ALT-PU-2019-3145: package moodle update to version 3.7.3-alt1
Описание
This update upgrades moodle to version 3.7.3-alt1.
Устраненные уязвимости4
Ссылки5
GHSA-774q-wfcp-vc2q
https://github.com/advisories/GHSA-774q-wfcp-vc2qGHSA-g9m2-c2x5-fr2v
https://github.com/advisories/GHSA-g9m2-c2x5-fr2vGHSA-q6vw-27c6-jv9c
https://github.com/advisories/GHSA-q6vw-27c6-jv9cGHSA-rv62-6f56-j83w
https://github.com/advisories/GHSA-rv62-6f56-j83wСвязанные уязвимости
A vulnerability was found in Moodle versions 3.7.x before 3.7.3, 3.6.x before 3.6.7 and 3.5.x before 3.5.9. When a cohort role assignment was removed, the associated capabilities were not being revoked (where applicable).
A vulnerability was found in Moodle versions 3.7.x before 3.7.3, 3.6.x before 3.6.7 and 3.5.x before 3.5.9. When a cohort role assignment was removed, the associated capabilities were not being revoked (where applicable).
A vulnerability was found in Moodle versions 3.7.x before 3.7.3, 3.6.x ...
Moodle does not revoke role capabilities correctly
A vulnerability was found in Moodle versions 3.7 before 3.7.3, 3.6 before 3.6.7, 3.5 before 3.5.9 and earlier. OAuth 2 providers who do not verify users' email address changes require additional verification during sign-up to reduce the risk of account compromise.