Totara 2.2.32 and 2.4.23 are both "security" releases. They include bug fixes, improvements and security fixes. We recommend upgrading to these versions.

Thanks to Dan Marsden from Catalyst for contributing to T-13536 Fixed course catalogue showing "No courses in this category" even when subcategories exist

Here are the changelogs:

Release 2.2.32 (11th November 2014):
==================================================

Security issues:
    T-13146        Fixed Reportbuilder saved searches being available for guests
    T-13145        Fixed potential security vulnerabilities when editing saved searches in Reportbuilder

Bug Fixes:
    T-13278        Fixed nested audiences being updated even when they have expired
    T-13371        Fixed incorrect calculation of manual course enrolment durations

                   SCOPE: when users were enrolled onto a course manually and an enrollment
                   duration was set, the calculation of the end date was incorrect if the
                   enrollment period crossed a daylight-savings boundary.

                   IMPACT: manual enrollment periods may have had an end date that was
                   incorrect by one hour

Release 2.4.23 (11th November 2014):
==================================================

Security issues:
    T-13146        Fixed Reportbuilder saved searches being available for guests
    T-13145        Fixed potential security vulnerabilities when editing saved searches in Reportbuilder

Improvements:
    T-13194        Increased the uniqueness of param keys for audience rules
    T-11144        Backported MDL-39726 to improve performance of quiz backup/restoration

Bug Fixes:
    T-13063        Removed excess obsolete entries from cohort rule table

                   When audience rules are edited, previous versions of the rule are retained
                   in the database. This patch removes and prevents excess obsolete entries in
                   tables: cohort_rule, cohort_rule_params, cohort_rulesets and
                   cohort_rule_collections.

    T-12867        Fixed error when saving User Element Settings in Totara Sync

                   It occurs when "Source contains all records" field is set to "No"

    T-12481        Fixed custom user profile fields not being formatted correctly in Bulk User Actions download
    T-12140        Fixed the SCORM Interactions report processing SCOs with duplicated questions incorrectly
    T-13107        Fixed Facetoface Reminder notifications being sent to cancelled users
    T-13536        Fixed course catalogue showing "No courses in this category" even when subcategories exist
    T-13462        Fixed warning in the program assignment tab when using position assignment type

                   This happens when using the position assignment type and several
                   users don't have primary position assigned.

    T-13278        Fixed nested audiences being updated even when they have expired
    T-13371        Fixed incorrect calculation of manual course enrolment durations

                   SCOPE: when users were enrolled onto a course manually and an enrollment
                   duration was set, the calculation of the end date was incorrect if the
                   enrollment period crossed a daylight-savings boundary.

                   IMPACT: manual enrollment periods may have had an end date that was
                   incorrect by one hour

    T-12515        Fixed parameter names for manager rules in Dynamic Audiences
    T-12524        Fixed the default facetoface reminder notifications failing to send

                   This was due to a change of type in reminder notifications which prevented
                   them to be taken into account when the cron looked for scheduled
                   notifications.