lp:ubuntu/trusty-proposed/moodle

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

37. By Brian Murray on 2014-02-06

debian/rules: correct location of /var/lib/moodle

36. By Thijs Kinkhorst on 2014-01-21

* New upstream release, fixing security issues:
  - MSA-14-0001 Config passwords visibility issue [CVE-2014-0008]
  - MSA-14-0002 Group constraints lacking in "login as" [CVE-2014-0009]
  - MSA-14-0003 CSRF vulnerability in profile fields [CVE-2014-0010]
* Move /var/lib/moodle directory into package.
* Revert back to bundled yui3. Unfortunately, version in Debian and
  of upstream are not compatible (closes: #735312).

35. By Thijs Kinkhorst on 2014-01-03

* Drop unused libjs-yui dependency (closes: #730104).
* Replace bundled yui3 with dependency on packaged libjs-yui3-min.
* Add virtual-mysql-{server,client} dependency alternatives
  (closes: #732895).
* Change owner of config.php from www-data to root.
* Checked for policy 3.9.5, no changes necessary.

34. By Thijs Kinkhorst on 2013-11-29

Fix syntax error in generated config.php.

33. By Thijs Kinkhorst on 2013-11-22

* New upstream version: 2.5.3.
  - Incorporates CAS security patch.
  - Fixes security issues CVE-2013-4522, CVE-2013-4523,
    CVE-2013-4524, CVE-2013-4525, CVE-2013-6780.

32. By Thijs Kinkhorst on 2013-09-09

* New upstream version: 2.5.2.
  - Incorporates S3 security patch.

31. By Thijs Kinkhorst on 2013-08-04

* Update debconf translation for
  Swedish, thanks Martin Bagge (closes: #717323);
  Italian, thanks Beatrice Torracca (closes: #717162);
  French, thanks Julien Patriarca (closes: #717548);
  Czech, thanks Michal Simunek (closes: #717550).
* Add Breaks/Replaces moodle-book; integrated since Moodle 2.3.

30. By Thijs Kinkhorst on 2013-07-19

* New upstream version: 2.5.1.
  - Fixes security issues:
    CVE-2013-2242 CVE-2013-2243 CVE-2013-2244 CVE-2013-2245
    CVE-2013-2246
* Depend on apache2 instead of obsolete apache2-mpm-prefork.
* Use packaged libphp-phpmailer (closes: #429339), adodb,
  HTMLPurifier, PclZip.
* Update debconf translations, thanks Salvatore Merone, Pietro Tollot,
  Joe Hansen, Yuri Kozlov, Holger Wansing, Américo Monteiro,
  Adriano Rafael Gomes, victory, Michał Kułach.
  (closes: #716972, #716986, #717080, #717108, #717278)

29. By Tomasz (Tomek) Muras on 2012-11-15

New upstream version: 2.2.6 (Build: 20121112)

28. By Didier Raboud on 2012-11-12

* Non-maintainer upload.

* Backport multiple security issues from upstream's MOODLE_22_STABLE
  branch.
  - MSA-12-0057: MDL-29872 - Access issue through repository
    Fixes CVE-2012-5471
  - MSA-12-0058: MDL-32785 - Possible form data manipulation issue
    Fixes CVE-2012-5472
  - MSA-12-0059: MDL-34448 - Information leak in Database activity module
    Fixes CVE-2012-5473
  - MSA-12-0061: MDL-33791 - Remote code execution through Portfolio API
    Fixes CVE-2012-5479
  - MSA-12-0062: MDL-35558 - Information leak in Database activity module
    Fixes CVE-2012-5480