Moodle LMS 3.5.8
29 October 2019
Moodle LMS version 3.5.8 is now available (security release).
Upgrading to Moodle LMS 3.5.8
Moodle LMS 3.5.8 can be upgraded to (or installed) using any of Installatron's products. Use Installatron's optional Automatic Update feature to automatically apply Moodle LMS updates as new versions are released, or use Installatron's Clone feature to duplicate an existing Moodle LMS install to test the 3.5.8 upgrade prior to applying it live. Get started managing your Moodle LMS installations with Installatron
What's New in Moodle LMS 3.5.8
Security
- JavaScript injection possible in some Mustache templates via recursive rendering from contexts
- Course creation did not check the creator's role assignment capability before automatically assigning them as a teacher in the course
- Python Machine Learning dependency versions bumped
- Activity :addinstance capabilities were not respected when creating a course in single activity format
- Open redirect in the mobile launch endpoint could be used to expose mobile access tokens
- Forum subscribe link contained an open redirect if forced subscription mode was enabled
Bug Fixes
- Online text assignment error when attempting to submit an image only (with no text)
- Grade page is broken if submission other than PDF was deleted
- Upgrade PHPMailer