diff --git a/general/releases/4.1/4.1.13.md b/general/releases/4.1/4.1.13.md index 255c70c61..9368a21f7 100644 --- a/general/releases/4.1/4.1.13.md +++ b/general/releases/4.1/4.1.13.md @@ -18,5 +18,9 @@ import { ReleaseNoteIntro } from '@site/src/components/ReleaseInformation'; ## Security fixes - -A number of security related issues were resolved. Details of these issues will be released after a period of approximately one week to allow system administrators to safely update to the latest version. + +- [MSA-24-0042](https://moodle.org/mod/forum/discuss.php?d=461894) - Unprotected access to sensitive information via dynamic tables.
+**Note:** Please check the announcement for further details about required coding changes for any third party Moodle code implementing dynamic tables. +- [MSA-24-0043](https://moodle.org/mod/forum/discuss.php?d=461895) - IDOR when deleting OAuth2 linked accounts +- [MSA-24-0044](https://moodle.org/mod/forum/discuss.php?d=461897) - Lesson activity password bypass through PHP loose comparison + diff --git a/general/releases/4.2/4.2.10.md b/general/releases/4.2/4.2.10.md index 598df3409..459fcdf8f 100644 --- a/general/releases/4.2/4.2.10.md +++ b/general/releases/4.2/4.2.10.md @@ -20,5 +20,9 @@ import { ReleaseNoteIntro } from '@site/src/components/ReleaseInformation'; ## Security fixes - -A number of security related issues were resolved. Details of these issues will be released after a period of approximately one week to allow system administrators to safely update to the latest version. + +- [MSA-24-0042](https://moodle.org/mod/forum/discuss.php?d=461894) - Unprotected access to sensitive information via dynamic tables.
+**Note:** Please check the announcement for further details about required coding changes for any third party Moodle code implementing dynamic tables. +- [MSA-24-0043](https://moodle.org/mod/forum/discuss.php?d=461895) - IDOR when deleting OAuth2 linked accounts +- [MSA-24-0044](https://moodle.org/mod/forum/discuss.php?d=461897) - Lesson activity password bypass through PHP loose comparison + diff --git a/general/releases/4.3/4.3.7.md b/general/releases/4.3/4.3.7.md index e9f4f3336..0e1e7d18a 100644 --- a/general/releases/4.3/4.3.7.md +++ b/general/releases/4.3/4.3.7.md @@ -30,5 +30,9 @@ import { ReleaseNoteIntro } from '@site/src/components/ReleaseInformation'; ## Security fixes - -A number of security related issues were resolved. Details of these issues will be released after a period of approximately one week to allow system administrators to safely update to the latest version. + +- [MSA-24-0042](https://moodle.org/mod/forum/discuss.php?d=461894) - Unprotected access to sensitive information via dynamic tables.
+**Note:** Please check the announcement for further details about required coding changes for any third party Moodle code implementing dynamic tables. +- [MSA-24-0043](https://moodle.org/mod/forum/discuss.php?d=461895) - IDOR when deleting OAuth2 linked accounts +- [MSA-24-0044](https://moodle.org/mod/forum/discuss.php?d=461897) - Lesson activity password bypass through PHP loose comparison + diff --git a/general/releases/4.4/4.4.3.md b/general/releases/4.4/4.4.3.md index 7685ac22f..0e59c0782 100644 --- a/general/releases/4.4/4.4.3.md +++ b/general/releases/4.4/4.4.3.md @@ -34,5 +34,9 @@ import { ReleaseNoteIntro } from '@site/src/components/ReleaseInformation'; ## Security fixes - -A number of security related issues were resolved. Details of these issues will be released after a period of approximately one week to allow system administrators to safely update to the latest version. + +- [MSA-24-0042](https://moodle.org/mod/forum/discuss.php?d=461894) - Unprotected access to sensitive information via dynamic tables.
+**Note:** Please check the announcement for further details about required coding changes for any third party Moodle code implementing dynamic tables. +- [MSA-24-0043](https://moodle.org/mod/forum/discuss.php?d=461895) - IDOR when deleting OAuth2 linked accounts +- [MSA-24-0044](https://moodle.org/mod/forum/discuss.php?d=461897) - Lesson activity password bypass through PHP loose comparison +