Difference between revisions of "Moodle 3.4.5 release notes"

Jump to: navigation, search
(template, scheduled release date)
 
(Security issues)
 
(3 intermediate revisions by 3 users not shown)
Line 1: Line 1:
 
[[Releases]] > {{FULLPAGENAME}}
 
[[Releases]] > {{FULLPAGENAME}}
 
   
 
   
Release date: Not yet released - scheduled for 10 September 2018
+
Release date: 10 September 2018
 
   
 
   
 
Here is [https://tracker.moodle.org/secure/IssueNavigator!executeAdvanced.jspa?jqlQuery=project+%3D+mdl+AND+resolution+%3D+fixed+AND+fixVersion+in+%28%223.4.5%22%29+ORDER+BY+priority+DESC&runQuery=true&clear=true the full list of fixed issues in 3.4.5].
 
Here is [https://tracker.moodle.org/secure/IssueNavigator!executeAdvanced.jspa?jqlQuery=project+%3D+mdl+AND+resolution+%3D+fixed+AND+fixVersion+in+%28%223.4.5%22%29+ORDER+BY+priority+DESC&runQuery=true&clear=true the full list of fixed issues in 3.4.5].
Line 7: Line 7:
 
===Highlights===
 
===Highlights===
 
   
 
   
* ...
+
* MDL-62799 - tool_dataprivacy plugin merged into 3.4 core
 +
* MDL-62800 - tool_policy plugin merged into 3.4 core
 +
* MDL-62660 - Option to set a data request expiry time
 +
* MDL-57741 - Launch URL for [[:en:Publish as LTI tool|Publish as LTI tool]]
 +
* MDL-57977 - Global search allows searching for users by alternate name
 
   
 
   
 
===Fixes and improvements===
 
===Fixes and improvements===
 
   
 
   
* ...
+
* MDL-60826 - Memory exhaustion error when trying to add/edit calendar event as admin
 +
* MDL-60874 - Clearer search results in user enrolment
 +
* MDL-62782 - Users with the capability mod/assign:viewgrades can also view uploaded feedback files
 +
* MDL-62849 - Filemanager: cannot manage files when there are folders
 +
* MDL-62534 - Empty course sections deleted when upgrading
 +
* MDL-62600 - Admin is misinformed that there are no data requests
 +
* MDL-61351 - Shibboleth logout does not handle file sessions correctly
 +
* MDL-62643 - Online text assignment submissions generate a blank HTML document for grading when no text is entered
 +
* MDL-61424 - When token is rejected from moodle.net provide option to unregister
 +
* MDL-59847 - Behaviour when city/country are hiddenfields and identityfields at the same time 
 +
* MDL-62965 - User profile fields missing on signup page
 +
* MDL-62889 - Multiple fixes when redirecting to a URL after clicking on a notification
 +
* MDL-62989 - Data requests are listed by date requested for users
 +
* MDL-62896 - Some non-core plugins are missing their Additional label on the Plugin data registry page
 +
* MDL-62769 - "Statistics for question positions" graph shows last shown variant, not stats for overall question
 +
* MDL-62341 - 'Go back to previous page' link on All policies page
 +
* MDL-62746 - Boost core_tag modals content layout improvements
 +
* MDL-45389 - Forum index page alignment improvements
 +
* MDL-61707 - Pre-signup (minor check) session is not deleted upon signup
 
    
 
    
 
===Security issues===
 
===Security issues===
 
   
 
   
A number of security related issues were resolved. Details of these issues will be released after a period of approximately one week to allow system administrators to safely update to the latest version.
+
* [https://moodle.org/mod/forum/discuss.php?d=376023 MSA-18-0017] Moodle XML import of ddwtos could lead to intentional remote code execution
+
* [https://moodle.org/mod/forum/discuss.php?d=376024 MSA-18-0018] QuickForm library remote code vulnerability (upstream)
 +
* [https://moodle.org/mod/forum/discuss.php?d=376025 MSA-18-0019] Boost theme - blog search GET parameter insufficiently filtered
 +
 
 
==See also==
 
==See also==
 
*[[Moodle 3.4.4 release notes]]
 
*[[Moodle 3.4.4 release notes]]

Latest revision as of 04:26, 17 September 2018

Releases > Moodle 3.4.5 release notes

Release date: 10 September 2018

Here is the full list of fixed issues in 3.4.5.

Highlights

Fixes and improvements

  • MDL-60826 - Memory exhaustion error when trying to add/edit calendar event as admin
  • MDL-60874 - Clearer search results in user enrolment
  • MDL-62782 - Users with the capability mod/assign:viewgrades can also view uploaded feedback files
  • MDL-62849 - Filemanager: cannot manage files when there are folders
  • MDL-62534 - Empty course sections deleted when upgrading
  • MDL-62600 - Admin is misinformed that there are no data requests
  • MDL-61351 - Shibboleth logout does not handle file sessions correctly
  • MDL-62643 - Online text assignment submissions generate a blank HTML document for grading when no text is entered
  • MDL-61424 - When token is rejected from moodle.net provide option to unregister
  • MDL-59847 - Behaviour when city/country are hiddenfields and identityfields at the same time
  • MDL-62965 - User profile fields missing on signup page
  • MDL-62889 - Multiple fixes when redirecting to a URL after clicking on a notification
  • MDL-62989 - Data requests are listed by date requested for users
  • MDL-62896 - Some non-core plugins are missing their Additional label on the Plugin data registry page
  • MDL-62769 - "Statistics for question positions" graph shows last shown variant, not stats for overall question
  • MDL-62341 - 'Go back to previous page' link on All policies page
  • MDL-62746 - Boost core_tag modals content layout improvements
  • MDL-45389 - Forum index page alignment improvements
  • MDL-61707 - Pre-signup (minor check) session is not deleted upon signup

Security issues

  • MSA-18-0017 Moodle XML import of ddwtos could lead to intentional remote code execution
  • MSA-18-0018 QuickForm library remote code vulnerability (upstream)
  • MSA-18-0019 Boost theme - blog search GET parameter insufficiently filtered

See also