Note:

If you want to create a new page for developers, you should create it on the Moodle Developer Resource site.

Moodle 3.5.14 release notes: Difference between revisions

From MoodleDocs
(release date)
m (Protected "Moodle 3.5.14 release notes": Developer Docs Migration ([Edit=Allow only administrators] (indefinite)))
 
(3 intermediate revisions by 2 users not shown)
Line 1: Line 1:
{{Template:Migrated|newDocId=/general/releases/3.5/3.5.14}}
<p class="note">'''This version of Moodle is no longer supported for general bug fixes.''' You are encouraged to [[:en:Upgrading|upgrade]] to a supported version of Moodle.</p>
<p class="note">'''This version of Moodle is no longer supported for general bug fixes.''' You are encouraged to [[:en:Upgrading|upgrade]] to a supported version of Moodle.</p>


Line 11: Line 12:
* MDL-69068 - Allow behat generators to be pivoted
* MDL-69068 - Allow behat generators to be pivoted


==Security issues==
==Security fixes==
Details of any security issues will be released after a period of approximately one week to allow system administrators to safely update to the latest version.
   
   
* [https://moodle.org/mod/forum/discuss.php?d=410840 MSA-20-0012] Reflected XSS in tag manager
* [https://moodle.org/mod/forum/discuss.php?d=410841 MSA-20-0013] "Log in as" capability in a course context may lead to some privilege escalation
* [https://moodle.org/mod/forum/discuss.php?d=410842 MSA-20-0014] Denial of service risk in file picker unzip functionality
==See also==
==See also==
*[[Moodle 3.5.13 release notes]]
*[[Moodle 3.5.13 release notes]]

Latest revision as of 09:09, 25 May 2022

Important:

This content of this page has been updated and migrated to the new Moodle Developer Resources. The information contained on the page should no longer be seen up-to-date.

Why not view this page on the new site and help us to migrate more content to the new site!

This version of Moodle is no longer supported for general bug fixes. You are encouraged to upgrade to a supported version of Moodle.

Releases > Moodle 3.5.14 release notes

Release date: 14 September 2020

Here is the full list of fixed issues in 3.5.14.

For developers

  • MDL-69068 - Allow behat generators to be pivoted

Security fixes

  • MSA-20-0012 Reflected XSS in tag manager
  • MSA-20-0013 "Log in as" capability in a course context may lead to some privilege escalation
  • MSA-20-0014 Denial of service risk in file picker unzip functionality

See also