exploitDog

ALT-PU-2023-6282

Критический

ALT-PU-2023-6282: package moodle update to version 3.11.17-alt1

Источник

errata.altlinux.org

Дата публикации

13.10.2023

Дата обновления

04.02.2026

Устраненные уязвимости

23

ALT Linux branch p10

ALT Server

ALT Virtualization Server

ALT Workstation

ALT Workstation K

ALT Education

Simply Linux

Starterkit

ALT Container

Описание

This update upgrades moodle to version 3.11.17-alt1.

Устраненные уязвимости23

Ссылки25

ALT-PU-2023-6282 https://errata.altlinux.org/ALT-PU-2023-6282

CVE-2023-40316 https://nvd.nist.gov/vuln/detail/CVE-2023-40316

CVE-2023-40317 https://nvd.nist.gov/vuln/detail/CVE-2023-40317

CVE-2023-40318 https://nvd.nist.gov/vuln/detail/CVE-2023-40318

CVE-2023-40319 https://nvd.nist.gov/vuln/detail/CVE-2023-40319

CVE-2023-40320 https://nvd.nist.gov/vuln/detail/CVE-2023-40320

CVE-2023-40322 https://nvd.nist.gov/vuln/detail/CVE-2023-40322

CVE-2023-40323 https://nvd.nist.gov/vuln/detail/CVE-2023-40323

CVE-2023-40324 https://nvd.nist.gov/vuln/detail/CVE-2023-40324

CVE-2023-40325 https://nvd.nist.gov/vuln/detail/CVE-2023-40325

GHSA-26fg-v32r-h663

https://github.com/advisories/GHSA-26fg-v32r-h663

GHSA-28gc-4qq5-8q26

https://github.com/advisories/GHSA-28gc-4qq5-8q26

GHSA-3xxm-3g3c-w579

https://github.com/advisories/GHSA-3xxm-3g3c-w579

GHSA-5cvx-cwpx-9rjh

https://github.com/advisories/GHSA-5cvx-cwpx-9rjh

GHSA-8q72-6qq8-xv64

https://github.com/advisories/GHSA-8q72-6qq8-xv64

GHSA-9gj3-hwp5-pmwc

https://github.com/advisories/GHSA-9gj3-hwp5-pmwc

GHSA-9gqp-3g28-w9xc

https://github.com/advisories/GHSA-9gqp-3g28-w9xc

GHSA-cwh2-q44x-5w3c

https://github.com/advisories/GHSA-cwh2-q44x-5w3c

GHSA-fm5h-58g2-4m3f

https://github.com/advisories/GHSA-fm5h-58g2-4m3f

GHSA-gpqq-952q-5327

https://github.com/advisories/GHSA-gpqq-952q-5327

GHSA-h6gj-6jjq-h8g9

https://github.com/advisories/GHSA-h6gj-6jjq-h8g9

GHSA-j5xf-gv89-g422

https://github.com/advisories/GHSA-j5xf-gv89-g422

GHSA-j7qv-pgf6-hvh4

https://github.com/advisories/GHSA-j7qv-pgf6-hvh4

GHSA-jr83-8x65-xcr5

https://github.com/advisories/GHSA-jr83-8x65-xcr5

GHSA-w8x2-w4qr-v3x4

https://github.com/advisories/GHSA-w8x2-w4qr-v3x4

Связанные уязвимости

ALT-PU-2026-6727

CVSS3: 6.5

altlinux

7 месяцев назад

ALT-PU-2026-6727: package `sympa` update to version 6.2.78-alt1

CVE-2021-41182

CVSS3: 6.1

ubuntu

около 5 лет назад

jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `altField` option of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value passed to the `altField` option is now treated as a CSS selector. A workaround is to not accept the value of the `altField` option from untrusted sources.

CVE-2021-41182

CVSS3: 6.5

redhat

около 5 лет назад

jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `altField` option of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value passed to the `altField` option is now treated as a CSS selector. A workaround is to not accept the value of the `altField` option from untrusted sources.

CVE-2021-41182

CVSS3: 6.1

nvd

около 5 лет назад

jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `altField` option of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value passed to the `altField` option is now treated as a CSS selector. A workaround is to not accept the value of the `altField` option from untrusted sources.

CVE-2021-41182

CVSS3: 6.1

debian

около 5 лет назад

jQuery-UI is the official jQuery user interface library. Prior to vers ...