REDHAT-BUG-605809
First published: Fri Jun 18 2010(Updated: )
Moodle upstream has released v1.9.9 and v1.8.13: <a href="http://docs.moodle.org/en/Moodle_1.9.9_release_notes">http://docs.moodle.org/en/Moodle_1.9.9_release_notes</a> <a href="http://docs.moodle.org/en/Moodle_1.8.13_release_notes">http://docs.moodle.org/en/Moodle_1.8.13_release_notes</a> Which address the following issues: * MSA-10-0010 Persistent Cross Site Scripting vulnerability in the MNET access control interface * MSA-10-0011 Cross Site Scripting vulnerability in blog/index.php * MSA-10-0012 KSES Security Filter Bypassing vulnerability * MSA-10-0013 Potential Cross Site Scripting vulnerability in Quiz reports These would affect Fedora (currently 1.9.8) and EPEL (currently 1.8.12).
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Moodle | <1.9.9 | |
| Moodle | <1.8.13 | |
| Moodle | <1.9.8 | |
| Moodle | <1.8.12 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://docs.moodle.org/en/Moodle_1.9.9_release_notes
- http://docs.moodle.org/en/Moodle_1.8.13_release_notes
- http://www.openwall.com/lists/oss-security/2010/06/18/4
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=605810
- http://www.openwall.com/lists/oss-security/2010/06/21/2
- https://access.redhat.com/security/cve/CVE-2010-2228
- https://access.redhat.com/security/cve/CVE-2010-2229
- https://access.redhat.com/security/cve/CVE-2010-2230
- https://access.redhat.com/security/cve/CVE-2010-2231
- http://admin.fedoraproject.org/updates/moodle-1.9.9-1.fc11
- http://admin.fedoraproject.org/updates/moodle-1.8.13-1.el5
- http://admin.fedoraproject.org/updates/moodle-1.8.13-1.el4
- http://admin.fedoraproject.org/updates/moodle-1.9.9-1.fc12
- http://admin.fedoraproject.org/updates/moodle-1.9.9-1.fc13
- https://bugzilla.redhat.com/show_bug.cgi?id=605809
Frequently Asked Questions
What is the severity of REDHAT-BUG-605809?
The severity of REDHAT-BUG-605809 relates to vulnerabilities in Moodle versions prior to 1.9.9 and 1.8.13 that can lead to security issues.
How do I fix REDHAT-BUG-605809?
To fix REDHAT-BUG-605809, update Moodle to version 1.9.9 or 1.8.13.
Which versions are affected by REDHAT-BUG-605809?
REDHAT-BUG-605809 affects Moodle versions earlier than 1.9.9 and 1.8.13.
What functionalities are impacted by REDHAT-BUG-605809?
REDHAT-BUG-605809 may impact the security and integrity of user data within affected Moodle installations.
Is there a workaround for REDHAT-BUG-605809 before updating Moodle?
There is no documented workaround for REDHAT-BUG-605809; updating to the latest version is recommended.
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2010-2228
- agent/severity
- agent/references
- agent/description
- agent/event
- agent/source
- agent/tags
- agent/softwarecombine
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/moodle
- canonical/moodle
- vendor/fedora
- canonical/fedora moodle
- vendor/epel
- canonical/epel moodle