ALT-PU-2020-3059: package moodle update to version 3.9.2-alt1
Описание
This update upgrades moodle to version 3.9.2-alt1.
Устраненные уязвимости7
Ссылки7
GHSA-4w4j-9533-82qg
https://github.com/advisories/GHSA-4w4j-9533-82qgGHSA-5x33-h32w-6vr2
https://github.com/advisories/GHSA-5x33-h32w-6vr2GHSA-66xp-28cq-mrf2
https://github.com/advisories/GHSA-66xp-28cq-mrf2GHSA-9q29-jcjw-fw7h
https://github.com/advisories/GHSA-9q29-jcjw-fw7hGHSA-f5r8-7h4f-jr9x
https://github.com/advisories/GHSA-f5r8-7h4f-jr9xGHSA-fcpw-vqh5-6qwj
https://github.com/advisories/GHSA-fcpw-vqh5-6qwjСвязанные уязвимости
In Moodle before 3.9.1, 3.8.4 and 3.7.7, the filter in the admin task log required extra sanitizing to prevent a reflected XSS risk.
In Moodle before 3.9.1, 3.8.4 and 3.7.7, the filter in the admin task log required extra sanitizing to prevent a reflected XSS risk.
In Moodle before 3.9.1, 3.8.4 and 3.7.7, the filter in the admin task ...
In Moodle before 3.9.1, 3.8.4, 3.7.7 and 3.5.13, teachers of a course were able to assign themselves the manager role within that course.