Note:

If you want to create a new page for developers, you should create it on the Moodle Developer Resource site.

Moodle 1.9.10 release notes: Difference between revisions

From MoodleDocs
(→‎Security issues: security announcement links)
No edit summary
Line 4: Line 4:
   
   
===Security issues===
===Security issues===
   
 
This release upgrades some of the 3rd-party libraries that we use in Moodle. Keeping your Moodle site up to date is, as usual, highly recommended!
 
* [http://moodle.org/mod/forum/discuss.php?d=160910 MSA-10-0017] XSS vulnerability in YUI 2.4.0 through YUI 2.8.1
* [http://moodle.org/mod/forum/discuss.php?d=160857 MSA-10-0016] Multiple phpCAS library vulnerabilities
* [http://moodle.org/mod/forum/discuss.php?d=160858 MSA-10-0015] Customised HTML Purifier upgraded to 4.2.0
* [http://moodle.org/mod/forum/discuss.php?d=160858 MSA-10-0015] Customised HTML Purifier upgraded to 4.2.0
* [http://moodle.org/mod/forum/discuss.php?d=160857 MSA-10-0016] Multiple phpCAS library vulnerabilities


Additional issues to be released later
 
Also notice there was a security problem in the optional phpMyAdmin module:
 
* [http://moodle.org/mod/forum/discuss.php?d=160811 MSA-10-0014] Customised phpMyAdmin upgraded to 2.11.11
 
 
<noinclude>==See also==
<noinclude>==See also==
*[[Moodle 1.9.9 release notes]]
*[[Moodle 1.9.9 release notes]]

Revision as of 02:47, 26 October 2010

Release date: 25th October 2010

Here is the full list of issues fixed in 1.9.10

Security issues

This release upgrades some of the 3rd-party libraries that we use in Moodle. Keeping your Moodle site up to date is, as usual, highly recommended!

  • MSA-10-0017 XSS vulnerability in YUI 2.4.0 through YUI 2.8.1
  • MSA-10-0016 Multiple phpCAS library vulnerabilities
  • MSA-10-0015 Customised HTML Purifier upgraded to 4.2.0


Also notice there was a security problem in the optional phpMyAdmin module:


See also