Hi,
The latest release talks about security fixes but there is no mention about any security items in it.
https://totara.community/mod/forum/discuss.php?d=26118
This is important as our users/sites/tools are not getting the required notifications about it.
Regards,
Sumaiya
Hi Sumaiya,
I believe you're referring to the security issue in 17.0?
That will be in minor releases that we expect to have out next week. There were mitigating factors with the issue which meant it was not necessary for those releases to go out earlier.
Kind regards,
Brendan Cox
Hi Brendan,
No, I was referring to Totara TXP 16.6, 15.12, 14.17, 13.25 => https://totara.community/mod/forum/discuss.php?d=26118. See the post talks about security releases but there are none mentioned. Also the feed like https://login.totara.community/local/login/current_release.php?version=13.25 doesn't have a "security_count" in it unlike in previous releases, like for e.g. 13.21.
Regards,
Sumaiya
Hi Sumaiya,
Apologies. That statement is there in error. There are no security fixes in those versions.
Kind regards,
Brendan
Ok. Thank you for confirming that but I would like to mention that this led us to spend a lot hours managing a security release which was not required. Can there please be a change in place which would lead to not repeating this experience as this is a waste of time and energy on our side of the fence.
I appreciate your cooperation.
Thank you.
Regards,
Sumaiya
Hi Sumaiya,
I'll feed this back to our team and we'll look to improve our process accordingly.
Apologies once again and thank you for the feedback.
Kind regards,
Brendan
Hi Sumaiya,
I've had an update from the team that handles our release process already.
There are some automated processes that generate those changelogs and they've now been modified to make checks as appropriate.
Kind regards,
Brendan
