Moodle LMS 3.7.6
18 May 2020
Moodle LMS version 3.7.6 is now available (security release).
Upgrading to Moodle LMS 3.7.6
Moodle LMS 3.7.6 can be upgraded to (or installed) using any of Installatron's products. Use Installatron's optional Automatic Update feature to automatically apply Moodle LMS updates as new versions are released, or use Installatron's Clone feature to duplicate an existing Moodle LMS install to test the 3.7.6 upgrade prior to applying it live. Get started managing your Moodle LMS installations with Installatron
What's New in Moodle LMS 3.7.6
Security
- db_replace() doesn't emit any audit trail, should emit a Moodle event
- Improve XMLDB path validation of included files
- MathJax URL upgraded to later version to remove XSS risk (upstream)
- Remote code execution possible via SCORM packages
Changes
- Assignment online text and feedback comments don't expand using Safari
- GDPR data request export not usable when using special characters (invalid file paths)
- Failed environment.xml check does not prevent plugin from being installed
- Add existing class attributes to Boost flat navigation nodes
- Single activity format dropdown from types of activity empty
- Essay question type review: answer box should be the right size
- Gradebook CSV import deletes existing feedback comments if set to be ignored
- Searching for user by email (case-insensitive + accent-sensitive) is too expensive on MySQL with many users
- Missing LTI resource crashes sync_grades task
- When grading assignments unable to select annotation comment using the mouse
- admin/cli/check_database_schema.php does not check indexes
- Appearance of tooltip title attributes in custom menu is incorrect
- help and advanced icons are shown twice for checkboxes in forms
- Link-level LTI memberships service not working
- Keyboard drag and drop ordering of sections in courses is broken and confusing
- paging_bar previous/next buttons have wrong page numbers
- Forum discussions with hidden group picture display as broken links
- Names of sections renamed inline do not change in the keyboard drag and drop menu
- Deleting a temporary table forces a reload of the databasemeta cache (Backport of MDL-58584)
- Cannot delete user if email is over 89 characters long
- Folders don't get listed in course resources
- As soon as fullnamedisplay and alternativefullnameformat differ, names in profile title and user menu differ
Accessibility
- Contrast of colours for success, info, error and warnings text is not accessible
- Calendar: New event: Accessibility issues
- Course homepage: Editing mode on: Accessibility issues
- Course participants: Main: Accessibility issues
- Calendar month view accessibility issues
- Course homepage: View mode: Accessibility issues
- No label for clear my choice option on multiple-choice questions
- Course participants: Enrol user: Accessibility issues
- Course management: insufficient colour contrast