ALT-PU-2026-2741: package moodle update to version 5.1.2-alt2
Описание
This update upgrades moodle to version 5.1.2-alt2.
Устраненные уязвимости34
Ссылки30
GHSA-25wf-7x6c-wmpf
https://github.com/advisories/GHSA-25wf-7x6c-wmpfGHSA-422v-w6c5-vq42
https://github.com/advisories/GHSA-422v-w6c5-vq42GHSA-5cx4-w4fh-fr57
https://github.com/advisories/GHSA-5cx4-w4fh-fr57GHSA-6mmv-f6c6-v6q8
https://github.com/advisories/GHSA-6mmv-f6c6-v6q8GHSA-8fcv-4qp9-pg32
https://github.com/advisories/GHSA-8fcv-4qp9-pg32GHSA-8jrv-wx83-w3xj
https://github.com/advisories/GHSA-8jrv-wx83-w3xjGHSA-8x27-jwjr-8545
https://github.com/advisories/GHSA-8x27-jwjr-8545GHSA-c5cj-xp43-qcc3
https://github.com/advisories/GHSA-c5cj-xp43-qcc3GHSA-cg8j-5cr2-568q
https://github.com/advisories/GHSA-cg8j-5cr2-568qGHSA-ggxq-2mg9-8966
https://github.com/advisories/GHSA-ggxq-2mg9-8966GHSA-hcm6-q6pc-xfhm
https://github.com/advisories/GHSA-hcm6-q6pc-xfhmGHSA-j5jv-w5cw-j9ff
https://github.com/advisories/GHSA-j5jv-w5cw-j9ffGHSA-jxhh-4648-vpp3
https://github.com/advisories/GHSA-jxhh-4648-vpp3GHSA-m58f-9pvv-8mp2
https://github.com/advisories/GHSA-m58f-9pvv-8mp2GHSA-mhf6-pp52-8wqj
https://github.com/advisories/GHSA-mhf6-pp52-8wqjGHSA-qfh6-h7j6-fvjv
https://github.com/advisories/GHSA-qfh6-h7j6-fvjvGHSA-qv78-6gpp-hm68
https://github.com/advisories/GHSA-qv78-6gpp-hm68GHSA-rjcm-7v2p-9265
https://github.com/advisories/GHSA-rjcm-7v2p-9265GHSA-vwhw-vp9v-q9c9
https://github.com/advisories/GHSA-vwhw-vp9v-q9c9GHSA-w29j-8phw-ffjf
https://github.com/advisories/GHSA-w29j-8phw-ffjfGHSA-xvmh-25jw-gmmm
https://github.com/advisories/GHSA-xvmh-25jw-gmmmСвязанные уязвимости
ADOdb is a PHP database class library that provides abstractions for performing queries and managing databases. Prior to version 5.22.9, improper escaping of a query parameter may allow an attacker to execute arbitrary SQL statements when the code using ADOdb connects to a PostgreSQL database and calls pg_insert_id() with user-supplied data. This issue has been patched in version 5.22.9.
ADOdb is a PHP database class library that provides abstractions for performing queries and managing databases. Prior to version 5.22.9, improper escaping of a query parameter may allow an attacker to execute arbitrary SQL statements when the code using ADOdb connects to a PostgreSQL database and calls pg_insert_id() with user-supplied data. This issue has been patched in version 5.22.9.
ADOdb is a PHP database class library that provides abstractions for p ...
SQL injection in ADOdb PostgreSQL driver pg_insert_id() method