- update to 3.8.4
  Security fixes
  + MSA-20-0007 Vulnerable JavaScript libraries: jQuery 1.9.1 (upstream)
  + MSA-20-0008 Reflected XSS in admin task logs filter
  + MSA-20-0009 Course enrolments allowed privilege escalation from
                teacher role into manager role
  + MSA-20-0010 yui_combo should mitigate denial of service risk
  General fixes and improvements
  + MDL-67700 - Messages displaying in incorrect conversations when 
                switching between conversations quickly
  + MDL-60827 - OAuth 2 still expecting email verification after 
                "Require email verification" has been disabled
  + MDL-52578 - Activity weight set to 0 on creation
  + MDL-68864 - Clear my choice for single answer multiple choice questions is erratic
  + MDL-67126 - In assignment activity the completion state is not set
                reliably for all group members
  + MDL-68436 - Atto RecordRTC (record audio/video) plugin only works 
                in the first editor on a page
  + MDL-69106 - convert_submissions task with asynchronous document
                conversion cannot be completed by cron
  + MDL-68203 - Error duplicating quiz when there is a course view link in the answer
  + MDL-69109 - Theme icons are lost after web upgrade in 3.9 or theme change in other versions
  + MDL-66917 - No validation that uploaded (from zip) plugin has higher version than installed
  + MDL-68992 - Update minimal age of digital consent according to current legislation
  + MDL-68253 - On the first page of a book, no previous arrow should be shown in navigation
  + MDL-67172 - Allow multiple H5P content displayed properly when 
                accessing the first time (backport of MDL-67095 )
  + MDL-67497 - Capability "backuptargetimport" should have captype "read"
  + MDL-64175 - 'Advanced settings' for media resources in Atto are not loaded properly when editing
  + MDL-68215 - Make the Activity results block styling consistent with other blocks

• Files Changed
• Browse Source