sec: fix LTI consumer xblock grading

See advisory: GHSA-7j9p-67mm-5g87 Discussion: https://discuss.openedx.org/t/upcoming-security-release-xblock-lti-consumer/9165 Pull requests: openedx/xblock-lti-consumer#331 openedx/edx-platform#31724
overhangio · Feb 9, 2023 · 9df3b18 · 9df3b18
1 parent 561460e
commit 9df3b18
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 0 deletions.
diff --git a/changelog.d/20230209_092607_regis_sec_lti.md b/changelog.d/20230209_092607_regis_sec_lti.md
@@ -0,0 +1 @@
+- [Security] Fix grading issue in LTI consumer XBlock. See [security advisory](https://github.com/openedx/xblock-lti-consumer/security/advisories/GHSA-7j9p-67mm-5g87). (by @regisb)
diff --git a/tutor/templates/build/openedx/Dockerfile b/tutor/templates/build/openedx/Dockerfile
@@ -53,6 +53,9 @@ RUN curl -fsSL https://github.com/openedx/edx-platform/commit/20b93b8b01276edadd
 # Fix TinyMCE editor for html components
 # https://github.com/openedx/edx-platform/pull/31500
 RUN curl -fsSL https://github.com/openedx/edx-platform/commit/5af42f8ba3.patch | git am
+# Fix security issue in lti-consumer-xblock
+# https://github.com/openedx/edx-platform/pull/31724
+RUN curl -fsSL https://github.com/openedx/edx-platform/commit/5f901a35d2.patch | git am
 {%- endif %}
 
 {# Example: RUN curl -fsSL https://github.com/openedx/edx-platform/commit/<GITSHA1> | git am #}