<?xml version="1.0" encoding="UTF-8"?>
<!--PATCHINFO id="cf7a99382d35000afd76c255a9f52d5f"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="1933">
  <id>dbg111-moodle</id>
  <title>moodle: security update to 1.9.7</title>
  <release>openSUSE 11.1</release>
  <issued date="1265591273"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=564364" id="564364" title="bug number 564364" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4297" id="CVE-2009-4297" title="CVE-2009-4297" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4298" id="CVE-2009-4298" title="CVE-2009-4298" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4299" id="CVE-2009-4299" title="CVE-2009-4299" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4300" id="CVE-2009-4300" title="CVE-2009-4300" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4301" id="CVE-2009-4301" title="CVE-2009-4301" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4302" id="CVE-2009-4302" title="CVE-2009-4302" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4303" id="CVE-2009-4303" title="CVE-2009-4303" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4304" id="CVE-2009-4304" title="CVE-2009-4304" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4305" id="CVE-2009-4305" title="CVE-2009-4305" type="cve"/>
  </references>
  <description>This patch updates Moodle to the latest stable upstream
version (1.9.7) fixing multiple security issues:
CVE-2009-4297, CVE-2009-4298, CVE-2009-4299, CVE-2009-4300,
CVE-2009-4301, CVE-2009-4302, CVE-2009-4303, CVE-2009-4304,
CVE-2009-4305,  MSA-09-0030 (New detection of insecure
Flash player plugins)

The new version also has a completely new , more secure
password handling. Beside other features, Admins will be
asked to change their passwords next time they log in after
upgrading.
</description>
  <pkglist>
    <collection>
        <package name="moodle-debuginfo" arch="noarch" version="1.9.7" release="0.1.1">
          <filename>moodle-debuginfo-1.9.7-0.1.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
