Moodle Gets Security Patches, Feature Improvements

Three updates have been released for the open source learning management system Moodle for the 2.3, 2.4, and 2.5 branches. The minor updates include security patches, bug fixes, and small functionality improvements.

Moodle is a free and open source learning management system in use at about 87,000 sites worldwide, including hundreds of K-12 schools, trade schools, colleges, and universities. Moodle used by about 1.3 million teachers and more than 73 million students participating in some 7.8 million courses as of this writing. (Updated statistics can be found on the Moodle Stats portal at Moodle HQ.)

The new updates include 2.5.2, 2.4.6, and 2.3.9. Each one addresses security vulnerabilities that have been discovered since the last update. The details of those vulnerabilities will be released in about a week to give administrators a chance to update their systems before the information is made public.

Other changes to versions 2.5.2 and 2.4.6 include:

  • Improvements to theme selector;
  • Fixes for MUC session cache;
  • iOS improvement for TinyMCE editor;
  • A fix for Gradebook that ensures grade items remain hidden regardless of activity state, if desired;
  • Support for editing question category information via the HTML editor;
  • A new form validation feature that points users to the location of the problem; and
  • The ability to delete comment without the need for confirmation.

Version 2.3.9 did not get those changes but did add a fix for the auto-linking filter, as did versions 2.5.2 and 2.4.6.

The Moodle 2.5.2, 2.4.6, and 2.3.9 updates are available now. Additional details can be found on moodle.org.

About the Author

David Nagel is the former editorial director of 1105 Media's Education Group and editor-in-chief of THE Journal, STEAM Universe, and Spaces4Learning. A 30-year publishing veteran, Nagel has led or contributed to dozens of technology, art, marketing, media, and business publications.

He can be reached at [email protected]. You can also connect with him on LinkedIn at https://www.linkedin.com/in/davidrnagel/ .


Featured

  • digital lock with circuit patterns

    IBM Adds New AI-Powered Cybersecurity Tools

    IBM has unveiled an expanded portfolio of AI-powered cybersecurity products, positioning the company to compete more aggressively in a rapidly evolving market where enterprises are increasingly turning to artificial intelligence to defend against automated cyber threats.

  • abstract interconnected cubes and shapes with glowing edges

    Blackboard Emerges as Stand-Alone Company Following Financial Restructuring

    Having completed the Chapter 11 bankruptcy process announced last fall, Anthology has rebranded as Blackboard, the company's core Teaching & Learning business.

  • large cloud icon on the right in an abstract world above a polygon with a dark blue background

    Cloud Security Alliance Expands Agentic AI Governance Work

    The Cloud Security Alliance (CSA) has announced a series of CSAI Foundation milestones aimed at securing what it calls the agentic control plane, including a new catastrophic risk initiative, CVE Numbering Authority authorization, and the acquisition of two agentic AI specifications.

  • Digital cyberspace with particles and Digital data

    Survey: AI Is Moving Faster than Data Trust

    AI agents are already in use or pilot at most organizations, but data visibility, governance and precision recovery capabilities have not kept pace, according to a new survey from Veeam Software.