Moodle LMS 4.4.1
14 June 2024
Moodle LMS version 4.4.1 is now available (security release).
Upgrading to Moodle LMS 4.4.1
Moodle LMS 4.4.1 can be upgraded to (or installed) using any of Installatron's products. Use Installatron's optional Automatic Update feature to automatically apply Moodle LMS updates as new versions are released, or use Installatron's Clone feature to duplicate an existing Moodle LMS install to test the 4.4.1 upgrade prior to applying it live. Get started managing your Moodle LMS installations with Installatron
What's New in Moodle LMS 4.4.1
Security fixes
- MSA-24-0021 - BigBlueButton web service leaks meeting joining information to users who should not have access
- MSA-24-0022 - Stored XSS via calendar's event title when deleting the event
- MSA-24-0023 - HTTP authorization header is preserved between "emulated redirects"
- MSA-24-0024 - CSRF risks due to misuse of confirm_sesskey
- MSA-24-0025 - QR login key and auto-login key for the Moodle mobile app should be generated as separate keys
Bug Fixes and Changes
- Cannot import more than one New Grade Item
- Enable module level report options
- Log report does not export user fullname when downloading
- Full course grade recalculation can have huge impact on opening/closing quizzes
- Incorrect handling of partitioned cookies is preventing the mobile app from using the "embedded browser" authentication method
- Increase robustness of the task for downloading/upgrading H5P content types in case any of them fails
- assignfeedback_pdf uses tempdir instead of requestdir
- Course won't load if the Matrix server is unavailable
- The multi-language filter is not supported on the navigation link to the next activity in Lesson
- Restriction by group works incorrectly
- "Heading X" strings are not translated in the TinyMCE editor
- Error in the Column Sort Order question bank plugin
- Site Installation Fatal Error loading named templatable interface
- Add the ability to enable/disable specific TinyMCE Premium Plugins from site administration
- The dates of the BigBlueButton import recordings links in are incorrectly formatted
- Stricter validation of upgrade savepoint components
- Quiz multiple grades: grade item for each slot is not being backed up and restored correctly
- Database field - Restore autolink setting for short text field type
- SCORM activity completion not respecting requirement
- Minor duplicate line in course/rest.php
- Fullname filter is absent in the "Browse all users" page
- Buttons not disabled when form submitted in Chrome browser
- Loading spinner rotating off axis
- Provided password is ignored when uploading course via CSV
- Some ad-hoc tasks fail when run from cron with keep-alive flag
- A Feedback activity with no questions throws an exception when exporting questions
- On activity pages, the activity type icon next to the title is misaligned
- Error on falling back to standard normal layout on outputlib.php
- Allow import to respect approval status for database activity entries
- Duplicate search form on course/search when searching as a student
- "Show" button still remains when hidden section is already visible
- Bulk actions selector should go back to "Choose..." when used
- Uploading images to Tiny editor corrupts unicode response in errors
- Wrong workflow state shown to graders who can't release grades
- Adding and deleting a Question Custom Field can break the Question Bank Sort Order screen
- Files attached to the activity instructions in an assignment are not retained during backup
- "Browse list of users" warn about unsaved data in bulk actions
- Numeric user IDs throws error while creating users in Matrix
- Tiny editor "Premium" plugin missing language string debugging
- In ordering questions, images render in the editor but not in the preview or the quiz
- Category autocomplete disappears when copy course form is not valid
- Messaging drawer message input element too narrow
- Course blocks are not displayed in the section page
- The hint displayed when editing the question heading is not as neat in RTL as it is in LTR
- Missing capability checks hide section editing controls during AJAX reloads
- Activity restriction > Grade checkboxes have incorrect positioning
- Permission page search input fields unfathomably wide
- Tiny editor does not load when editing a calendar event in Firefox
- Applying the same condition/filter to custom report can throw DML exceptions
- Activity with only "Receive a grade" for the completion condition is being shown as "Failed" in the course index
- "Download all submissions" generates HTML file for online text when nothing has been submitted
- Filemanager cannot be disabled by disabledif when in a form group
- When a database activity field type is missing the error is displayed for all fields added just after
- Pass/fail icons are shown for grade totals, even when the totals are set to hidden
- Incorrect popover arrow position in RTL layout
- Improve core_courseformat_get_state performance
- Checkboxes when adding random questions cause confusion
- H5P core "Edit H5P content" link has problem with empty spaces
- Checking tagarea enabled state can throw exception in custom reports list