Note:

If you want to create a new page for developers, you should create it on the Moodle Developer Resource site.

Moodle 1.9.13 release notes: Difference between revisions

From MoodleDocs
(Changing issue descriptions to past tense.)
(Releasing security issues)
Line 12: Line 12:
===Security issues===
===Security issues===


A number of security related issues were resolved. Details of these issues will be released after a period of approximately one week to allow system administrators to safely update to the latest version.
See [http://moodle.org/security/ http://moodle.org/security/] for security issue details.
 
* MDL-27889 - Recptcha is still authenticating to old servers on Moodle 1.9
* MDL-28197 - SQL injection vulnerability in user upload
* MDL-28360 - Flat file enrollments has various sql injection vulnerabilities
* MDL-27464 - Continuation link can sometimes link offsite
 
==See also==
==See also==



Revision as of 08:44, 8 August 2011

Release date: 1st August, 2011

Here is the full list of fixed issues in 1.9.13.

Fixes

  • MDL-27717 - Problem with language packs causing incorrect amounts to be sent to Authorize.net - fixed
  • MDL-27695 - Moodle Docs links fixed to point to correct version of docs
  • MDL-27638 - Assignment Module Submissions SQL avoid overflow
  • MDL-27577 - Timestamp and timezone fixes

Security issues

See http://moodle.org/security/ for security issue details.

  • MDL-27889 - Recptcha is still authenticating to old servers on Moodle 1.9
  • MDL-28197 - SQL injection vulnerability in user upload
  • MDL-28360 - Flat file enrollments has various sql injection vulnerabilities
  • MDL-27464 - Continuation link can sometimes link offsite

See also