Moodle 4.1.9

Unsupported Moodle Version

This version of Moodle is no longer supported and will not receive fixes for security risks.
You are encouraged to upgrade to a supported version of Moodle.

Release date: 12 February 2024

Here is the full list of fixed issues in 4.1.9.

General fixes and improvements

• MDL-79937 - Lesson: Matching questions does not match with expected response
• MDL-80667 - Running a task in the admin UI isn't possible, if config.php use environments variables

Security fixes

• MSA-24-0001 - Denial of service risk in file picker unzip functionality
• MSA-24-0002 - Forum search accepted random parameters in its URL
• MSA-24-0003 - H5P attempts report did not respect activity group settings
• MSA-24-0004 - Forum export did not respect activity group settings
• MSA-24-0005 - CSRF risk in Language import utility
• MSA-24-0006 - IDOR on dashboard comments block