Nixpkgs security tracker

Permalink CVE-2012-1157

updated 2 months, 4 weeks ago by @LeSuisse Activity log

Created suggestion 3 months, 1 week ago
@LeSuisse ignored package moodle-dl 2 months, 4 weeks ago
@LeSuisse dismissed 2 months, 4 weeks ago

Moodle before 2.2.2 has a default repository capabilities issue where …

Moodle before 2.2.2 has a default repository capabilities issue where all repositories are viewable by all users by default

References

http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078209.html x_transferredx_refsource_MISC
https://security-tracker.debian.org/tracker/CVE-2012-1157 x_transferredx_refsource_MISC
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1157 x_transferredx_refsource_MISC
https://access.redhat.com/security/cve/cve-2012-1157 x_transferredx_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081047.html x_transferredx_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078210.html x_transferredx_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077635.html x_transferredx_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080712.html x_transferredx_refsource_MISC
https://moodle.org/mod/forum/discuss.php?d=198624 x_refsource_CONFIRMx_transferred

Affected products

Moodle

==2.0 to 2.0.7+
==2.2 to 2.2.1+
==2.1 to 2.1.4+

Matching in nixpkgs

pkgs.moodle

Free and open-source learning management system (LMS) written in PHP

nixos-unstable 5.1.1
- nixpkgs-unstable 5.1.1
- nixos-unstable-small 5.1.1
nixos-25.11 5.0.4
- nixos-25.11-small 5.0.4
- nixpkgs-25.11-darwin 5.0.4

Ignored packages (1)

pkgs.moodle-dl

Moodle downloader that downloads course content fast from Moodle

nixos-unstable 2.3.13
- nixpkgs-unstable 2.3.13
- nixos-unstable-small 2.3.13
nixos-25.11 2.3.13
- nixos-25.11-small 2.3.13
- nixpkgs-25.11-darwin 2.3.13

Package maintainers

@freezeboy freezeboy

Old issue current stable branch was never impacted.

Permalink CVE-2012-1161

updated 2 months, 4 weeks ago by @LeSuisse Activity log

Created suggestion 3 months, 1 week ago
@LeSuisse ignored package moodle-dl 2 months, 4 weeks ago
@LeSuisse dismissed 2 months, 4 weeks ago

Moodle before 2.2.2: Course information leak via hidden courses being …

Moodle before 2.2.2: Course information leak via hidden courses being displayed in tag search results

References

http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078209.html x_transferredx_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081047.html x_transferredx_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078210.html x_transferredx_refsource_MISC
https://security-tracker.debian.org/tracker/CVE-2012-1161 x_transferredx_refsource_MISC
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1161 x_transferredx_refsource_MISC
https://access.redhat.com/security/cve/cve-2012-1161 x_transferredx_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077635.html x_transferredx_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080712.html x_transferredx_refsource_MISC
https://moodle.org/mod/forum/discuss.php?d=198630 x_refsource_CONFIRMx_transferred

Affected products

Moodle

==2.2 to 2.2.1+
==2.1 to 2.1.4+

Matching in nixpkgs

pkgs.moodle

Free and open-source learning management system (LMS) written in PHP

nixos-unstable 5.1.1
- nixpkgs-unstable 5.1.1
- nixos-unstable-small 5.1.1
nixos-25.11 5.0.4
- nixos-25.11-small 5.0.4
- nixpkgs-25.11-darwin 5.0.4

Ignored packages (1)

pkgs.moodle-dl

Moodle downloader that downloads course content fast from Moodle

nixos-unstable 2.3.13
- nixpkgs-unstable 2.3.13
- nixos-unstable-small 2.3.13
nixos-25.11 2.3.13
- nixos-25.11-small 2.3.13
- nixpkgs-25.11-darwin 2.3.13

Package maintainers

@freezeboy freezeboy

Old issue current stable branch was never impacted.

Permalink CVE-2012-1156

updated 2 months, 4 weeks ago by @LeSuisse Activity log

Created suggestion 3 months, 1 week ago
@LeSuisse ignored package moodle-dl 2 months, 4 weeks ago
@LeSuisse dismissed 2 months, 4 weeks ago

Moodle before 2.2.2 has users' private files included in course …

Moodle before 2.2.2 has users' private files included in course backups

References

http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078209.html x_transferredx_refsource_MISC
https://security-tracker.debian.org/tracker/CVE-2012-1156 x_transferredx_refsource_MISC
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1156 x_transferredx_refsource_MISC
https://access.redhat.com/security/cve/cve-2012-1156 x_transferredx_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081047.html x_transferredx_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078210.html x_transferredx_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077635.html x_transferredx_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080712.html x_transferredx_refsource_MISC
https://moodle.org/mod/forum/discuss.php?d=198623 x_refsource_CONFIRMx_transferred

Affected products

Moodle

==2.0 to 2.0.7+
==2.2 to 2.2.1+
==2.1 to 2.1.4+

Matching in nixpkgs

pkgs.moodle

Free and open-source learning management system (LMS) written in PHP

nixos-unstable 5.1.1
- nixpkgs-unstable 5.1.1
- nixos-unstable-small 5.1.1
nixos-25.11 5.0.4
- nixos-25.11-small 5.0.4
- nixpkgs-25.11-darwin 5.0.4

Ignored packages (1)

pkgs.moodle-dl

Moodle downloader that downloads course content fast from Moodle

nixos-unstable 2.3.13
- nixpkgs-unstable 2.3.13
- nixos-unstable-small 2.3.13
nixos-25.11 2.3.13
- nixos-25.11-small 2.3.13
- nixpkgs-25.11-darwin 2.3.13

Package maintainers

@freezeboy freezeboy

Old issue current stable branch was never impacted.

Permalink CVE-2012-1159

updated 2 months, 4 weeks ago by @LeSuisse Activity log

Created suggestion 3 months, 1 week ago
@LeSuisse ignored package moodle-dl 2 months, 4 weeks ago
@LeSuisse dismissed 2 months, 4 weeks ago

Moodle before 2.2.2: Overview report allows users to see hidden …

Moodle before 2.2.2: Overview report allows users to see hidden courses

References

http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078209.html x_transferredx_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081047.html x_transferredx_refsource_MISC
https://security-tracker.debian.org/tracker/CVE-2012-1159 x_transferredx_refsource_MISC
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1159 x_transferredx_refsource_MISC
https://access.redhat.com/security/cve/cve-2012-1159 x_transferredx_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078210.html x_transferredx_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077635.html x_transferredx_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080712.html x_transferredx_refsource_MISC
https://moodle.org/mod/forum/discuss.php?d=198628 x_refsource_CONFIRMx_transferred

Affected products

Moodle

==2.2 to 2.2.1+
==2.1 to 2.1.4+

Matching in nixpkgs

pkgs.moodle

Free and open-source learning management system (LMS) written in PHP

nixos-unstable 5.1.1
- nixpkgs-unstable 5.1.1
- nixos-unstable-small 5.1.1
nixos-25.11 5.0.4
- nixos-25.11-small 5.0.4
- nixpkgs-25.11-darwin 5.0.4

Ignored packages (1)

pkgs.moodle-dl

Moodle downloader that downloads course content fast from Moodle

nixos-unstable 2.3.13
- nixpkgs-unstable 2.3.13
- nixos-unstable-small 2.3.13
nixos-25.11 2.3.13
- nixos-25.11-small 2.3.13
- nixpkgs-25.11-darwin 2.3.13

Package maintainers

@freezeboy freezeboy

Old issue current stable branch was never impacted.

Permalink CVE-2012-1158

updated 2 months, 4 weeks ago by @LeSuisse Activity log

Created suggestion 3 months, 1 week ago
@LeSuisse ignored package moodle-dl 2 months, 4 weeks ago
@LeSuisse dismissed 2 months, 4 weeks ago

Moodle before 2.2.2 has a course information leak in gradebook …

Moodle before 2.2.2 has a course information leak in gradebook where users are able to see hidden grade items in export

References

http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078209.html x_transferredx_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081047.html x_transferredx_refsource_MISC
https://security-tracker.debian.org/tracker/CVE-2012-1158 x_transferredx_refsource_MISC
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1158 x_transferredx_refsource_MISC
https://access.redhat.com/security/cve/cve-2012-1158 x_transferredx_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078210.html x_transferredx_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077635.html x_transferredx_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080712.html x_transferredx_refsource_MISC
https://moodle.org/mod/forum/discuss.php?d=198627 x_refsource_CONFIRMx_transferred

Affected products

Moodle

==2.2 to 2.2.1+
==2.1 to 2.1.4+

Matching in nixpkgs

pkgs.moodle

Free and open-source learning management system (LMS) written in PHP

nixos-unstable 5.1.1
- nixpkgs-unstable 5.1.1
- nixos-unstable-small 5.1.1
nixos-25.11 5.0.4
- nixos-25.11-small 5.0.4
- nixpkgs-25.11-darwin 5.0.4

Ignored packages (1)

pkgs.moodle-dl

Moodle downloader that downloads course content fast from Moodle

nixos-unstable 2.3.13
- nixpkgs-unstable 2.3.13
- nixos-unstable-small 2.3.13
nixos-25.11 2.3.13
- nixos-25.11-small 2.3.13
- nixpkgs-25.11-darwin 2.3.13

Package maintainers

@freezeboy freezeboy

Old issue current stable branch was never impacted.

Permalink CVE-2012-1155

updated 2 months, 4 weeks ago by @LeSuisse Activity log

Created suggestion 3 months, 1 week ago
@LeSuisse ignored package moodle-dl 2 months, 4 weeks ago
@LeSuisse dismissed 2 months, 4 weeks ago

Moodle has a database activity export permission issue where the …

Moodle has a database activity export permission issue where the export function of the database activity module exports all entries even those from groups the user does not belong to

References

https://security-tracker.debian.org/tracker/CVE-2012-1155 x_transferredx_refsource_MISC
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1155 x_transferredx_refsource_MISC
https://access.redhat.com/security/cve/cve-2012-1155 x_transferredx_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078209.html x_transferredx_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081047.html x_transferredx_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078210.html x_transferredx_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077635.html x_transferredx_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080712.html x_transferredx_refsource_MISC
https://moodle.org/mod/forum/discuss.php?d=198621 x_refsource_CONFIRMx_transferred

Affected products

Moodle

==2.0.x
==2.2.x
==1.9.x
==2.1.x

Matching in nixpkgs

pkgs.moodle

Free and open-source learning management system (LMS) written in PHP

nixos-unstable 5.1.1
- nixpkgs-unstable 5.1.1
- nixos-unstable-small 5.1.1
nixos-25.11 5.0.4
- nixos-25.11-small 5.0.4
- nixpkgs-25.11-darwin 5.0.4

Ignored packages (1)

pkgs.moodle-dl

Moodle downloader that downloads course content fast from Moodle

nixos-unstable 2.3.13
- nixpkgs-unstable 2.3.13
- nixos-unstable-small 2.3.13
nixos-25.11 2.3.13
- nixos-25.11-small 2.3.13
- nixpkgs-25.11-darwin 2.3.13

Package maintainers

@freezeboy freezeboy

Old issue current stable branch was never impacted.

Permalink CVE-2012-1168

updated 2 months, 4 weeks ago by @LeSuisse Activity log

Created suggestion 3 months, 1 week ago
@LeSuisse ignored package moodle-dl 2 months, 4 weeks ago
@LeSuisse dismissed 2 months, 4 weeks ago

Moodle before 2.2.2 has a password and web services issue …

Moodle before 2.2.2 has a password and web services issue where when the user profile is updated the user password is reset if not specified.

References

http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078209.html x_transferredx_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081047.html x_transferredx_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078210.html x_transferredx_refsource_MISC
https://security-tracker.debian.org/tracker/CVE-2012-1168 x_transferredx_refsource_MISC
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1168 x_transferredx_refsource_MISC
https://access.redhat.com/security/cve/cve-2012-1168 x_transferredx_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077635.html x_transferredx_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080712.html x_transferredx_refsource_MISC
https://moodle.org/mod/forum/discuss.php?d=198622 x_refsource_CONFIRMx_transferred

Affected products

Moodle

==2.0 to 2.0.7+
==2.2 to 2.2.1+
==2.1 to 2.1.4+

Matching in nixpkgs

pkgs.moodle

Free and open-source learning management system (LMS) written in PHP

nixos-unstable 5.1.1
- nixpkgs-unstable 5.1.1
- nixos-unstable-small 5.1.1
nixos-25.11 5.0.4
- nixos-25.11-small 5.0.4
- nixpkgs-25.11-darwin 5.0.4

Ignored packages (1)

pkgs.moodle-dl

Moodle downloader that downloads course content fast from Moodle

nixos-unstable 2.3.13
- nixpkgs-unstable 2.3.13
- nixos-unstable-small 2.3.13
nixos-25.11 2.3.13
- nixos-25.11-small 2.3.13
- nixpkgs-25.11-darwin 2.3.13

Package maintainers

@freezeboy freezeboy

Old issue current stable branch was never impacted.

Suggestions search

References

Affected products

Matching in nixpkgs

pkgs.moodle

pkgs.moodle-dl

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.moodle

pkgs.moodle-dl

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.moodle

pkgs.moodle-dl

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.moodle

pkgs.moodle-dl

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.moodle

pkgs.moodle-dl

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.moodle

pkgs.moodle-dl

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.moodle

pkgs.moodle-dl

Package maintainers