Moodle 3.9.3 release notes: Difference between revisions
From MoodleDocs
(released) |
Dev Docs Bot (talk | contribs) m (Protected "Moodle 3.9.3 release notes": Developer Docs Migration ([Edit=Allow only administrators] (indefinite))) |
||
(6 intermediate revisions by 4 users not shown) | |||
Line 1: | Line 1: | ||
{{Template:Migrated|newDocId=/general/releases/3.9/3.9.3}} | |||
[[Releases]] > {{FULLPAGENAME}} | [[Releases]] > {{FULLPAGENAME}} | ||
Line 6: | Line 7: | ||
Here is [https://tracker.moodle.org/secure/IssueNavigator!executeAdvanced.jspa?jqlQuery=project+%3D+mdl+AND+resolution+%3D+fixed+AND+fixVersion+in+%28%223.9.3%22%29+ORDER+BY+priority+DESC&runQuery=true&clear=true the full list of fixed issues in 3.9.3]. | Here is [https://tracker.moodle.org/secure/IssueNavigator!executeAdvanced.jspa?jqlQuery=project+%3D+mdl+AND+resolution+%3D+fixed+AND+fixVersion+in+%28%223.9.3%22%29+ORDER+BY+priority+DESC&runQuery=true&clear=true the full list of fixed issues in 3.9.3]. | ||
==Warning== | |||
If you have a large database, the upgrade step added in MDL-69687 may be very, very slow. To avoid excessive down-time when you grade, you may want to test for this. A fix is being developed in MDL-70285. | |||
==General fixes and improvements== | ==General fixes and improvements== | ||
* MDL-68722 - Atto Equation Editor Symbols missing | * MDL-68722 - Atto Equation Editor Symbols missing | ||
Line 52: | Line 57: | ||
* MDL-68292 - admin/modules.php exposes CSRF token (sesskey) in url | * MDL-68292 - admin/modules.php exposes CSRF token (sesskey) in url | ||
* MDL-69014 - User preferences not removed when tours are deleted | * MDL-69014 - User preferences not removed when tours are deleted | ||
* MDL-69807 - Editing a block exposes the CSRF token (sesskey) in the url | * MDL-69807 - Editing a block exposes the CSRF token (sesskey) in the url | ||
==Security fixes== | ==Security fixes== | ||
* [https://moodle.org/mod/forum/discuss.php?d=413935 MSA-20-0016] Teacher is able to unenrol users without permission using course restore | |||
* [https://moodle.org/mod/forum/discuss.php?d=413936 MSA-20-0017] Privilege escalation within a course when restoring role overrides | |||
* [https://moodle.org/mod/forum/discuss.php?d=413938 MSA-20-0018] Some database module web services did not respect group settings | |||
* [https://moodle.org/mod/forum/discuss.php?d=413939 MSA-20-0019] tool_uploadcourse creates new enrol instances unexpectedly in some circumstances | |||
* [https://moodle.org/mod/forum/discuss.php?d=413940 MSA-20-0020] Stored XSS possible when renaming content bank items | |||
* [https://moodle.org/mod/forum/discuss.php?d=413941 MSA-20-0021] The participants table download feature did not respect the site's "show user identity" configuration | |||
==See also== | ==See also== |
Latest revision as of 09:09, 25 May 2022
Important:
This content of this page has been updated and migrated to the new Moodle Developer Resources. The information contained on the page should no longer be seen up-to-date. Why not view this page on the new site and help us to migrate more content to the new site! |
Releases > Moodle 3.9.3 release notes
Release date: 9 November 2020
Here is the full list of fixed issues in 3.9.3.
Warning
If you have a large database, the upgrade step added in MDL-69687 may be very, very slow. To avoid excessive down-time when you grade, you may want to test for this. A fix is being developed in MDL-70285.
General fixes and improvements
- MDL-68722 - Atto Equation Editor Symbols missing
- MDL-68070 - Messaging breaks when "Personal messages between users" is disabled
- MDL-69355 - Download of files bigger than 10 MB fails
- MDL-68900 - Attempting to grade forums outside of their display period causes invalid response value error
- MDL-69257 - H5P Interactive video should comply with maxbytes file upload limits
- MDL-65792 - Timed/Scheduled Posts are displaying create/modified time instead of release time
- MDL-69266 - Drag and drop questions with 'unlimited' options fail in Moodle 3.9
- MDL-69736 - H5P Interactive book does not show a submit button
- MDL-69667 - Competencies count always 0 in competencyframeworks
- MDL-69772 - Incorrect 'allcountrycodes' field prevents country selection during registration
- MDL-69657 - Method of saving embedded H5P content grades in the gradebook (Backport of MDL-69174)
- MDL-69641 - Fix Course gradebook slow query due to cross join on full user table (backport of MDL-69190)
- MDL-62387 - Cohort sync dropdown contains redundant entries
- MDL-69342 - 'Delete picture' checkbox deletes also the new profile picture when editing profile
- MDL-69359 - Add option to show only contributed plugins in uninstall script (backport of MDL-69260)
- MDL-69156 - Course copy: idnumber field is missing if not permitted
- MDL-67654 - Forum inline reply does not use formchangechecker
- MDL-69791 - Grader report doesn't show an error message when an invalid grade is entered in AJAX mode
- MDL-69818 - Restoring a feedback activity doesn't restore item dependency
- MDL-69751 - Activity chooser does not display if site contains invalid user
- MDL-67650 - Forced $CFG config checkbox, select, textarea are not disabled in GUI
- MDL-68438 - Changing notification email format fails if messaging is disabled
- MDL-70093 - PDF dataformat export is misformatted when a cell height is greater than a page height
- MDL-69698 - List of licenses is not displayed in the user's preferred language
- MDL-69729 - Clean up temporary H5P editor files (backport of MDL-68909)
- MDL-68284 - Locking invisible quiz in gradebook setup makes it visible (but only on gradebook setup page)
- MDL-69805 - Database activity shows the comments option even if comments are disabled at site level
Accessibility improvements
- MDL-65074 - Quiz navigation buttons use part of btn-secondary styles, can disappear
- MDL-68167 - Fix core/form_autocomplete accessibility issues
- MDL-69390 - Insufficient colour contrast for focused/mouseover action menu items
- MDL-70004 - Invalid role attribute in the label for the "Clear my choice" option
- MDL-69392 - Colour contrast issues in quiz
- MDL-68766 - Login form: "Log in using your account on:" should be h3, not h6
- MDL-69395 - Insufficient colour contrast between form control borders and background
- MDL-69649 - Missing labels in restore page
- MDL-69644 - Focus outline of the "contact the privacy officer" link inconsistent with rest of page
For developers
- MDL-52407 - Travis: Start sending e-mail notifications
Security improvements
- MDL-68292 - admin/modules.php exposes CSRF token (sesskey) in url
- MDL-69014 - User preferences not removed when tours are deleted
- MDL-69807 - Editing a block exposes the CSRF token (sesskey) in the url
Security fixes
- MSA-20-0016 Teacher is able to unenrol users without permission using course restore
- MSA-20-0017 Privilege escalation within a course when restoring role overrides
- MSA-20-0018 Some database module web services did not respect group settings
- MSA-20-0019 tool_uploadcourse creates new enrol instances unexpectedly in some circumstances
- MSA-20-0020 Stored XSS possible when renaming content bank items
- MSA-20-0021 The participants table download feature did not respect the site's "show user identity" configuration