Skip to main content

Moodle 4.0.6

Unsupported Moodle Version
This version of Moodle is no longer supported and will not receive fixes for security risks.
You are encouraged to upgrade to a supported version of Moodle.

Release date: 16 January 2023

Here is the full list of fixed issues in 4.0.6.

General fixes and improvements​

  • MDL-69570 - Reset and delete all submissions doesn't delete the assignfeedback_editpdf files
  • MDL-75635 - Add Javascript API in Safe Exam Browser (SEB) integration to query the keys (BEK/CK) (backport of MDL-72188)
  • MDL-76106 - Drag and Drop Marker Question Type: Incorrect/lost marker positions (follow-up of MDL-71145 and MDL-72679)
  • MDL-75569 - Search courses - Within course catalogue area does not work for most users
  • MDL-68981 - Recycle bin does not include user data if "General restore defaults > Include users" is No
  • MDL-76258 - Restoring mod_lti course modules with LTI 1.3 produces database errors when using preconfigured tools
  • MDL-76274 - bump_submission_for_stale_conversions adhoc task runs in situations when it shouldn't
  • MDL-74454 - SCORM bugs when it has three or more levels
  • MDL-76330 - Edit icon also shown for enrolment methods when enrol/{method}:config is not granted
  • MDL-75567 - In edit mode, only one 'hidden from students' badge is displayed at a time
  • MDL-76061 - Calendar event type cannot be changed from type "user"
  • MDL-66924 - Users with "mod/forum:postprivatereply" capability cannot view their own private replies when "mod/forum:readprivatereplies" is not enabled
  • MDL-74779 - BigBlueButton recordings show up ordered by name instead of date
  • MDL-76225 - 'Absolute 'direct links to sections (course/view.php?id=25122#sectionid-346124-title) do not work any more, only course/view.php?id=25122#section-4
  • MDL-75279 - LTI NRPS response omits username property
  • MDL-76380 - Unable to edit OAuth2 Service if requireconfirmation is disabled
  • MDL-76251 - Forum on the phone is bigger than device's width
  • MDL-72563 - Rubric content is shown out of the area when zooming in
  • MDL-76666 - setlocale() problems with locale strings longer than 255 characters
  • MDL-69071 - CLI installer triggers debugging if langpack download fails (Fatal error in PHP 8.0)
  • MDL-60038 - Web service users should not have to accept site policies
  • MDL-70491 - Wrong styles for filter selection items in participants page
  • MDL-73804 - make_categories_list is extremely slow when performing course management
  • MDL-75914 - Quiz test_process_attempt test sends debugging output if an essay question is present in the attempt and that question includes attaachments
  • MDL-76039 - Create a new profile category button does nothing
  • MDL-76193 - Backup and restore with tags for quiz category questions fails
  • MDL-32105 - Glossary: Allows special characters in keywords
  • MDL-75588 - Student's Timeline should show a TO-DO submission task after another attempt is granted in an Assignment
  • MDL-75415 - BigBlueButton Activity Session Scheduling should prevent admins from accessing sessions outside of scheduled times
  • MDL-76273 - No filename for custom report's PDF download for multibyte char name
  • MDL-75441 - Guest users no longer prompted to create an account and enrol in order to post in a forum
  • MDL-76367 - TinyMCE editor not supporting RTL language
  • MDL-76571 - Description questions appearing in the quiz reports
  • MDL-76674 - String for timezone america/ciudad_juarez not found (tzdb 2022g)
  • MDL-76196 - Students cannot manually complete inline folders
  • MDL-76679 - Admin config fields of type password inconsistent behaviour
  • MDL-75903 - Selection of active primary navigation node is not precise enough
  • MDL-74558 - BigBlueButton error message when activity deleted
  • MDL-75965 - Questions: Misalignment of correct and incorrect icons in multichoice
  • MDL-73078 - In workshop, upon a submission, the buttons 'Edit submission', 'Delete submission' and 'Export this page' should not stick together
  • MDL-76083 - Import/Use a preset - existing fields are not always deleted
  • MDL-75651 - Duplicate activity heading when completing feedback in classic theme
  • MDL-75792 - groupings should be ordered by name on access restriction form
  • MDL-76229 - The Textarea data type of User Profile Fields is not showing when locked/freeze
  • MDL-75380 - Custom profile field values incorrect sent through format_text when enrolling users
  • MDL-76365 - Empty HTML when exporting database activity as file download
  • MDL-76271 - Course module displays poorly when drag and drop action performed
  • MDL-76308 - Question\D&D: The draggable area seem to have very tall/slim characters to select
  • MDL-53137 - Min and max limits are reversed in calculated questions with a negative answer and geometric tolerance
  • MDL-75789 - Long multibyte course shortname ruins course restoration process (Incorrect string value: '\xD1_1' for column 'shortname' at row 1)
  • MDL-76250 - Submission page asks to "Reload page" when selecting a filter
  • MDL-75281 - BigBlueButton upgrade script failure when recording table exists
  • MDL-75381 - Grader report generate an exception with PHP 8.0
  • MDL-73017 - Add environment check for versions not supporting PHP 8.1
  • MDL-76074 - Activity completion reports filter by first name and surname not working with custom profile fields
  • MDL-72019 - The custom user profile field for dates showing unixtime when downloading via bulk user actions
  • MDL-75571 - Timeline block uses stock LTI icon even if it has been customized
  • MDL-75826 - Parameter 'returnto' is ignored when editing a user
  • MDL-76127 - The profiling URL link on the breadcrumbs summary page is not clickable on the Boost theme
  • MDL-76145 - Long course names and course id exceeding available space on the manage courses and categories page
  • MDL-76446 - Course participant shows active users when filtering by inactive and keyword
  • MDL-76166 - Username logging not honoured in complete_user_login
  • MDL-75300 - Unknown column 'reviewer.userid' in 'where clause' in h5pactivity
  • MDL-76326 - NextCloud OAuth2 logo is not displayed
  • MDL-75627 - Calendar import from o365 does not respect Timezone data
  • MDL-75346 - Resetting dashboards containing a missing block displays an exception
  • MDL-76220 - Single activity format shows error message on wiki

Accessibility improvements​

  • MDL-74822 - Accessibility issues with user tours
  • MDL-76597 - Quiz editing page accessibility issues
  • MDL-76601 - Action menus in course cards in My courses cannot be navigated to by keyboard
  • MDL-76803 - Make the options in the Email display select box more concise

For developers​

  • MDL-75105 - List available behat data generators on admin/tool/behat/index.php

Security fixes​

  • MSA-23-0001 - Reflected XSS risk in some returnurl parameters
  • MSA-23-0002 - Reflected XSS risk in blog search
  • MSA-23-0003 - Possible to set the preferred "start page" of other users