Moodle 2.5.8 release notes
From MoodleDocs
This version of Moodle is no longer fully supported. Generally, only fixes to serious security issues have been applied to this version. You are encouraged to upgrade to a fully supported version of Moodle.
Releases > Moodle 2.5.8 release notes
Release date: 8 September, 2014
Here is the full list of fixed issues in 2.5.8.
Security issues
- MSA-14-0033 URL parameter injection in CAS authentication
- MSA-14-0034 Identity information revealed early in Q&A forum