-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Mon, 12 Nov 2012 10:00:00 +0100 Source: moodle Binary: moodle Architecture: source all Version: 2.2.3.dfsg-2.6 Distribution: unstable Urgency: low Maintainer: Moodle Packaging Team <pkg-moodle-maintainers@lists.alioth.debian.org> Changed-By: Didier Raboud <odyx@debian.org> Description: moodle - course management system for online learning Changes: moodle (2.2.3.dfsg-2.6) unstable; urgency=low . * Non-maintainer upload. . * Backport multiple security issues from upstream's MOODLE_22_STABLE branch. - MSA-12-0057: MDL-29872 - Access issue through repository Fixes CVE-2012-5471 - MSA-12-0058: MDL-32785 - Possible form data manipulation issue Fixes CVE-2012-5472 - MSA-12-0059: MDL-34448 - Information leak in Database activity module Fixes CVE-2012-5473 - MSA-12-0061: MDL-33791 - Remote code execution through Portfolio API Fixes CVE-2012-5479 - MSA-12-0062: MDL-35558 - Information leak in Database activity module Fixes CVE-2012-5480 Checksums-Sha1: 6c833f0501cb92ed958cde75cc78370c9a4d1a25 1875 moodle_2.2.3.dfsg-2.6.dsc fa6c56141fa8441395d1533a2cf378ebd55afd97 42763 moodle_2.2.3.dfsg-2.6.debian.tar.gz ce958e9b7698d033e3ba45b46d8b83e8536f5aaa 16279108 moodle_2.2.3.dfsg-2.6_all.deb Checksums-Sha256: 05485635e6da5a30c72ffcf02813e07fb23c125a73c25627aa16fbac1fad48a5 1875 moodle_2.2.3.dfsg-2.6.dsc 677a34cd5e430864572b532860763e3986babc780b9e70e10e3a9139ad25e096 42763 moodle_2.2.3.dfsg-2.6.debian.tar.gz b0ca22032e21993c5e5f8b48b14e067e63a05f8e6564cf9860d057d0987d1f85 16279108 moodle_2.2.3.dfsg-2.6_all.deb Files: d4c17dfd535c7bdf498fb4def48e6342 1875 web optional moodle_2.2.3.dfsg-2.6.dsc ab46c202f20777985b245dd4c5eb264e 42763 web optional moodle_2.2.3.dfsg-2.6.debian.tar.gz 2baf284ad79b6a20d9319173e5316f06 16279108 web optional moodle_2.2.3.dfsg-2.6_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQGcBAEBCAAGBQJQoL8XAAoJEIvPpx7KFjRVL7UL/iHEfP6pdlpPXAQpAh80W3YD 5Oaly7uNaklTaI1/Ixe7W+RFCDxilf6tRf8eRZftBjeVDT25QrNEpynIdBES2pd9 rKovPBWY+UWl9djLddSzNa3Jh68KRPmBiD8mAnuopyHXV6TJwaMCyGIUkyZQF/RU i+Oz3o2EkunKO2lhyklnP5EZkRYnoCEr/o6Y4JyyOzwYy9JOiHGCjGVyCFrGwRnk YqDELA2pgU727siWu6Au7MliYsT8+fSSvZVeAZVViR8DbFNVmkrya563MyjqL97E uNrAxKlv7dfZmQ8twvTBAjKB+GHLJTRxvpQ/hBFRKNzUWsVSvyf44LdYZ6mkejXS 2ElKf+NDNL1fbfV5j6meRm7zGZruH9ryFSDMNW8I9wBWToVx7d0oZb1XgAsE7zv/ ht28xUdk+zyBKwIXQGVNCrVveAO0z0moQiO0EWjKvEhXs5h9VnJxS/H9y+lgbyTa plRZwMgNFE8VYjs+zlwUCrPm7pVbiq1f0Ep5aeHeSw== =RNAX -----END PGP SIGNATURE-----