Moodle 3.1.16

Unsupported Moodle Version

This version of Moodle is no longer supported and will not receive fixes for security risks.
You are encouraged to upgrade to a supported version of Moodle.

Release date: 14 January 2019

Here is the full list of fixed issues in 3.1.16.

Fixes and improvements

• MDL-63994 - CAS authentication fixed
• MDL-49651 - Hidden courses no longer send forum notifications to participants

Security issues

• MSA-19-0001 Manage groups capability was missing the XSS risk flag
• MSA-19-0002 A blind SSRF risk was patched in /badges/mybackpack.php
• MSA-19-0003 User full name is now escaped in the un-linked userpix page

Translations

• Notes de mise à jour de Moodle 3.1.16
• Notas de Moodle 3.1.16