ALT-PU-2025-6924

Критический

ALT-PU-2025-6924: package moodle update to version 4.5.4-alt1

Источник

errata.altlinux.org

Дата публикации

26.05.2025

Дата обновления

04.02.2026

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

Описание

This update upgrades moodle to version 4.5.4-alt1.

Устраненные уязвимости55

BDU:2025-02321

Средний 4.3

Дата публикации: 05.03.2025

Уязвимость виртуальной обучающей среды Moodle, связанная с недостатками контроля доступа, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

CVSS 3.1

Средний 4.3

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Attack vector: Network
Complexity: Low
Privileges: Low
User interaction: None
Scope: Unchanged
Confidentiality: None
Integrity: Low
Availability: None

CVSS 2.0

Средний 4

AV:N/AC:L/Au:S/C:N/I:P/A:N

Access vector: Network
Complexity: Low
Authentication: Single
Confidentiality: None
Integrity: Partial
Availability: None

Ссылки

BDU:2025-02321 https://bdu.fstec.ru/vul/2025-02321

Ссылки27

ALT-PU-2025-6924 https://errata.altlinux.org/ALT-PU-2025-6924

GHSA-345q-9jmq-g9q4

https://github.com/advisories/GHSA-345q-9jmq-g9q4

GHSA-34g7-pg9j-pxgp

https://github.com/advisories/GHSA-34g7-pg9j-pxgp

GHSA-4hmr-39vp-xfrr

https://github.com/advisories/GHSA-4hmr-39vp-xfrr

GHSA-4w32-c9g7-27qx

https://github.com/advisories/GHSA-4w32-c9g7-27qx

GHSA-5r85-6h7f-rg3r

https://github.com/advisories/GHSA-5r85-6h7f-rg3r

GHSA-69m9-rprc-2x7g

https://github.com/advisories/GHSA-69m9-rprc-2x7g

GHSA-6g5x-h5x7-q4mq

https://github.com/advisories/GHSA-6g5x-h5x7-q4mq

GHSA-88xj-97gf-7wpq

https://github.com/advisories/GHSA-88xj-97gf-7wpq

GHSA-8m7c-hm88-2p97

https://github.com/advisories/GHSA-8m7c-hm88-2p97

GHSA-9vc3-vm42-fjhm

https://github.com/advisories/GHSA-9vc3-vm42-fjhm

GHSA-c8v6-vxhf-wcrr

https://github.com/advisories/GHSA-c8v6-vxhf-wcrr

GHSA-chmf-m33p-ph8m

https://github.com/advisories/GHSA-chmf-m33p-ph8m

GHSA-cpm7-mv33-jwf8

https://github.com/advisories/GHSA-cpm7-mv33-jwf8

GHSA-cw24-f6fq-7j9v

https://github.com/advisories/GHSA-cw24-f6fq-7j9v

GHSA-g88w-v4cq-qgcp

https://github.com/advisories/GHSA-g88w-v4cq-qgcp

GHSA-h697-w4ph-7pcx

https://github.com/advisories/GHSA-h697-w4ph-7pcx

GHSA-hxgg-4qww-85ph

https://github.com/advisories/GHSA-hxgg-4qww-85ph

GHSA-m367-445c-2xqr

https://github.com/advisories/GHSA-m367-445c-2xqr

GHSA-m8qh-hx4c-h9hr

https://github.com/advisories/GHSA-m8qh-hx4c-h9hr

GHSA-pj96-xh2w-fgqx

https://github.com/advisories/GHSA-pj96-xh2w-fgqx

GHSA-pxg4-xjp7-w9c5

https://github.com/advisories/GHSA-pxg4-xjp7-w9c5

GHSA-qhc7-xhc2-7p7w

https://github.com/advisories/GHSA-qhc7-xhc2-7p7w

GHSA-rg56-94j7-hjx9

https://github.com/advisories/GHSA-rg56-94j7-hjx9

GHSA-wr88-x8cm-7cgq

https://github.com/advisories/GHSA-wr88-x8cm-7cgq

GHSA-x3m3-4wpv-5vgc

https://github.com/advisories/GHSA-x3m3-4wpv-5vgc

GHSA-x45j-jq9q-gf3q

https://github.com/advisories/GHSA-x45j-jq9q-gf3q

Связанные уязвимости

ALT-PU-2025-7344

CVSS3: 10

altlinux

12 месяцев назад

ALT-PU-2025-7344: package `moodle` update to version 4.5.4-alt1

CVE-2024-38999

CVSS3: 10

ubuntu

больше 2 лет назад

jrburke requirejs v2.3.6 was discovered to contain a prototype pollution via the function s.contexts._.configure. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties.

CVE-2024-38999

CVSS3: 10

nvd

больше 2 лет назад

CVE-2024-38999

CVSS3: 10

debian

больше 2 лет назад

jrburke requirejs v2.3.6 was discovered to contain a prototype polluti ...

ROS-20250307-14

CVSS3: 7.5

redos

больше 1 года назад

Множественные уязвимости moodle