Log message:
Pullup ticket #3814 - requested by obache
www/moodle:: security update

Revisions pulled up:
- www/moodle/Makefile                                           1.11
- www/moodle/PLIST                                              1.9
- www/moodle/distinfo                                           1.9

---
   Module Name:	pkgsrc
   Committed By:	obache
   Date:		Thu May 31 12:12:54 UTC 2012

   Modified Files:
   	pkgsrc/www/moodle: Makefile PLIST distinfo

   Log message:
   Update moodle to 2.1.6, include some security fixes.
   Based on maintainer update request by PR 46498.

   Upstream changes:

   Highlights

   * MDL-32431 Calendar events can be backed-up and restored
   * MDL-29262 Moodle 2 backup_controllers table is no longer needlessly massive

   Functional changes

   * MDL-27862 Ability to unset a theme
   * MDL-31835 Recent conversations link added when viewing a message
   * MDL-27427 Option added to delete external blog entries

   Security issues

   * MSA-12-0024 Hidden information access issue
   * MSA-12-0025 Personal communication access issue
   * MSA-12-0026 Quiz capability issue
   * MSA-12-0027 Question bank capability issues
   * MSA-12-0028 Insecure authentication issue
   * MSA-12-0029 Information editing access issue
   * MSA-12-0030 Capability manipulation issue
   * MSA-12-0031 Cross-site scripting vulnerability in Wiki
   * MSA-12-0032 Cross-site scripting vulnerability in Web services
   * MSA-12-0035 Cross-site scripting vulnerability in "download all"
   * MSA-12-0036 Cross-site scripting vulnerability in category identifier
   * MSA-12-0037 Write access issue in Database activity module
   * MSA-12-0038 Calendar event write permission issue

   Fixes and improvements

   * MDL-32061 Backup fixed when there is a lesson with attempts in the course
   * MDL-31008 CSS fixed to display dimmed objects
   * MDL-30867 Lesson essay question formatting fixed
   * MDL-31528 Breadcrumbs appearing consistently when editing is off
   * MDL-31631 Caching fixed so deleted activities do not remain listed
   * MDL-26674 Wiki Module activity logs activity fully
   * MDL-31510 Students in groups see only assignments in the Gradebook \ 
according to their group allocation
   * MDL-32141 Custom TinyMCE additions now work in Firefox 11

Log message:
Pullup ticket #3757 - requested by gls
www/moodle: security update

Revisions pulled up:
- www/moodle/Makefile                                           1.10
- www/moodle/PLIST                                              1.8
- www/moodle/distinfo                                           1.8

---
   Module Name:	pkgsrc
   Committed By:	gls
   Date:		Wed Apr 25 20:21:58 UTC 2012

   Modified Files:
   	pkgsrc/www/moodle: Makefile PLIST distinfo

   Log message:
   Update www/moodle to 2.1.5.

   Upstream changes:

   Highlights

        MDL-27891 Tag flagging is now logged

   Functional changes

        MDL-31095 Quiz max grade maintained when adding and removing questions
        MDL-30031 Quiz Adaptive mode ignores invalid answers without penalty

   Security issues

        MSA-12-0013 - Database activity export permission issue
        MSA-12-0014 - Password and Web services issue
        MSA-12-0015 - Backup and private files issue
        MSA-12-0016 - Default repository capabilities issue
        MSA-12-0017 - Personal information leak issue
        MSA-12-0018 - Course information leak in Gradebook export
        MSA-12-0019 - Overview report and hidden course issue
        MSA-12-0020 - Forum subscription permission issue
        MSA-12-0021 - Course information leak through tags
        MSA-12-0022 - Security conflict in Web services

   Fixes and improvements

        MDL-31248 Change to RC4 encryption is now backwards compatible
     - Note: all users will need to log in to set a new cookie after this update

        MDL-31213 Problem with new password form was fixed
        MDL-29254 Problem adding blog entries after an update from 1.9 was resolved
        MDL-22896 Forum messages with ampersands are now sent correctly by email
        MDL-27793 Login names now appear consistently in all themes across all \ 
languages
        MDL-26037 When importing in a site with lots of courses, all courses are \ 
checked
        MDL-30484 Regrading quiz causes essay attachments to disappear
        MDL-28364 Correct import formats accepted when importing questions
        MDL-31407 Quiz grades are saved properly when the submitter is not the \ 
user taking the quiz
        MDL-31876, MDL-31495 Quiz performance improvements have been made