Moodle Gets Security Patches, Feature Improvements

Three updates have been released for the open source learning management system Moodle for the 2.3, 2.4, and 2.5 branches. The minor updates include security patches, bug fixes, and small functionality improvements.

Moodle is a free and open source learning management system in use at about 87,000 sites worldwide, including hundreds of K-12 schools, trade schools, colleges, and universities. Moodle used by about 1.3 million teachers and more than 73 million students participating in some 7.8 million courses as of this writing. (Updated statistics can be found on the Moodle Stats portal at Moodle HQ.)

The new updates include 2.5.2, 2.4.6, and 2.3.9. Each one addresses security vulnerabilities that have been discovered since the last update. The details of those vulnerabilities will be released in about a week to give administrators a chance to update their systems before the information is made public.

Other changes to versions 2.5.2 and 2.4.6 include:

  • Improvements to theme selector;
  • Fixes for MUC session cache;
  • iOS improvement for TinyMCE editor;
  • A fix for Gradebook that ensures grade items remain hidden regardless of activity state, if desired;
  • Support for editing question category information via the HTML editor;
  • A new form validation feature that points users to the location of the problem; and
  • The ability to delete comment without the need for confirmation.

Version 2.3.9 did not get those changes but did add a fix for the auto-linking filter, as did versions 2.5.2 and 2.4.6.

The Moodle 2.5.2, 2.4.6, and 2.3.9 updates are available now. Additional details can be found on moodle.org.

About the Author

David Nagel is the former editorial director of 1105 Media's Education Group and editor-in-chief of THE Journal, STEAM Universe, and Spaces4Learning. A 30-year publishing veteran, Nagel has led or contributed to dozens of technology, art, marketing, media, and business publications.

He can be reached at [email protected]. You can also connect with him on LinkedIn at https://www.linkedin.com/in/davidrnagel/ .


Featured

  • layered glass panels and light trails

    Stanford Online Launches Immersive Learning Studio

    Stanford Online recently marked its 30th anniversary with the announcement of a new immersive learning studio, according to a university news release. The studio takes advantage of AI-powered and immersive learning technologies to continue delivering personalized and faculty-led education.

  • artificial intelligence on laptop

    OpenAI to Combine AI Products into Desktop 'Superapp'

    OpenAI is reportedly developing a desktop application that would combine several of its emerging AI products into a single platform, according to reports, marking the latest step in the company's effort to transform ChatGPT from a standalone chatbot into a broader productivity and automation environment.

  • Abstract futuristic digital network with glowing padlock icons

    Microsoft Intros New Agentic AI Security Multi-Model Defense System

    A new multi-model agentic AI security system built by Microsoft's Autonomous Code Security team helped researchers find 16 new vulnerabilities across the Windows networking and authentication stack, the company anounced in a recent security blog post.

  • Jason Palm

    AI, Identity, and Speed: Cybersecurity Priorities for Higher Ed

    Fortinet Security Operations Specialist Jason Palm explains how AI is raising new security challenges for higher education, requiring stronger governance, identity protection, threat detection, automation, and incident readiness.