Moodle 3.9.5
Unsupported Moodle Version
This version of Moodle is no longer supported for general bug fixes.
You are encouraged to upgrade to a supported version of Moodle.
You are encouraged to upgrade to a supported version of Moodle.
Release date: 8 March 2021
Here is the full list of fixed issues in 3.9.5.
General fixes and improvements
- MDL-67959 - The default group icon should not be displayed when there is no group picture
- MDL-67515 - Uninstalled plugin breaks the custom lang tool if it had some strings customised
- MDL-66979 - Switch all the Behat testing to the new W3C drivers
- MDL-68970 - Pages during a quiz attempt should not be cached, so forwards/back do not lead to errors
- MDL-57020 - Unable to delete scales which are no longer used
- MDL-70268 - Dropbox repository requires log on to work - which fails
- MDL-46256 - count_words returns too few words when dealing with html tags
- MDL-70048 - Dropbox Search API: /files/search is being retired in favor of /files/search_v2
- MDL-69867 - Marking workflow display wrong current grade if using scales
- MDL-70736 - Unable to load Marking Guide Templates
- MDL-70796 - Moodle word count does not match other software
- MDL-69101 - Essay question: "Accepted file types" and other new fields are not supported in Moodle XML file
- MDL-70377 - When reviewing an attempt as a teacher
$string['saved') {$a}
not replaced - MDL-43697 - Archived badges are restored during course restore
- MDL-70528 - Can't add block to H5P (core) activity
- MDL-70676 - Workshop assessment aspect with no grade is unusable
- MDL-70631 - Poor performance of zip_packer::extract_to_pathname()
- MDL-68958 - Undefined variable: href when creating IMSCP
- MDL-70339 - Activity chooser does not honour external tool icons
- MDL-56772 - File picker:Right align table column headers, in RTL mode (theme:boost)
- MDL-70513 - Quiz manual grading page should warn if you try to leave with unsaved data
- MDL-70705 - Multilang Filters not applied to Recent blog entries block Blog entry titles
- MDL-70552 - Notification of submissions are not sent for anonymous feedback
- MDL-70574 - Cloze multianswer question leaks percentage if with decimal
- MDL-66932 - Grade percentage display in Gradebook should be LTR, in RTL mode
- MDL-70912 - Cannot access H5P content bank popup in Atto editor within mod_data textarea
- MDL-70264 - badges/oauth2callback.php should be removed and replaced by admin/oauth2callback.php
- MDL-67974 - Badge expiry error and missing expired stamp
- MDL-67494 - Course/activity calendar events are deleted when the teacher who created them requests their data to be deleted
- MDL-70995 - Group names not formatted in course participants filter
- MDL-69883 - Unable to scroll beyond 50 conversations in Messages tool
- MDL-69097 - Language filters aren't correctly applied in "Whole forum grading"
Accessibility improvements
- MDL-70169 - Login page accessibility issues
- MDL-70288 - Checkbox and advanced checkbox elements can have duplicate labels
- MDL-70173 - Dashboard accessibility issues
- MDL-65390 - Accessibility #11 Content appears above "show more" button
- MDL-59782 - Question bank highlight of last added question is wrong in boost
- MDL-70172 - Site home page accessibility issues
Security fixes
- MSA-21-0006 Stored XSS via ID number user profile field
- MSA-21-0007 Stored XSS and blind SSRF possible via feedback answer text
- MSA-21-0008 User full name disclosure within online users block
- MSA-21-0009 Bypass email verification secret when confirming account registration
- MSA-21-0010 Fetching a user's enrolled courses via web services did not check profile access in each course
- MSA-21-0011 JQuery versions below 3.5.0 contain some potential vulnerabilities (upstream)