Note:

If you want to create a new page for developers, you should create it on the Moodle Developer Resource site.

Moodle 3.1.7 release notes: Difference between revisions

From MoodleDocs
No edit summary
Line 9: Line 9:
===Security issues===
===Security issues===


A number of security related issues were resolved. Details of these issues will be released after a period of approximately one week to allow system administrators to safely update to the latest version.
* [https://moodle.org/mod/forum/discuss.php?d=355554 MSA-17-0006] User fullname disclosure on user preferences page
* [https://moodle.org/mod/forum/discuss.php?d=355556 MSA-17-0015] Course creators are able to change system default settings for courses
* [https://moodle.org/mod/forum/discuss.php?d=355557 MSA-17-0016] Authentication bypass vulnerability with old CAS servers


==See also==
==See also==

Revision as of 06:56, 17 July 2017

This version of Moodle is no longer supported for general bug fixes. You are encouraged to upgrade to a supported version of Moodle.

Releases > Moodle 3.1.7 release notes

Release date: 10 July 2017

Here is the full list of fixed issues in 3.1.7.

Security issues

  • MSA-17-0006 User fullname disclosure on user preferences page
  • MSA-17-0015 Course creators are able to change system default settings for courses
  • MSA-17-0016 Authentication bypass vulnerability with old CAS servers

See also