Skip to main content

Moodle 3.1.16

Unsupported Moodle Version
This version of Moodle is no longer supported and will not receive fixes for security risks.
You are encouraged to upgrade to a supported version of Moodle.

Release date: 14 January 2019

Here is the full list of fixed issues in 3.1.16.

Fixes and improvements

  • MDL-63994 - CAS authentication fixed
  • MDL-49651 - Hidden courses no longer send forum notifications to participants

Security issues

  • MSA-19-0001 Manage groups capability was missing the XSS risk flag
  • MSA-19-0002 A blind SSRF risk was patched in /badges/mybackpack.php
  • MSA-19-0003 User full name is now escaped in the un-linked userpix page

Translations