Note:

If you want to create a new page for developers, you should create it on the Moodle Developer Resource site.

Moodle 3.5.9 release notes: Difference between revisions

From MoodleDocs
(For developers)
m (Reverted edits by Mudrd8mz (talk) to last revision by Michael Hawkins)
Tag: Rollback
(3 intermediate revisions by 3 users not shown)
Line 3: Line 3:
[[Releases]] > {{FULLPAGENAME}}
[[Releases]] > {{FULLPAGENAME}}
   
   
Release date: Not yet released - scheduled for 11 November 2019
Release date: 11 November 2019
   
   
Here is [https://tracker.moodle.org/secure/IssueNavigator!executeAdvanced.jspa?jqlQuery=project+%3D+mdl+AND+resolution+%3D+fixed+AND+fixVersion+in+%28%223.5.9%22%29+ORDER+BY+priority+DESC&runQuery=true&clear=true the full list of fixed issues in 3.5.9].
Here is [https://tracker.moodle.org/secure/IssueNavigator!executeAdvanced.jspa?jqlQuery=project+%3D+mdl+AND+resolution+%3D+fixed+AND+fixVersion+in+%28%223.5.9%22%29+ORDER+BY+priority+DESC&runQuery=true&clear=true the full list of fixed issues in 3.5.9].
Line 16: Line 16:
===Security issues===
===Security issues===
   
   
Details of any security issues will be released after a period of approximately one week to allow system administrators to safely update to the latest version.
* [https://moodle.org/mod/forum/discuss.php?d=393582 MSA-19-0024] Assigned Role in Cohort did not un-assign on removal
* [https://moodle.org/mod/forum/discuss.php?d=393583 MSA-19-0025] Add additional verification for some OAuth 2 logins to prevent account compromise
* [https://moodle.org/mod/forum/discuss.php?d=393585 MSA-19-0027] Open redirect in Lesson edit page
* [https://moodle.org/mod/forum/discuss.php?d=393587 MSA-19-0029] Reflected XSS possible from some fatal error messages
   
   
==See also==
==See also==

Revision as of 13:16, 9 August 2021

This version of Moodle is no longer supported for general bug fixes. You are encouraged to upgrade to a supported version of Moodle.

Releases > Moodle 3.5.9 release notes

Release date: 11 November 2019

Here is the full list of fixed issues in 3.5.9.

Fixes and improvements

For developers

  • MDL-66675 - Add pause on fail option to behat
  • MDL-66335 - Behat: new steps to navigate directly to a pages for any plugin, possibly while logging in

Security issues

  • MSA-19-0024 Assigned Role in Cohort did not un-assign on removal
  • MSA-19-0025 Add additional verification for some OAuth 2 logins to prevent account compromise
  • MSA-19-0027 Open redirect in Lesson edit page
  • MSA-19-0029 Reflected XSS possible from some fatal error messages

See also