Daily updates from Odoo
Tuesday, July 2, 2024
1 change · 17.0
Security fixes and vulnerability patches
This update fixes a security vulnerability where digital certificates were being returned with elevated permissions (sudo access) to users with company access. The fix ensures that digital certificates are no longer returned with these elevated permissions, protecting sensitive authentication credentials from unauthorized access.
Original PR description
Problem --------- `_get_digital_signature` currently returns a sudo certificate. This is not safe. Objective --------- Don't return a sudo certificate to anyone having access to this company. Forward-Port-Of: odoo/enterprise#65836 Forward-Port-Of: odoo/enterprise#65607