Security and privacy

Good day,

I'm looking for documentation on Moodle security patching. I've tried to apply the patch for MSA-10-0001 (Vulnerability in KSES text cleaning) on a standard Moodle 1.9.7 deployment by downloading the patch file from http://cvs.moodle.org/moodle/lib/weblib.php?r1=1.1349&r2=1.1350 (as per the security announcement workaround link), copying it to my Linux server into moodle/lib and applied it to the code by running: patch -p0 < MSA-10-0001.diff

The results:
patching file weblib.php
Hunk #1 FAILED at 1149.
1 out of 1 hunk FAILED -- saving rejects to file weblib.php.rej

The contents of weblib.php.rej:
***************
*** 1149,1156 ****
* @return string
*/
function fix_non_standard_entities($string) {
- $text = preg_replace('/(&#[0-9]+)(;?)/', '$1;', $string);
- $text = preg_replace('/(&#x[0-9a-fA-F]+)(;?)/', '$1;', $text);
return $text;
}

--- 1149,1156 ----
* @return string
*/
function fix_non_standard_entities($string) {
+ $text = preg_replace('/&#0*([0-9]+);?/', '&#$1;', $string);
+ $text = preg_replace('/&#x0*([0-9a-fA-F]+);?/', '&#x$1;', $text);
return $text;
}

When looking at the original weblib.php file I do not see the function fix_non_standard_entities mentioned in the provided Moodle patch. Are these patches only applicable to a specific weekly release of Moodle, or should it apply to any Moodle 1.9.7 deployment? My test Moodle version: Moodle 1.9.7 (Build: 20091126).

Thank you,
John Grobler