Note:

If you want to create a new page for developers, you should create it on the Moodle Developer Resource site.

Moodle 2.3.4 release notes: Difference between revisions

From MoodleDocs
(Adding security issues)
(One intermediate revision by one other user not shown)
Line 1: Line 1:
[[Releases]] > {{FULLPAGENAME}}
[[Releases]] > {{FULLPAGENAME}}
   
   
Release date: Not yet released
Release date: 14 January 2013
   
   
Here is [https://tracker.moodle.org/secure/IssueNavigator!executeAdvanced.jspa?jqlQuery=project+%3D+mdl+AND+resolution+%3D+fixed+AND+fixVersion+in+%28%222.3.4%22%29+ORDER+BY+priority+DESC&runQuery=true&clear=true the full list of fixed issues in 2.3.4].
Here is [https://tracker.moodle.org/secure/IssueNavigator!executeAdvanced.jspa?jqlQuery=project+%3D+mdl+AND+resolution+%3D+fixed+AND+fixVersion+in+%28%222.3.4%22%29+ORDER+BY+priority+DESC&runQuery=true&clear=true the full list of fixed issues in 2.3.4].
Line 24: Line 24:
===Security issues===
===Security issues===
   
   
A number of security related issues were resolved. Details of these issues will be released after a period of approximately one week to allow system administrators to safely update to the latest version.
* [https://moodle.org/mod/forum/discuss.php?d=220157 MSA-13-0001] - Security issue in Google Spellchecker in TinyMCE
* [https://moodle.org/mod/forum/discuss.php?d=220158 MSA-13-0002] - Capability issue with Outcome editing
* [https://moodle.org/mod/forum/discuss.php?d=220160 MSA-13-0003] - Potential server file access through backup restoration
* [https://moodle.org/mod/forum/discuss.php?d=220161 MSA-13-0004] - Information leak through activity report
* [https://moodle.org/mod/forum/discuss.php?d=220162 MSA-13-0005] - Potential phishing attack through URL redirects
* [https://moodle.org/mod/forum/discuss.php?d=220163 MSA-13-0006] - Potential information leak in Assignment module
* [https://moodle.org/mod/forum/discuss.php?d=220164 MSA-13-0007] - Potential exploit in messaging
* [https://moodle.org/mod/forum/discuss.php?d=220165 MSA-13-0008] - Information leak through Blog RSS
* [https://moodle.org/mod/forum/discuss.php?d=220166 MSA-13-0009] - Information leak through Blog RSS
 
===Fixes and improvements===
===Fixes and improvements===
   
   

Revision as of 02:14, 21 January 2013

Releases > Moodle 2.3.4 release notes

Release date: 14 January 2013

Here is the full list of fixed issues in 2.3.4.

Highlights

  • MDL-32880 - Make 1.9 blocks restorable in 2.3 onwards
  • MDL-34791 - Activity quick title edit updates name in gradebook
  • MDL-35653 - Wiki module works if you activate the force format option

Functional changes

  • MDL-35422 - To start writing their Workshop submissions, students now click a button labelled 'Start preparing your submission' instead of 'Submit'

API changes

  • MDL-30700 - There is a new function "text_sorting($columnname)" for the class flexible_table which allows you to specify which columns are of type "text" so they can be sorted correctly in all databases.
  • MDL-35593 - core_webservice_get_site_info returns version number as PARAM_TEXT
  • MDL-30961 - get_course_contents web service's name value is now PARAM_RAW
  • MDL-36795 - In the default course settings, numsections is not limited to maxsections

Security issues

  • MSA-13-0001 - Security issue in Google Spellchecker in TinyMCE
  • MSA-13-0002 - Capability issue with Outcome editing
  • MSA-13-0003 - Potential server file access through backup restoration
  • MSA-13-0004 - Information leak through activity report
  • MSA-13-0005 - Potential phishing attack through URL redirects
  • MSA-13-0006 - Potential information leak in Assignment module
  • MSA-13-0007 - Potential exploit in messaging
  • MSA-13-0008 - Information leak through Blog RSS
  • MSA-13-0009 - Information leak through Blog RSS

Fixes and improvements

  • MDL-36680 - Overview report now gives correct course total by not including hidden item grades
  • MDL-35717 - Quiz cron not closing old attempts after quiz close date (also MDL-36842)
  • MDL-37165 - Assignment summary displays on Oracle
  • MDL-36668 - Performance issue resolved in viewing pages in Database activity
  • MDL-36760 - Numerical type quiz questions now work with frozen elements changes
  • MDL-36551 - Database presets retain advanced search template
  • MDL-33863 - Importing quiz questions into new course happens without error
  • MDL-36683 - It is now possible to duplicate a quiz when course question bank contains matching questions

See also