See how epel compares to other vendors in security performance
Moodle upstream has released v1.9.9 and v1.8.13:
http://docs.moodle.org/en/Moodle1.9.9releasenotes http://docs.moodle.org/en/Moodle1.8.13releasenotes
Which address the following issues:
MSA-10-0010 Persistent Cross Site Scripting vulnerability in the MNET access control interface MSA-10-0011 Cross Site Scripting vulnerability in blog/index.php MSA-10-0012 KSES Security Filter Bypassing vulnerability MSA-10-0013 Potential Cross Site Scripting vulnerability in Quiz reports
These would affect Fedora (currently 1.9.8) and EPEL (currently 1.8.12).