Moodle 4.2.4
Unsupported Moodle Version
This version of Moodle is no longer supported and will not receive fixes for security risks.
You are encouraged to upgrade to a supported version of Moodle.
You are encouraged to upgrade to a supported version of Moodle.
Release date: 11 December 2023
Here is the full list of fixed issues in 4.2.4.
General fixes and improvements
- MDL-64431 - Layers missing from PDFs in grading view
- MDL-68652 - Forum grades include teacher, all roles
- MDL-80150 - Reintroduce activity mime file type icons (meaning each file has its extension icon) (backport of MDL-78285)
- MDL-76555 - PHP8.0 error in mod_resource if legacy instances are present
- MDL-75572 - Badges using activity completion with passing grade criteria, even when failed grade is given
- MDL-60632 - Chart rendering fails in quiz report when overall negative grades
- MDL-74129 - Copyright button in H5P activities ignores the metadata information
- MDL-79148 - When a recording is imported on a Room with Recording type of BigBlueButton activity, it won't show the link to watch it
- MDL-78775 - Error in the grader report when attempting to modify a grade after using the search filter
- MDL-71414 - The attempt report for H5P drag-and-drop type questions is erroneous when answer elements are in multiple drop zones
- MDL-74378 - Quiz closing more than 1 h after opening stops auto-saving and does not auto-submit
- MDL-79611 - Assignment View with missing group is wrongly displayed
- MDL-78103 - More menu text exceeds the menu border in RTL
- MDL-42189 - User can still see grade in overview report for the courses where their enrolment is suspended
- MDL-79639 - Deadlock while running ad-hoc task quiz_statistics\task\recalculate
- MDL-79615 - Inefficient cache rebuilding when bulk-updating course module visibility
- MDL-76937 - Delete Course Button can be clicked twice
- MDL-79194 - Activity context menu not updated when topic un-hidden
- MDL-79367 - Activity access restrictions do not work when using activity completion with passing grade criteria and failed grade is given
- MDL-79648 - In format weeks you get 29 October twice
- MDL-79185 - Fix statcache race condition in cachestore_file
- MDL-76457 - Popover context pointing arrows should be flipped in RTL mode
- MDL-79806 - quiz_statistics ad-hoc task should be triggered when attempts are deleted
- MDL-78481 - Multi-language filter v2 not working properly for matching questions in a lesson
- MDL-79633 - Database timeadded and timemodified hour display when hovering
- MDL-79807 - When a question is added or removed from a quiz, we must remove all cached stats immediately
- MDL-79501 - Editing Multiple Videos in TinyMCE Editor uses the first video instead of selected one
- MDL-77816 - Clicking the "Validate completion" button from within a BigBlueButton activity results in an "invalidparameter"
- MDL-79604 - Exception when missing checkbox field in db activity template
- MDL-80035 - Function 'theme_boost\output\core_renderer::edit_button' throws an Exception when "haseditswitch" has no value
- MDL-79966 - Scheduled task timing (crontab fields) is wrong
- MDL-79841 - Left and right borders disappearing from boxes in small screens
- MDL-75616 - restore_backup CLI command fails when CFG->backuptempdir is defined
- MDL-77364 - Display the whole full name of course on course cards in "My courses" page or add a tooltip on mouse hover
- MDL-79956 - Import Recording Link shown for all users
- MDL-79635 - Incorrect number of query parameters while listing users by student
- MDL-79422 - nologin WS fetches should not fail subsequent requests on error
- MDL-78670 - Prevent using offline quizzes when sequential navigation is enabled
- MDL-74248 - MP3 files uploaded to folder resources will not play in Chrome
- MDL-79601 - In RTL mode the Course Progress Report displays First/Last Name in LTR format
- MDL-80002 - Forum summary report date filtering throws an exception
- MDL-79512 - A teacher can not change the order of the questions in feedback activity
- MDL-79858 - The "Request a course" button is badly styled on my courses
- MDL-79856 - Role deletion confirmation contains missing role name
- MDL-80181 - Wiki comments table has broken column width
- MDL-79992 - Course backups are not displayed in the Restore when accessing from a module page
- MDL-79827 - Tiny editor link plugin doesn't correctly observe whether files can be uploaded
- MDL-79747 - quiz_statistics ad-hoc task should not set a userid: prevents quiz submission if main admin is nologin
- MDL-79617 - Close session early during file upload process
- MDL-79352 - Admin tools link in plugin overview page leads to broken URL
- MDL-79160 - Questions: The answer field is overflowed the parent width when the size is too big
- MDL-78979 - Restore or copy a course change links to database items
- MDL-79365 - Cannot edit courses when unique custom text fields are present
- MDL-79781 - Error in Courses Pending approval when the default role is deleted
- MDL-79325 - Group overview export doesn't correctly format group names
- MDL-77274 - Letter avatars should respect the preference which should come first family or given names
- MDL-80019 - Completion form Freeze should not allow to edit the completion events
- MDL-80234 - Passed requirement as default activity completion is not saved for SCORM
- MDL-80045 - Starred courses block off centred in right drawer under 575px screen width
- MDL-78903 - Tiny media image plugin doesn't properly honour file upload options
- MDL-78849 - "Continue as guest" button shows when already logged in as guest and being redirected to login page
- MDL-79801 - Tags custom report entity "flagged" value incorrectly calculated
- MDL-79979 - Test course creation in Site administration is not taking 'Auto-enrol admin in new courses' setting into consideration
- MDL-80015 - Category 'More' menu dropdown sits 'off-screen'
- MDL-80286 - Database date type fields with values smaller than -2147483648 lead to "Error reading database" exceptions
- MDL-80254 - Cron task issue with Send report schedules (core_reportbuilder\task\send_schedules),Invalid user
- MDL-78650 - Assignment is still in timeline after submission with group submission, require to click submit, and no activity completion options
- MDL-76694 - Comment JS error when run in embedded page layouts
- MDL-79623 - Component Library: core/confirm wrong content key
- MDL-79279 - Importing cloze questions does not import their Idnumbers
- MDL-80341 - Quiz submission confirmation: description items should not be counted as unanswered questions
Accessibility improvements
- MDL-77651 - Decorative icons should be hidden from the screen reader (WCAG 2.1 - 1.1.1 Non-text Content)
- MDL-80185 - Invalid language attribute on HTML tag for languages such as en_wp and de_kids
- MDL-71336 - Dynamic forms use the same id for different date elements
- MDL-80121 - Empty heading in Gradebook Single View report's zero state page
- MDL-79705 - User profile: checkbox profile fields rendered in a way that is not accessible
- MDL-80131 - Make the title of the pages on the database module unique
- MDL-79061 - Provide feedback for actions performed on the course page
- MDL-79062 - Grader report accessibility issues
- MDL-80043 - Make the page titles for single view and grader reports more unique
Security fixes
- MSA-23-0044 - Authenticated remote code execution risk in logstore as manager
- MSA-23-0045 - DOS risk in URL downloader
- MSA-23-0046 - Authenticated remote code execution risk in course blocks
- MSA-23-0047 - Logs and Live logs course reports did not respect activity group settings
- MSA-23-0048 - Stored XSS in grader report via user ID number
- MSA-23-0049 - Reflected XSS risk in grader report search
- MSA-23-0050 - Survey responses did not respect group settings
- MSA-23-0051 - Badge recipients are available to all users
- MSA-23-0052 - XSS risk when manually running a task in the admin UI
- MSA-23-0053 - Reflected XSS risk on ad-hoc tasks page