Note:

If you want to create a new page for developers, you should create it on the Moodle Developer Resource site.

Moodle 2.5.4 release notes: Difference between revisions

From MoodleDocs
m (added link to spanish translation of page)
(Adding security release notes)
Line 20: Line 20:
===Security issues===
===Security issues===
   
   
A number of security related issues were resolved. Details of these issues will be released after a period of approximately one week to allow system administrators to safely update to the latest version.
* [https://moodle.org/mod/forum/discuss.php?d=252414 MSA-14-0001] Config passwords visibility issue
* [https://moodle.org/mod/forum/discuss.php?d=252415 MSA-14-0002] Group constraints lacking in "login as"
* [https://moodle.org/mod/forum/discuss.php?d=252416 MSA-14-0003] Cross-site request forgery vulnerability in profile fields
 
===Fixes and improvements===
===Fixes and improvements===
   
   

Revision as of 00:54, 20 January 2014

Releases > Moodle 2.5.4 release notes

Release date: Not yet released

Here is the full list of fixed issues in 2.5.4.

Highlights

  • MDL-41819 - Able to edit a larger number of grades in the grader report

Functional changes

  • MDL-42504 - Quiz auto-save detects that the connection to the server has been lost and warns students

API changes

  • MDL-40741 - Behat tests adapted to Clean theme
  • MDL-42942 - Environmental information shown at the beginning of every Behat run

Security issues

  • MSA-14-0001 Config passwords visibility issue
  • MSA-14-0002 Group constraints lacking in "login as"
  • MSA-14-0003 Cross-site request forgery vulnerability in profile fields

Fixes and improvements

  • MDL-34182 - Invalid JSON no longer output on filepicker when repository plugins output invalid content
  • MDL-43367 - get_child_contexts() returns correct contexts when context path missing
  • MDL-42913 - Group cache works as expected
  • MDL-40003 - Assignment submission comments are restored
  • MDL-42085 - Default enrolment duration is now applied when manually enrolling a user

See also