-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Tue, 10 Feb 2015 14:27:09 +0000 Source: moodle Binary: moodle Architecture: source all Version: 2.7.5+dfsg-2 Distribution: unstable Urgency: high Maintainer: Moodle Packaging Team <pkg-moodle-maintainers@lists.alioth.debian.org> Changed-By: Joost van Baal-Ilić <joostvb@debian.org> Description: moodle - course management system for online learning Changes: moodle (2.7.5+dfsg-2) unstable; urgency=high . * debian/README.Debian: add notes on upgrading. * debian/TODO: added. * debian/changelog: add CVE-number to previous entry. . moodle (2.7.5+dfsg-1) unstable; urgency=high . * New upstream security release: Moodle 2.7.5 release notes, Release date: 2 February, 2015: "A number of security related issues were resolved." "Here is the full list of fixed issues in 2.7.5: https://tracker.moodle.org/issues/?jql=project+%3D+mdl+AND+resolution+%3D+fixed+AND+fixVersion+in+%28%222.7.5%22%29+ORDER+BY+priority+DESC" Fixes include: "Preauthenticated Local File Disclosure", as reported by Emiel Florijn, MDL-48980 and MDL-48990, i.e. CVE-2015-1493 (also aliased as CVE-2015-0246). See also https://docs.moodle.org/dev/Moodle_2.7.5_release_notes and https://moodle.org/mod/forum/discuss.php?d=279956 , published feb 10 2015. Checksums-Sha1: 49af4f101f2e1a7018f6e04533322cee5a4c599d 1718 moodle_2.7.5+dfsg-2.dsc 86eb1482246e5ea94764394cf6f87ee70e51187d 72217232 moodle_2.7.5+dfsg-2.debian.tar.xz d8f7d278e1c806f478bf491c5d3e0727f8b8d000 15869702 moodle_2.7.5+dfsg-2_all.deb Checksums-Sha256: d1e5a0349d49fc9771586970e04fc844a9828a5054161420307238bc84296829 1718 moodle_2.7.5+dfsg-2.dsc 814cb15fbb0864c784a89447befcfdc3e0d8857d43916ba4735148c3191f8316 72217232 moodle_2.7.5+dfsg-2.debian.tar.xz c8dac368e1223011c6dbedb579ef40742b586fc5b91c8c42e07836f0cb38dcac 15869702 moodle_2.7.5+dfsg-2_all.deb Files: e260fd747d6a3877852f16d93c480170 1718 web optional moodle_2.7.5+dfsg-2.dsc f0ea93382a72a9d57d1bdd7bf809a4e5 72217232 web optional moodle_2.7.5+dfsg-2.debian.tar.xz 62866bef020fc4d35a868686143a2ab8 15869702 web optional moodle_2.7.5+dfsg-2_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQEcBAEBAgAGBQJU2hZaAAoJEDNRenKl5rDIpcsIAKAOcCYQyZomTcXn+QhhXN2+ xnkjgw7OO0odFssqpb9NCvFPb3rChPDyfkgME6PVDv4YErZhxv7CTpx74NCoH3Px hhEk6mhuuqcn4ak5pnvNz9dk4NVWEo8LOCJbe3En3SJdRO/tentjRKjdAGYjmfb1 eeBbmDyKqNT196UqXBVT/5mSYWo5gtsz5XwmY5sBMM+egLY1V5lN0+GjWI/0HMVc yqpVwKtAWPhiGi/M+opjXYofutL8xUuEClDVADJQmBmBuh17wY2FdlH9mBmvoZkF Z3QdI1BTrF4JRSLjwTcnIQntbB+VL0e1spG6oD7kK72H1PT0wBvbdvnN/t1aiOo= =dKpy -----END PGP SIGNATURE-----