Latest release notes

Moodle 2.0.2

Release date: 21st February 2011

Highlights

• MDL-20617 - Options to show feedback, averages, range and other data in the user report
• MDL-26109 - All standard blocks have option to dock
• MDL-25616 - Recent messages and recent notifications interfaces

Performance improvements

• MDL-17201 - Add index on user_info_data
• MDL-25669 - fix_course_sortorder() does way too many UPDATE queries
• MDL-25837 - disasterous caching bug in course_overview block
• MDL-22970 - Glossary import displays too many items in recent activity
• MDL-25677 - Differences between upgraded and installed sites detected in blocks subsystem
• MDL-24125 - Add in-memory cache of admin_category child objects

Fixes

• MDL-25501 - Wikis with pages with the same title now upgrade from 1.9
• MDL-25932 - Upgrade fails for wikis with the same title
• MDL-25850 - Scorm score not checking for mod/scorm:viewscores
• MDL-25215 - File extension lost when using "Save As" field
• MDL-26071 - Upgrade fails when adding fields to tag_instance table
• MDL-26236 - Random essay questions give error
• MDL-25321 - sqlsrv_native's limit_to_top_n function destroys queries
• MDL-25626 - Error in "Course completion status" block
• MDL-25863 - Automated course backup function duplicates old versions when saved to non-default location
• MDL-26098 - Manual grading pop-up is confused between id and uniqueid
• MDL-25841 - Cloze question feedback appears in the wrong place
• MDL-26299 - Numerical questions units handling setting reverts to default upon editing

And many more ... see the full list of bug fixes and improvements in 2.0.2.

Security issues

• MSA-11-0003 Cross-site scripting vulnerability in tag autocomplete
• MSA-11-0004 $CFG->forceloginforprofiles setting ignored in course profiles
• MSA-11-0005 Cross-site scripting vulnerability in spikephpcoverage
• MSA-11-0006 Cross-site request forgery and missing access control in course completion
• MSA-11-0007 Cross-site scripting vulnerability in course tags
• MSA-11-0008 IMS enterprise enrolment file may disclose sensitive information
• MSA-11-0009 My profile block may disclose private information if used in user context
• MSA-11-0010 Incorrect default for moodle/course:delete capability in teacher role
• MSA-11-0011 Multiple cross-site scripting problems in media filter

Moodle 1.9.11

Release date: 21st February 2011

Here is the full list of issues fixed in 1.9.11

Fixes

• MDL-16336 - HTML editor doesn't appear in Google Chrome
• MDL-22970 - Glossary import displays too many items in recent activity
• MDL-21001 - Range column no longer displayed
• MDL-24699 - update_user_record function does not specify mnethostid when updating the user table
• MDL-14934 - Reports/logs download in Excel format shows wrong time

Security issues

• MSA-11-0002 Cross-site request forgery vulnerability in RSS block
• MSA-11-0003 Cross-site scripting vulnerability in tag autocomplete
• MSA-11-0008 IMS enterprise enrolment file may disclose sensitive information

Moodle 1.8.14

Release date: 3rd December, 2010

Here is the full list of fixed issues in 1.8.14.

Security issues

• MSA-10-0016 Multiple phpCAS library vulnerabilities

Also notice there was a security problem in the optional phpMyAdmin module:

• MSA-10-0014 Customised phpMyAdmin upgraded to 2.11.11

Moodle 1.7.7

Release date: 28th January 2009

Here is the full list of fixed issues in 1.7.7.

Note: This is the last formal release of the 1.7 branch. Support for this branch has been discontinued. We highly recommend you upgrade!

Moodle 1.6.9

Release date: 28th January 2009

Here is the full list of fixed issues in 1.6.9.

Note: This is the last formal release of the 1.6 branch. Support for this branch has been discontinued. We highly recommend you upgrade!

See also

• Moodle version history for dates of release and links to notes for earlier versions
• Updates