Moodle 4.0.6
Unsupported Moodle Version
This version of Moodle is no longer supported and will not receive fixes for security risks.
You are encouraged to upgrade to a supported version of Moodle.
You are encouraged to upgrade to a supported version of Moodle.
Release date: 16 January 2023
Here is the full list of fixed issues in 4.0.6.
General fixes and improvements
- MDL-69570 - Reset and delete all submissions doesn't delete the assignfeedback_editpdf files
- MDL-75635 - Add Javascript API in Safe Exam Browser (SEB) integration to query the keys (BEK/CK) (backport of MDL-72188)
- MDL-76106 - Drag and Drop Marker Question Type: Incorrect/lost marker positions (follow-up of MDL-71145 and MDL-72679)
- MDL-75569 - Search courses - Within course catalogue area does not work for most users
- MDL-68981 - Recycle bin does not include user data if "General restore defaults > Include users" is No
- MDL-76258 - Restoring mod_lti course modules with LTI 1.3 produces database errors when using preconfigured tools
- MDL-76274 - bump_submission_for_stale_conversions adhoc task runs in situations when it shouldn't
- MDL-74454 - SCORM bugs when it has three or more levels
- MDL-76330 - Edit icon also shown for enrolment methods when
enrol/{method}:config
is not granted - MDL-75567 - In edit mode, only one 'hidden from students' badge is displayed at a time
- MDL-76061 - Calendar event type cannot be changed from type "user"
- MDL-66924 - Users with "mod/forum:postprivatereply" capability cannot view their own private replies when "mod/forum:readprivatereplies" is not enabled
- MDL-74779 - BigBlueButton recordings show up ordered by name instead of date
- MDL-76225 - 'Absolute 'direct links to sections (course/view.php?id=25122#sectionid-346124-title) do not work any more, only course/view.php?id=25122#section-4
- MDL-75279 - LTI NRPS response omits username property
- MDL-76380 - Unable to edit OAuth2 Service if requireconfirmation is disabled
- MDL-76251 - Forum on the phone is bigger than device's width
- MDL-72563 - Rubric content is shown out of the area when zooming in
- MDL-76666 - setlocale() problems with locale strings longer than 255 characters
- MDL-69071 - CLI installer triggers debugging if langpack download fails (Fatal error in PHP 8.0)
- MDL-60038 - Web service users should not have to accept site policies
- MDL-70491 - Wrong styles for filter selection items in participants page
- MDL-73804 - make_categories_list is extremely slow when performing course management
- MDL-75914 - Quiz test_process_attempt test sends debugging output if an essay question is present in the attempt and that question includes attaachments
- MDL-76039 - Create a new profile category button does nothing
- MDL-76193 - Backup and restore with tags for quiz category questions fails
- MDL-32105 - Glossary: Allows special characters in keywords
- MDL-75588 - Student's Timeline should show a TO-DO submission task after another attempt is granted in an Assignment
- MDL-75415 - BigBlueButton Activity Session Scheduling should prevent admins from accessing sessions outside of scheduled times
- MDL-76273 - No filename for custom report's PDF download for multibyte char name
- MDL-75441 - Guest users no longer prompted to create an account and enrol in order to post in a forum
- MDL-76367 - TinyMCE editor not supporting RTL language
- MDL-76571 - Description questions appearing in the quiz reports
- MDL-76674 - String for timezone america/ciudad_juarez not found (tzdb 2022g)
- MDL-76196 - Students cannot manually complete inline folders
- MDL-76679 - Admin config fields of type password inconsistent behaviour
- MDL-75903 - Selection of active primary navigation node is not precise enough
- MDL-74558 - BigBlueButton error message when activity deleted
- MDL-75965 - Questions: Misalignment of correct and incorrect icons in multichoice
- MDL-73078 - In workshop, upon a submission, the buttons 'Edit submission', 'Delete submission' and 'Export this page' should not stick together
- MDL-76083 - Import/Use a preset - existing fields are not always deleted
- MDL-75651 - Duplicate activity heading when completing feedback in classic theme
- MDL-75792 - groupings should be ordered by name on access restriction form
- MDL-76229 - The Textarea data type of User Profile Fields is not showing when locked/freeze
- MDL-75380 - Custom profile field values incorrect sent through format_text when enrolling users
- MDL-76365 - Empty HTML when exporting database activity as file download
- MDL-76271 - Course module displays poorly when drag and drop action performed
- MDL-76308 - Question\D&D: The draggable area seem to have very tall/slim characters to select
- MDL-53137 - Min and max limits are reversed in calculated questions with a negative answer and geometric tolerance
- MDL-75789 - Long multibyte course shortname ruins course restoration process (Incorrect string value: '\xD1_1' for column 'shortname' at row 1)
- MDL-76250 - Submission page asks to "Reload page" when selecting a filter
- MDL-75281 - BigBlueButton upgrade script failure when recording table exists
- MDL-75381 - Grader report generate an exception with PHP 8.0
- MDL-73017 - Add environment check for versions not supporting PHP 8.1
- MDL-76074 - Activity completion reports filter by first name and surname not working with custom profile fields
- MDL-72019 - The custom user profile field for dates showing unixtime when downloading via bulk user actions
- MDL-75571 - Timeline block uses stock LTI icon even if it has been customized
- MDL-75826 - Parameter 'returnto' is ignored when editing a user
- MDL-76127 - The profiling URL link on the breadcrumbs summary page is not clickable on the Boost theme
- MDL-76145 - Long course names and course id exceeding available space on the manage courses and categories page
- MDL-76446 - Course participant shows active users when filtering by inactive and keyword
- MDL-76166 - Username logging not honoured in complete_user_login
- MDL-75300 - Unknown column 'reviewer.userid' in 'where clause' in h5pactivity
- MDL-76326 - NextCloud OAuth2 logo is not displayed
- MDL-75627 - Calendar import from o365 does not respect Timezone data
- MDL-75346 - Resetting dashboards containing a missing block displays an exception
- MDL-76220 - Single activity format shows error message on wiki
Accessibility improvements
- MDL-74822 - Accessibility issues with user tours
- MDL-76597 - Quiz editing page accessibility issues
- MDL-76601 - Action menus in course cards in My courses cannot be navigated to by keyboard
- MDL-76803 - Make the options in the Email display select box more concise
For developers
- MDL-75105 - List available behat data generators on admin/tool/behat/index.php
Security fixes
- MSA-23-0001 - Reflected XSS risk in some returnurl parameters
- MSA-23-0002 - Reflected XSS risk in blog search
- MSA-23-0003 - Possible to set the preferred "start page" of other users