Note:

If you want to create a new page for developers, you should create it on the Moodle Developer Resource site.

Moodle 2.2.7 release notes: Difference between revisions

From MoodleDocs
(Release date)
(Adding security issues)
Line 23: Line 23:
===Security issues===
===Security issues===
   
   
A number of security related issues were resolved. Details of these issues will be released after a period of approximately one week to allow system administrators to safely update to the latest version.
* [https://moodle.org/mod/forum/discuss.php?d=220157 MSA-13-0001] - Security issue in Google Spellchecker in TinyMCE
* [https://moodle.org/mod/forum/discuss.php?d=220158 MSA-13-0002] - Capability issue with Outcome editing
* [https://moodle.org/mod/forum/discuss.php?d=220160 MSA-13-0003] - Potential server file access through backup restoration
* [https://moodle.org/mod/forum/discuss.php?d=220161 MSA-13-0004] - Information leak through activity report
* [https://moodle.org/mod/forum/discuss.php?d=220162 MSA-13-0005] - Potential phishing attack through URL redirects
* [https://moodle.org/mod/forum/discuss.php?d=220164 MSA-13-0007] - Potential exploit in messaging
* [https://moodle.org/mod/forum/discuss.php?d=220165 MSA-13-0008] - Information leak through Blog RSS
* [https://moodle.org/mod/forum/discuss.php?d=220166 MSA-13-0009] - Information leak through Blog RSS
 
===Fixes and improvements===
===Fixes and improvements===
   
   

Revision as of 02:16, 21 January 2013

Releases > Moodle 2.2.7 release notes

Release date: 14 January 2013

Here is the full list of fixed issues in 2.2.7.

Highlights

  • MDL-35653 - Wiki module works if you activate the force format option
  • MDL-36795 - In the default course settings, numsections is not limited to maxsections
  • MDL-30871 - Flat File (CSV) enrolment plug functions without reporting false errors

Functional changes

  • MDL-35422 - To start writing their Workshop submissions, students now click a button labelled 'Start preparing your submission' instead of 'Submit'

API changes

  • MDL-30700 - There is a new function "text_sorting($columnname)" for the class flexible_table which allows you to specify which columns are of type "text" so they can be sorted correctly in all databases.
  • MDL-35593 - core_webservice_get_site_info returns version number as PARAM_TEXT
  • MDL-30961 - get_course_contents web service's name value is now PARAM_RAW

Security issues

  • MSA-13-0001 - Security issue in Google Spellchecker in TinyMCE
  • MSA-13-0002 - Capability issue with Outcome editing
  • MSA-13-0003 - Potential server file access through backup restoration
  • MSA-13-0004 - Information leak through activity report
  • MSA-13-0005 - Potential phishing attack through URL redirects
  • MSA-13-0007 - Potential exploit in messaging
  • MSA-13-0008 - Information leak through Blog RSS
  • MSA-13-0009 - Information leak through Blog RSS

Fixes and improvements

  • MDL-36668 - Performance issue issue resolved in viewing pages in Database activity
  • MDL-36760 - Numerical type quiz questions now work with frozen elements changes
  • MDL-36551 - Database presets retain advanced search template
  • MDL-33863 - Importing quiz questions into new course happens without error
  • MDL-36683 - It is now possible to duplicate a quiz when course question bank contains matching questions

See also