Skip to content

Commit

Permalink
Merge pull request #1128 from mickhawkins/main
Browse files Browse the repository at this point in the history
[docs] Add security announcements to 4.4.3 and friends
  • Loading branch information
andrewnicols authored Sep 20, 2024
2 parents 4c73063 + a3a122d commit c8c8a95
Show file tree
Hide file tree
Showing 4 changed files with 24 additions and 8 deletions.
8 changes: 6 additions & 2 deletions general/releases/4.1/4.1.13.md
Original file line number Diff line number Diff line change
Expand Up @@ -18,5 +18,9 @@ import { ReleaseNoteIntro } from '@site/src/components/ReleaseInformation';
<!-- cspell:enable -->

## Security fixes

A number of security related issues were resolved. Details of these issues will be released after a period of approximately one week to allow system administrators to safely update to the latest version.
<!-- cspell:disable -->
- [MSA-24-0042](https://moodle.org/mod/forum/discuss.php?d=461894) - Unprotected access to sensitive information via dynamic tables.<br/>
**Note:** Please check the announcement for further details about required coding changes for any third party Moodle code implementing dynamic tables.
- [MSA-24-0043](https://moodle.org/mod/forum/discuss.php?d=461895) - IDOR when deleting OAuth2 linked accounts
- [MSA-24-0044](https://moodle.org/mod/forum/discuss.php?d=461897) - Lesson activity password bypass through PHP loose comparison
<!-- cspell:enable -->
8 changes: 6 additions & 2 deletions general/releases/4.2/4.2.10.md
Original file line number Diff line number Diff line change
Expand Up @@ -20,5 +20,9 @@ import { ReleaseNoteIntro } from '@site/src/components/ReleaseInformation';
<!-- cspell:enable -->

## Security fixes

A number of security related issues were resolved. Details of these issues will be released after a period of approximately one week to allow system administrators to safely update to the latest version.
<!-- cspell:disable -->
- [MSA-24-0042](https://moodle.org/mod/forum/discuss.php?d=461894) - Unprotected access to sensitive information via dynamic tables.<br/>
**Note:** Please check the announcement for further details about required coding changes for any third party Moodle code implementing dynamic tables.
- [MSA-24-0043](https://moodle.org/mod/forum/discuss.php?d=461895) - IDOR when deleting OAuth2 linked accounts
- [MSA-24-0044](https://moodle.org/mod/forum/discuss.php?d=461897) - Lesson activity password bypass through PHP loose comparison
<!-- cspell:enable -->
8 changes: 6 additions & 2 deletions general/releases/4.3/4.3.7.md
Original file line number Diff line number Diff line change
Expand Up @@ -30,5 +30,9 @@ import { ReleaseNoteIntro } from '@site/src/components/ReleaseInformation';
<!-- cspell:enable -->

## Security fixes

A number of security related issues were resolved. Details of these issues will be released after a period of approximately one week to allow system administrators to safely update to the latest version.
<!-- cspell:disable -->
- [MSA-24-0042](https://moodle.org/mod/forum/discuss.php?d=461894) - Unprotected access to sensitive information via dynamic tables.<br/>
**Note:** Please check the announcement for further details about required coding changes for any third party Moodle code implementing dynamic tables.
- [MSA-24-0043](https://moodle.org/mod/forum/discuss.php?d=461895) - IDOR when deleting OAuth2 linked accounts
- [MSA-24-0044](https://moodle.org/mod/forum/discuss.php?d=461897) - Lesson activity password bypass through PHP loose comparison
<!-- cspell:enable -->
8 changes: 6 additions & 2 deletions general/releases/4.4/4.4.3.md
Original file line number Diff line number Diff line change
Expand Up @@ -34,5 +34,9 @@ import { ReleaseNoteIntro } from '@site/src/components/ReleaseInformation';
<!-- cspell:enable -->

## Security fixes

A number of security related issues were resolved. Details of these issues will be released after a period of approximately one week to allow system administrators to safely update to the latest version.
<!-- cspell:disable -->
- [MSA-24-0042](https://moodle.org/mod/forum/discuss.php?d=461894) - Unprotected access to sensitive information via dynamic tables.<br/>
**Note:** Please check the announcement for further details about required coding changes for any third party Moodle code implementing dynamic tables.
- [MSA-24-0043](https://moodle.org/mod/forum/discuss.php?d=461895) - IDOR when deleting OAuth2 linked accounts
- [MSA-24-0044](https://moodle.org/mod/forum/discuss.php?d=461897) - Lesson activity password bypass through PHP loose comparison
<!-- cspell:enable -->

0 comments on commit c8c8a95

Please sign in to comment.