Vulnerability Bulletins

MSA-19-0020: Python Machine Learning dependency versions bumped

   
Affected software PHP
 
by Michael Hawkins. The analytics Python Machine Learning backend has received some security fixes, resulting in the required PIP package version being increased. (Note: Sites using the PHP ML backend, or not using analytics are not affected)Severity/Risk:MinorVersions affected:3.7 to 3.7.1, 3.6 to 3.6.5 and 3.5 to 3.5.7 and earlier unsupported versionsVersions fixed:3.7.2, 3.6.6 and 3.5.8Reported by:David MonllaóCVE identifier:N/AChanges

More info:

https://moodle.org/mod/forum/discuss.php?d=391032&parent=1576208