Category: Code Releases

LAE Security Releases

Due to a recent emergency security release of Moodle, CLAMP is issuing new versions of all of its supported releases. CLAMP strongly recommends that you upgrade to one of these security releases.

Moodle is withholding public details of the vulnerability until next week. Registered Moodle admins should have received details via email. The vulnerability could allow authenticated users to submit malformed requests to get files outside of the Moodle directory.

You can download the updates from their project pages:

The next stable releases on the 2.8, 2.7 and 2.6 branches are still slated for March 16.

Versions prior to 2.6 are also vulnerable. In Moodle 2.3 and 2.4, only instances hosted on Windows are vulnerable. Starting with Moodle 2.5, the vulnerability affected all server operating systems. If you are running one of these versions in production, you should apply the fix directly. If this applies to you and you need help, please contact wlee@carleton.edu or fultonc@lafayette.edu for help.

New Moodle LAE Releases for 2.6.7, 2.7.4, 2.8.2

There are three new CLAMP releases. This is the initial release on the 2.8 branch. The 2.7 and 2.6 releases include an updated version of the Roster report; the 2.7 release includes an updated version of the Edit Dates report.

The 2.8 release includes major changes to the LAE distribution: we have removed LAE Grader, LAE User, and “old” Quickmail; we have added the News Forum local module. These changes are fully described in the 2.8 release notes below. The removal of the LAE grader reports is made possible by the significant improvements to the core grader reports in the 2.8 release, with which Bob Puffer of Luther College was heavily involved.

You can download the updates from their project pages:

The next stable releases on the 2.8, 2.7 and 2.6 branches are slated for March 16.

New Moodle LAE Releases for 2.5.9, 2.6.6, 2.7.3

There are three new CLAMP releases. There are no new LAE features; these are maintenance releases only. The 2.7 and 2.6 include an updated version of the CLAMPMail block. Please note that the 2.6 and 2.7 releases include important changes to Quickmail and Filtered Course List. We highly encourage you to read those posts before installing the 2.6 or 2.7 release. We anticipate removing “old” Quickmail in 2.8.

You can download the updates from their project pages:

We anticipate releasing a beta LAE version of Moodle 2.8.1 in the next couple weeks. The next stable releases on the 2.5, 2.6 and 2.7 branches are slated for January 18.

New Moodle LAE Releases for 2.5.8, 2.6.5, 2.7.2

There are three new CLAMP releases. There are no new LAE features; these are maintenance releases only.This is the initial release on the 2.7 branch. The 2.7, 2.6 and 2.5 releases include an updated version of the Edit Dates report; the 2.7 and 2.6 releases includes an updated Filtered Course List block. Please see this blog post for details. The 2.4 release is a maintenance release only and is the final release on the 2.4 branch. Please note that the 2.6 and 2.7 releases include important changes to Quickmail and Filtered Course List. We highly encourage you to read those posts before installing the 2.6 or 2.7 release. We anticipate removing “old” Quickmail in 2.8.

You can download the updates from their project pages:

The next stable releases on the 2.5, 2.6 and 2.7 branches are slated for November 14.

New Moodle LAE Releases for 2.4.11, 2.5.7, 2.6.4, 2.7.1

There are four new CLAMP releases. This is the initial release on the 2.7 branch. The 2.7, 2.6 and 2.5 releases include an updated version of the Edit Dates report; the 2.7 and 2.6 releases includes an updated Filtered Course List block. Please see this blog post for details. The 2.4 release is a maintenance release only and is the final release on the 2.4 branch. Please note that the 2.6 and 2.7 releases also include an important change to Quickmail described in a related blog post. We highly encourage you to read that post before installing the 2.6 or 2.7 release. We anticipate removing “old” Quickmail in 2.8.

You can download the updates from their project pages:

The next stable releases on the 2.5, 2.6 and 2.7 branches are slated for September 15. I would like to thank Willy Lee (Carleton College) and Kevin Wiliarty (Smith College) for packaging and testing this set of releases.