Apply security patch openedx#28442

See: https://discuss.openedx.org/t/security-patch-for-xxe-vulnerability-in-course-import/5575
edly-io · Aug 12, 2021 · c33bd7c · c33bd7c
1 parent eeb08f6
commit c33bd7c
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 1 deletion.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -4,6 +4,8 @@ Note: Breaking changes between versions are indicated by "💥".
 
 ## Unreleased
 
+- [Security] Apply security patch [28442](https://github.com/edx/edx-platform/pull/28442).
+
 ## v12.0.3 (2021-08-10)
 
 - [Improvement] Upgrade all services to open-release/lilac.2.

diff --git a/tutor/templates/build/openedx/Dockerfile b/tutor/templates/build/openedx/Dockerfile
@@ -40,7 +40,8 @@ WORKDIR /openedx/edx-platform
 {{ patch("openedx-dockerfile-git-patches-default") }}
 {% else %}
 # Patch edx-platform
-# RUN curl https://github.com/overhangio/edx-platform/commit/<sha1>.patch | git apply -
+# RUN curl --silent https://github.com/overhangio/edx-platform/commit/<sha1>.patch | git apply -
+RUN curl --silent https://github.com/overhangio/edx-platform/commit/8ecc1903ca9170a719c0e63e99fb231822eb26d8.patch | git apply -
 {% endif %}
 
 ###### Download extra locales to /openedx/locale/contrib/locale