012-09-28

* Non-maintainer upload.

* Backport multiple security issues from upstream's MOODLE_22_STABLE
  branch. (Closes: #687924)
  - MSA-12-0051: MDL-30792 - File upload size constraint issue
    Fixes CVE-2012-4400
  - MSA-12-0052: MDL-28207 - Course topics permission issue
    Fixes CVE-2012-4401
  - MSA-12-0053: MDL-34585 - Blog file access issue
    Fixes CVE-2012-4407
  - MSA-12-0054: MDL-34519 - Course reset permission issue
    Fixes CVE-2012-4408
  - MSA-12-0055: MDL-34368 - Web service access token issue
    Fixes CVE-2012-4402

24. By Didier Raboud on 2012-07-23

* Non-maintainer upload.

* Backport multiple security issues from upstream's MOODLE_22_STABLE
  branch. (Closes: #682203)
  - MDL-31692 mod_lti - ensure that various mforms are used properly
    Fixes CVE-2012-3389
  - MDL-33916 Ensure that capabilities are checked for cached user
    enrolments
    Fixes CVE-2012-3388

23. By Didier Raboud on 2012-07-20

* Non-maintainer upload.

* Backport multiple security issues from upstream's MOODLE_22_STABLE
  branch (Closes: #682203)
  - MDL-33808 - format title on the repository instance screen
  - MDL-33808 - incorrect cleaning of repository names
    Both patches fix CVE-2012-3393.
  - MDL-23254 Authentication : used httpswwwroot as root url during
    authentication procedure where $PAGE->https_required() is
    specified.
    Fix CVE-2012-3394
  - MDL-27675 - Feedback module abuses data_submitted
    Fix CVE-2012-3395
  - MDL-34045 fix invalid idnumber field type in cohort form
    Fix CVE-2012-3396
  - MDL-33466: Group restriction should hide activity even with 'show
    availability' option
    Fix CVE-2012-3397