Diferencia entre revisiones de «Notas de Moodle 2.6.7»
De MoodleDocs
(tidy up) |
(Updated as per DEV page) |
||
| Línea 11: | Línea 11: | ||
===Asuntos de seguridad=== | ===Asuntos de seguridad=== | ||
* [https://moodle.org/mod/forum/discuss.php?d=278611 MSA-15-0001] Insufficient access check in LTI module | |||
* [https://moodle.org/mod/forum/discuss.php?d=278612 MSA-15-0002] XSS vulnerability in course request pending approval page | |||
* [https://moodle.org/mod/forum/discuss.php?d=278613 MSA-15-0003] CSRF possible in Glossary module | |||
* [https://moodle.org/mod/forum/discuss.php?d=278614 MSA-15-0004] Information leak through messaging functions in web-services | |||
* [https://moodle.org/mod/forum/discuss.php?d=278615 MSA-15-0005] Insufficient access check in calendar functions in web-services | |||
* [https://moodle.org/mod/forum/discuss.php?d=278617 MSA-15-0007] ReDoS possible in the multimedia filter | |||
* [https://moodle.org/mod/forum/discuss.php?d=278618 MSA-15-0008] Forced logout through Shibboleth authentication plugin | |||
==Vea también== | ==Vea también== | ||
Revisión actual - 15:35 19 ene 2015
Esta versión de Moodle ya no está soportada. Se le recomienda hacer una Actualización a una versión soportada de Moodle.
Moodle 2.6
Historia de las versiones > Notas de Moodle 2.6.7
Fecha de liberación: 12 enero 2015
Aquí está la lista completa de mejoras en 2.6.7.
Asuntos de seguridad
- MSA-15-0001 Insufficient access check in LTI module
- MSA-15-0002 XSS vulnerability in course request pending approval page
- MSA-15-0003 CSRF possible in Glossary module
- MSA-15-0004 Information leak through messaging functions in web-services
- MSA-15-0005 Insufficient access check in calendar functions in web-services
- MSA-15-0007 ReDoS possible in the multimedia filter
- MSA-15-0008 Forced logout through Shibboleth authentication plugin
