Category Archives: Moodle

Make Sure Your Moodle Websites are Up to Date
With our Up to Date? Chrome app you can keep track of the Moodle versions (as well other web apps) on all of the websites you manage in one place, so you can easily check if they are in need of an upgrade.

Need Moodle Upgraded?
We can upgrade your Moodle website for you.

Moodle 2.4.11, 2.5.7, 2.6.4, and 2.7.1 Released; Support Ends For Moodle 2.4

Moodle 2.4.11, 2.5.6, 2.6.4, and 2.7.1 were released today. All of the releases include security fixes and all but 2.4.11 also include bug fixes. Details of the security vulnerabilities fixed will be released later.

Update (July 21, 2014): Moodle has now released information on the security issues fixed in the releases. Among the vulnerabilities fixed is a vulnerability that could lead to remote code execution, several that could allow access to server-side files, and several cross-site script (XSS) vulnerabilities.

Moodle 2.4.11 is the last release for the 2.4 branch and anyone running it should upgrade to a newer, supported, version.

More information is available in the release notes for 2.4.112.5.72.6.4, and 2.7.1.

 

Posted in End of Support, Moodle, Security Update | Leave a comment

Moodle 2.4.10, 2.5.6, and 2.6.3 Released

Moodle 2.4.10, 2.5.5, and 2.6.3 were released today. Moodle 2.5.5 and 2.6.3 include bug fixes and all three releases include security fixes. Details of the security vulnerabilities fixed will be released later.

Update (May 19, 2014): Moodle has now released information on the security issues fixed in the releases. Among the vulnerabilities fixed are a cross-site script (XSS) vulnerability in the URL downloader repository and cross-site request forgery (CSRF) vulnerability in the quick-grading feature of the Assignment module.

More information is available in the release notes for 2.4.102.5.6, and 2.6.3.

Posted in Moodle, Security Update | Leave a comment

Moodle 2.7 Released

Moodle 2.7 was released today. The new version includes a new editor, a new mathematical equation editor, and more.

The new version increases the required PHP version to at least 5.4.4. The required database versions increased to at least MySQL version 5.5.31, MariaDB 5.5.31, Postgres version 9.1, MSSQL version 2008, or Oracle version 10.2.

 

More information is available in the release notes.

Posted in Moodle | Leave a comment

Moodle 2.4.9, 2.5.5, and 2.6.2 Released

Moodle 2.4.9, 2.5.6, and 2.6.2 were released today. The new versions include “small improvements”, bug fixes, and security fixes. Details of the security vulnerabilities fixed will be released later.

Update (March 17, 2014): Moodle has now released information on the security issues fixed in the releases.The new versions fix three serious vulnerabilities, two that could lead improper access and one that could allow “students to see pages of other students’ individual wikis”.

More information is available in the release notes for 2.4.9, 2.5.5, and 2.6.2.

Posted in Moodle, Security Update | Leave a comment

Support Ends for Moodle 1.9 and 2.3

Support for Moodle 1.9 and 2.3 has ended. A final release of 2.3, 2.3.11, that includes security fixes was released today. Anyone still running 1.9 or 2.3 should upgrade to a supported release. In most cases the version to move to would be the latest version, 2.6.

Posted in End of Support, Moodle | Leave a comment

Moodle 2.3.11, 2.4.8, 2.5.4, and 2.6.1 Released

Moodle 2.3.11, 2.4.8, 2.5.5, and 2.6.1 were released today. The new versions include “small improvements”, bug fixes, and security fixes. Details of the security vulnerabilities fixed will be released later.

Update (January 21, 2014): Moodle has now released information on the security issues fixed in the releases. The new versions fixed two cross-site request forgery (CSRF) vulnerabilities, a vulnerability that allowed some users to log in as other users, and a bug in all but 2.3.x that sometimes would cause passwords to be recorded in plain text.

More information is available in the release notes for 2.3.11, 2.4.8, 2.5.4, and 2.6.1.

Posted in Moodle, Security Update | Leave a comment

Moodle 2.6 Released

Moodle 2.6 was released today. The new version includes usability and performance improvements.

More information is available in the release notes.

Posted in Moodle | Leave a comment

Moodle 2.3.10, 2.4.7, and 2.5.3 Released

Moodle 2.3.10, 2.4.7, and 2.5.3 were released today. The new versions include “small improvements”, bug fixes, and security fixes. Details of the security vulnerabilities fixed will be released later.

Update (November 26, 2013): Moodle has now released information on the security issues fixed in the releases. The new versions fixed several cross-site scripting (XSS) vulnerabilities and stopped allowing access to files outside of Moodle file area.

More information is available in the release notes for 2.3.10, 2.4.7, and 2.5.3.

Posted in Moodle, Security Update | Leave a comment

Moodle 2.3.9, 2.4.6, and 2.5.2 Released

Moodle 2.3.9, 2.4.6, and 2.5.2 were released today. The new versions include “small improvements”, bug fixes, and security fixes. Details of the security vulnerabilities fixed will be released later.

Update (September 16, 2013): Moodle has now released information on the security issues fixed in the releases. The security issues fixed include a potential SQL injection and cross-site scripting (XSS) vulnerability.

More information is available in the release notes for 2.3.9, 2.4.6, and 2.5.2.

Posted in Moodle, Security Update | Leave a comment

Moodle 2.2.11, 2.3.8, 2.4.5, and 2.5.1 Released; Support Ends For Moodle 2.2

Moodle 2.2.11, 2.3.8, 2.4.5, and 2.5.1 were released today. The new versions include “small improvements”, bug fixes, and security fixes. Details of the security vulnerabilities fixed will be released later.

Moodle 2.2.11 is the last release for the 2.2 branch and anyone running it should upgrade to a newer, supported, version.

Update (July 15, 2013): Moodle has now released information on the security issues fixed in the releases. Moodle 2.2.11 fixes two serious security vulnerabilities and three minor security vulnerabilities. Moodle 2.3.8 fixes two serious security vulnerabilities and four minor security vulnerabilities. Moodle 2.4.5 and 2.5.1 fix two serious security vulnerabilities and five minor security vulnerabilities.

Posted in End of Support, Moodle, Security Update | Leave a comment