Moodle 3.5.13 release notes: Difference between revisions
From MoodleDocs
m (→Security fixes) |
|||
| Line 15: | Line 15: | ||
* MDL-68631 - Cron current user may not be reset between scheduled tasks | * MDL-68631 - Cron current user may not be reset between scheduled tasks | ||
==Security | ==Security fixes== | ||
* [https://moodle.org/mod/forum/discuss.php?d=407393 MSA-20-0009] Course enrolments allowed privilege escalation from teacher role into manager role | * [https://moodle.org/mod/forum/discuss.php?d=407393 MSA-20-0009] Course enrolments allowed privilege escalation from teacher role into manager role | ||
Revision as of 03:51, 7 May 2021
This version of Moodle is no longer supported for general bug fixes. You are encouraged to upgrade to a supported version of Moodle.
Releases > Moodle 3.5.13 release notes
Release date: 13 July 2020
Here is the full list of fixed issues in 3.5.13.
General fixes and improvements
- MDL-68733 - quiz random question tags are deleted accidentally on entire site
Security improvements
- MDL-68631 - Cron current user may not be reset between scheduled tasks
Security fixes
- MSA-20-0009 Course enrolments allowed privilege escalation from teacher role into manager role
- MSA-20-0010 yui_combo should mitigate denial of service risk
