Note:

If you want to create a new page for developers, you should create it on the Moodle Developer Resource site.

Moodle 1.9.14 release notes: Difference between revisions

From MoodleDocs
(Adding security issues)
m (Protected "Moodle 1.9.14 release notes": Developer Docs Migration ([Edit=Allow only administrators] (indefinite)))
 
(6 intermediate revisions by 5 users not shown)
Line 1: Line 1:
{{Template:Migrated|newDocId=/general/releases/1.9/1.9.14}}
Release date: 10th October, 2011
Release date: 10th October, 2011
   
   
Bug-fixing for general core bugs in 1.9.x has ended. Support continues for serious security issues, which is reflected in this release.
Bug-fixing for general core bugs in 1.9.x has ended. Support continues for serious security issues, which is reflected in this release.


Here is [http://tracker.moodle.org/secure/IssueNavigator!executeAdvanced.jspa?jqlQuery=project+%3D+mdl+and+resolution+%3D+fixed+AND+fixVersion+in+%28%221.9.14%22 the full list of fixed issues in 1.9.14].  
Here is [http://tracker.moodle.org/secure/IssueNavigator!executeAdvanced.jspa?jqlQuery=project+%3D+mdl+and+resolution+%3D+fixed+AND+fixVersion+in+%28%221.9.14%22%29 the full list of fixed issues in 1.9.14].  
   
   
===Security issues===
===Security issues===


* MDL-29311 - Message refreshing system may cause unlimited queries and DDos attack
* [http://moodle.org/mod/forum/discuss.php?d=188313 MSA-11-0031] - Forms API constant issue
* MDL-29148 - Incorrect handling of openssl_verify() return code
* [http://moodle.org/mod/forum/discuss.php?d=188314 MSA-11-0032] - MNET SSL validation issue
* MDL-23872 - $mform->setConstant() does not work as expected
* [http://moodle.org/mod/forum/discuss.php?d=188318 MSA-11-0036] - Messaging refresh vulnerability
* MDL-28722 - Potential XSS: editsection.html print values directly from data_submitted()
* [http://moodle.org/mod/forum/discuss.php?d=188319 MSA-11-0037] - Course section editing injection vulnerability
* MDL-29033 - Magic quotes hardening of 1.9
* [http://moodle.org/mod/forum/discuss.php?d=188320 MSA-11-0038] - Database injection protection strengthened
* [http://moodle.org/mod/forum/discuss.php?d=188322 MSA-11-0040] - Potential personal information leak


===Fixes and improvements===
===Fixes and improvements===
Line 20: Line 22:
==See also==
==See also==
*[[Moodle 1.9.13 release notes]]
*[[Moodle 1.9.13 release notes]]
* [https://docs.moodle.org/19/fr/Notes_de_mise_à_jour_de_Moodle_1.9.14 French version of this page]
 
[[Category:Release notes]]
[[Category:Release notes]]
[[Category:Moodle 1.9]]
[[Category:Moodle 1.9]]


[[es:Notas de Moodle 1.9.14]]
[[es:Notas de Moodle 1.9.14]]
[[fr:Notes de mise à jour de Moodle 1.9.14]]

Latest revision as of 09:07, 25 May 2022

Important:

This content of this page has been updated and migrated to the new Moodle Developer Resources. The information contained on the page should no longer be seen up-to-date.

Why not view this page on the new site and help us to migrate more content to the new site!

Release date: 10th October, 2011

Bug-fixing for general core bugs in 1.9.x has ended. Support continues for serious security issues, which is reflected in this release.

Here is the full list of fixed issues in 1.9.14.

Security issues

Fixes and improvements

  • MDL-27174 - Automated backups succeed when assignment has instance of zero
  • MDL-4561 - Metacourses allow guest access with an enrolment key

See also