Skip to main content

Moodle 3.4.8

Unsupported Moodle Version
This version of Moodle is no longer supported and will not receive fixes for security risks.
You are encouraged to upgrade to a supported version of Moodle.

Release date: 11 March 2019

Here is the full list of fixed issues in 3.4.8.

Fixes and improvements

  • MDL-63892 - Last post date and time shown correctly on forum page
  • MDL-64652 - Data export performance improvement
  • MDL-64971 - get_with_capability_join, get_users_by_capability, assign/unassign_capability now check the capability exists
  • MDL-64799 - Exponential question growth prevented when duplicating quizzes

Security issues

  • MSA-19-0004 "Log in as" functionality exposed to JavaScript risk on other users' Dashboards
  • MSA-19-0005 Logged in users could view all calendar events
  • MSA-19-0006 Users could elevate their role when accessing the LTI tool on a provider site
  • MSA-19-0007 Stored HTML in assignment submission comments allowed links to be opened directly

Translations