CVE-2019-12308

Advisory

Tutor 3.9.0 includes security patches for the 'Django' underlying dependency (1.11.21 -> 1.11.27).

Affected package

Affected versions

Fixed versions

Vulnerability changelog

- [Security] Apply django 1.11.21 -> 1.11.27 security patches.
- [Bugfix] Fix running dev image with `sudo`.
- [Improvement] Add `cms/lms-env-features` patches (276).
- [Feature] Add plugin subcommands.
- 💥[Improvement] Move ``-r/--root`` option to parent command level.
- [Bugfix] Fix course about page visibility.
- [Improvement] Print gunicorn access logs in the console.
- 💥[Improvement] Get rid of the `indexcourses` and `portainer` command (269).

Resources

• https://pypi.org/project/tutor
• https://pyup.io/changelogs/tutor/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12308