Moodle 1.9.8 Tackles Security Vulnerabilities

Moodle has released an update to its open source learning management system for Mac OS X, Windows, and Linux. Moodle 1.9.8 includes a number of small improvements and bug fixes but also addresses nine security vulnerabilities, including two that Moodle developers have labeled as "critical" and five as "major." Moodle has also released a parallel update to the 1.8 branch, version 1.8.12, which includes comparable changes.

Moodle is the most widely adopted learning management system available, with nearly 1.2 million teachers using it and more than 33.5 million users participating in more than 3.3 million courses at more than 46,000 validated sites worldwide. Moodle supports both small and large deployments (with several sites well beyond 100,000 users) and includes course management tools, various Web 2.0 technologies, online assessments, and other features common to learning management systems.

In the latest release, the two critical security issues that were addressed include a SQL injection vulnerability in the Wiki module and a forms validation problem. It also fixed problems with cross-site scripting affecting implementations where global search is enabled and a problem that would allow regular users to find the user names of others enrolled in a course. A complete list of security vulnerabilities addressed in the latest releases can be found here.)

In the category of other enhancements, version 1.9.8 improves restoration of student data in course backups and also improves SCORM module restore. Several minor fixes are also included, such as a Firefox issue with the Chameleon theme, a problem with viewing LDAP authentication settings, and an issue with statistics generation.

Moodle developers are recommending the 1.9.8 and 1.8.12 update for all current users. Further information, including a full list of bug fixes and improvements, can be found here.

About the Author

David Nagel is the former editorial director of 1105 Media's Education Group and editor-in-chief of THE Journal, STEAM Universe, and Spaces4Learning. A 30-year publishing veteran, Nagel has led or contributed to dozens of technology, art, marketing, media, and business publications.

He can be reached at [email protected]. You can also connect with him on LinkedIn at https://www.linkedin.com/in/davidrnagel/ .


Featured

  • illustration of a futuristic building labeled "AI & Innovation," featuring circuit board patterns and an AI brain motif, surrounded by geometric trees and a simplified sky

    Cal Poly Pomona Launches AI and Innovation Center

    In an effort to advance AI innovation, foster community engagement, and prepare students for careers in STEM fields and business, California State Polytechnic University, Pomona has teamed up with AI, cloud, and advisory services provider Avanade to launch a new Avanade AI & Innovation Center.

  •  black graduation cap with a glowing blue AI brain circuit symbol on top

    Report: AI Is a Must for Modern Learners

    A new report from VitalSource identifies a growing demand among learners for AI tools, declaring that "AI isn't just a nice-to-have; it's a must."

  • glowing shield hovers above a digital cloud platform with abstract data streams and cloud icons in the background

    Google to Acquire Cloud Security Firm Wiz

    Google has announced it will acquire cloud security startup Wiz. If completed, the acquisition — an all-cash deal valued at $32 billion — would mark the largest in Google's history.

  • digital dashboard featuring a shield icon, graphs, a world map, and network nodes

    IBM Introduces Agentic AI Governance and Security Platform

    IBM has launched a new software stack for enterprise IT teams tasked with managing the complex governance and security challenges posed by autonomous AI systems.