Note:

If you want to create a new page for developers, you should create it on the Moodle Developer Resource site.

Moodle 2.8.12 release notes: Difference between revisions

From MoodleDocs
(Created page with "<p class="note">'''This version of Moodle is no longer supported for general bug fixes.''' You are encouraged to upgrade to a supported version of Moodle.</p...")
 
m (Protected "Moodle 2.8.12 release notes": Developer Docs Migration ([Edit=Allow only administrators] (indefinite)))
 
(3 intermediate revisions by 2 users not shown)
Line 1: Line 1:
{{Template:Migrated|newDocId=/general/releases/2.8/2.8.12}}
<p class="note">'''This version of Moodle is no longer supported for general bug fixes.''' You are encouraged to [[:en:Upgrading|upgrade]] to a supported version of Moodle.</p>
<p class="note">'''This version of Moodle is no longer supported for general bug fixes.''' You are encouraged to [[:en:Upgrading|upgrade]] to a supported version of Moodle.</p>


[[Releases]] > {{FULLPAGENAME}}
[[Releases]] > {{FULLPAGENAME}}
   
   
Release date: Not yet released
Release date: 9 May, 2016
   
   
Here is [https://tracker.moodle.org/secure/IssueNavigator!executeAdvanced.jspa?jqlQuery=project+%3D+mdl+AND+resolution+%3D+fixed+AND+fixVersion+in+%28%222.8.12%22%29+ORDER+BY+priority+DESC&runQuery=true&clear=true the full list of fixed issues in 2.8.12].
Here is [https://tracker.moodle.org/secure/IssueNavigator!executeAdvanced.jspa?jqlQuery=project+%3D+mdl+AND+resolution+%3D+fixed+AND+fixVersion+in+%28%222.8.12%22%29+ORDER+BY+priority+DESC&runQuery=true&clear=true the full list of fixed issues in 2.8.12].
Line 9: Line 10:
===Security issues===
===Security issues===
   
   
A number of security related issues were resolved. Details of these issues will be released after a period of approximately one week to allow system administrators to safely update to the latest version.
* [https://moodle.org/mod/forum/discuss.php?d=333186 MSA-16-0013] Users are able to change profile fields that were locked by the administrator
* [https://moodle.org/mod/forum/discuss.php?d=333189 MSA-16-0015] Information disclosure of hidden forum names and sub-names.
* [https://moodle.org/mod/forum/discuss.php?d=333190 MSA-16-0016] User can view badges of other users without proper permissions
* [https://moodle.org/mod/forum/discuss.php?d=333191 MSA-16-0017] Course idnumber not protected from teacher restore
* [https://moodle.org/mod/forum/discuss.php?d=333192 MSA-16-0018] CSRF in script marking forum posts as read


==See also==
==See also==

Latest revision as of 09:08, 25 May 2022

Important:

This content of this page has been updated and migrated to the new Moodle Developer Resources. The information contained on the page should no longer be seen up-to-date.

Why not view this page on the new site and help us to migrate more content to the new site!

This version of Moodle is no longer supported for general bug fixes. You are encouraged to upgrade to a supported version of Moodle.

Releases > Moodle 2.8.12 release notes

Release date: 9 May, 2016

Here is the full list of fixed issues in 2.8.12.

Security issues

  • MSA-16-0013 Users are able to change profile fields that were locked by the administrator
  • MSA-16-0015 Information disclosure of hidden forum names and sub-names.
  • MSA-16-0016 User can view badges of other users without proper permissions
  • MSA-16-0017 Course idnumber not protected from teacher restore
  • MSA-16-0018 CSRF in script marking forum posts as read

See also