ALT-PU-2023-2057: package moodle update to version 3.11.15-alt1
Описание
This update upgrades moodle to version 3.11.15-alt1.
Устраненные уязвимости36
Ссылки26
GHSA-2hmm-q272-xmhf
https://github.com/advisories/GHSA-2hmm-q272-xmhfGHSA-32jc-9p58-p82x
https://github.com/advisories/GHSA-32jc-9p58-p82xGHSA-385f-vgq7-8hhx
https://github.com/advisories/GHSA-385f-vgq7-8hhxGHSA-49mv-vfcp-8gg9
https://github.com/advisories/GHSA-49mv-vfcp-8gg9GHSA-4rmr-c2jx-vx27
https://github.com/advisories/GHSA-4rmr-c2jx-vx27GHSA-56r9-72vx-q989
https://github.com/advisories/GHSA-56r9-72vx-q989GHSA-6gx2-g773-hv9h
https://github.com/advisories/GHSA-6gx2-g773-hv9hGHSA-72w2-j52c-7682
https://github.com/advisories/GHSA-72w2-j52c-7682GHSA-77jm-f3vj-xvx2
https://github.com/advisories/GHSA-77jm-f3vj-xvx2GHSA-7mmc-22g7-3xq2
https://github.com/advisories/GHSA-7mmc-22g7-3xq2GHSA-8v23-w4w5-w83c
https://github.com/advisories/GHSA-8v23-w4w5-w83cGHSA-948f-j464-rfj2
https://github.com/advisories/GHSA-948f-j464-rfj2GHSA-97qf-pq7x-964m
https://github.com/advisories/GHSA-97qf-pq7x-964mGHSA-9f45-9qrw-pp4v
https://github.com/advisories/GHSA-9f45-9qrw-pp4vGHSA-fwfj-8p36-rc64
https://github.com/advisories/GHSA-fwfj-8p36-rc64GHSA-jqgr-gh62-jf53
https://github.com/advisories/GHSA-jqgr-gh62-jf53GHSA-mqw9-3cjm-xwp3
https://github.com/advisories/GHSA-mqw9-3cjm-xwp3GHSA-pp7m-6j83-m7r6
https://github.com/advisories/GHSA-pp7m-6j83-m7r6GHSA-prjm-2fj2-787f
https://github.com/advisories/GHSA-prjm-2fj2-787fGHSA-q2x3-2f9g-h559
https://github.com/advisories/GHSA-q2x3-2f9g-h559GHSA-vj5p-fp42-774p
https://github.com/advisories/GHSA-vj5p-fp42-774pGHSA-xjr3-fwp9-9g96
https://github.com/advisories/GHSA-xjr3-fwp9-9g96GHSA-xqcf-vgqc-pcmg
https://github.com/advisories/GHSA-xqcf-vgqc-pcmgGHSA-xv72-6pgh-cjj8
https://github.com/advisories/GHSA-xv72-6pgh-cjj8GHSA-xxp4-mf4h-6cwm
https://github.com/advisories/GHSA-xxp4-mf4h-6cwmСвязанные уязвимости
ALT-PU-2023-2012: package `moodle` update to version 3.11.15-alt1
This affects the package video.js before 7.14.3. The src attribute of track tag allows to bypass HTML escaping and execute arbitrary code.
Improper Neutralization of Special Elements Used in a Template Engine in Packagist mustache/mustache prior to 2.14.1.
Improper Neutralization of Special Elements Used in a Template Engine in Packagist mustache/mustache prior to 2.14.1.