Vulnerability Bulletins

MSA-19-0020: Python Machine Learning dependency versions bumped


System information

   
Affected software PHP

Description

by Michael Hawkins. The analytics Python Machine Learning backend has received some security fixes, resulting in the required PIP package version being increased. (Note: Sites using the PHP ML backend, or not using analytics are not affected)Severity/Risk:MinorVersions affected:3.7 to 3.7.1, 3.6 to 3.6.5 and 3.5 to 3.5.7 and earlier unsupported versionsVersions fixed:3.7.2, 3.6.6 and 3.5.8Reported by:David MonllaóCVE identifier:N/AChanges

More info:

https://moodle.org/mod/forum/discuss.php?d=391032&parent=1576208

Standar resources

Property Value
CVE

Version history

Version Comments Date
1.0 Advisory issued 2019-09-17
Ministerio de Defensa
CNI
CCN
CCN-CERT