Skip to main content

Moodle 3.9.13

Unsupported Moodle Version
This version of Moodle is no longer supported for general bug fixes.
You are encouraged to upgrade to a supported version of Moodle.

Release date: 14 March 2022

Here is the full list of fixed issues in 3.9.13.

Backported bug fixes​

  • MDL-73915 - Bump NodeJS version, dependencies, and update JS build process, drop IE support
  • MDL-73588 - Unexpected content in the CURLOPT_FILE output stream on redirects

Security fixes​

  • MSA-22-0005 SQL injection risk in Badges criteria code
  • MSA-22-0006 Users with moodle/site:uploadusers but without moodle/user:delete could delete users
  • MSA-22-0007 Possible to reach the profile field badge criteria on a course page
  • MSA-22-0008 Upgrade PHPMailer to latest version (upstream)
  • MSA-22-0009 Upgrade CKEditor included in h5p-editor-php-library to latest version (upstream)

Translations​