CVS commit: [pkgsrc-2011Q4] pkgsrc/www/moodle

["Matthias Scheler" <tron%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   tron
Date:           Thu Jan 26 23:44:34 UTC 2012

Modified Files:
        pkgsrc/www/moodle [pkgsrc-2011Q4]: Makefile PLIST distinfo

Log Message:
Pullup ticket #3662 - requested by gls
www/moodle: security update

Revisions pulled up:
- www/moodle/Makefile                                           1.9
- www/moodle/PLIST                                              1.7
- www/moodle/distinfo                                           1.7

---
   Module Name: pkgsrc
   Committed By:        gls
   Date:                Sun Jan 22 12:16:02 UTC 2012

   Modified Files:
        pkgsrc/www/moodle: Makefile PLIST distinfo

   Log Message:
   Update www/moodle to 2.1.4

   Fixes many security advisories, see below in the changelog.

   Highlights

   MDL-28710 - CSS class names have been added for rating div/span elements
   enabling theming
   MDL-29579 - Question text included in export of quiz statistics report in
   Moodle 2.1

   Functional changes

   MDL-19147 - Single Simple forums are no longer targets for moving (and 
losing)
   discussions
   MDL-30273 - Students and teachers can add additional topics to a simple forum
   discussion

   Security issues

   MSA-12-0001 - Recaptcha transmission consistency issue
   MSA-12-0003 - Added password protection
   MSA-12-0004 - Added profile image security
   MSA-12-0005 - Encryption enhancement
   MSA-12-0006 - Additional email address validation
   MSA-12-0007 - Email injection prevention
   MSA-12-0008 - Unsynchronised access via tokens
   MSA-12-0009 - Role access issue
   MSA-12-0010 - Unauthorised access to session key
   MSA-12-0011 - Browser autofill password issue
   MSA-12-0012 - Form validation issue

   Fixes and improvements

   MDL-30376 - Glossary RSS feed no longer generates error
   MDL-30378 - Site page links fixed in Navigation blocks
   MDL-30460 - Wiki image dropdown includes files with upper case suffixes
   MDL-30466 - Writing to database fixed for restoring a course with uses course
   completion
   MDL-30569 - Editing the front page when defaulthomepage = mymoodle now works 
as
   expected
   MDL-28180 - Duplicating an assignment that has course completion enabled no
   longer breaks course completion for the course
   MDL-27314 - It is now possible to delete or regrade quiz attempts in separate
   groups mode
   MDL-29730 - Fixed Lesson question shortanswer with regexp option
   MDL-30260 - Emailstop option fixed


To generate a diff of this commit:
cvs rdiff -u -r1.8 -r1.8.2.1 pkgsrc/www/moodle/Makefile
cvs rdiff -u -r1.6 -r1.6.2.1 pkgsrc/www/moodle/PLIST \
    pkgsrc/www/moodle/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.