Ilias e-Lernplattform Bugfix und Security Update 7.16

Die Open-Source Lernplattform Ilias, die von vielen Universitäten, Schulen und Behörden eingesetzt wird, erhielt das Update 7.16.

Ilias e-Lernplattform 7.16 Release Notes

Important Changes

• ILIAS Page Editor
  • With Release 7, the ILIAS page editor was fundamentally revised. As part of the page editor, the content style was also adjusted and redundant text and block formats removed. You can see the list of removed paragraphs here:
    • [[Page Editor » Text Editing]]
  • When updating to ILIAS 7, please bear in mind that the changes in the content style will affect your existing content. To prevent this, you can export the content style before an update OR download the ILIAS 6 Default Content Style from the following link:
    • Content Styles-Börse
• Setup
  • With ILIAS 7 the GUI for the Setup has been abandoned. Installing and updating ILIAS is now handled by a command line implementation of the setup. The features for maintenance mode and multi-clients have been removed completely as discussed in the context of the Setup Revision. For more information about the new Setup please have a look into the detailed documentation of the setup in the file setup/README.md or take a look into the ILIAS installation instructions at docs/configuration/install.md.
• Migration of files
  • In addition to the new setup via CLI, since version 7 ILIAS also requires that so-called migrations are carried out after an update. With ILIAS 7, such a migration is, for example, that files are migrated from the file object into the new resource storage service. These migrations can already be started after the update in live mode. To do this, run# php setup/cli.php migratein the CLI for more information.

Security Issues:

#35317: OS Command Injection (found by Anna Hartig, Constantin Schwarz und Niklas Schilling)
#35307: Stored XSS-Vulnerability (found by Anna Hartig, Constantin Schwarz und Niklas Schilling)
#35305: Stored XSS-Vulnerability (found by Anna Hartig, Constantin Schwarz und Niklas Schilling)
#35309: Stored XSS-Vulnerability (found by Anna Hartig, Constantin Schwarz und Niklas Schilling)
#35311: Local File Inclusion (found by Anna Hartig, Constantin Schwarz und Niklas Schilling)
#35313: Open URL Redirect (found by Anna Hartig, Constantin Schwarz und Niklas Schilling)
#35484: OS Command Injection Vulnerability (found by Anna Hartig, Constantin Schwarz und Niklas Schilling)
#35525: OS Command Injection Vulnerability (found by Anna Hartig, Constantin Schwarz und Niklas Schilling)

The following issues reported in Mantis have been resolved:

#33065: [Blog] Blog : Verfügbarkeit / Vorbedingungen ohne Anzeige von Objektinformationen (akill)
#35655: [Certificate] open_basedir restriction error on certificate import (mjansen)
#26358: [Exercise] Portfoliovorlagen in Ordnern nicht wählbar (akill)
#33068: [Glossary] Glossar : Verfügbarkeit / Vorbedingungen ohne Anzeige von Objektinformationen (akill)
#30561: [ILIAS Page Editor] Style names in content area ignore user language (akill)
#24607: [Language Handling] Wrong text in Admin > Magazin > Einstellungen > Brotkrumennavigation beginnt mit Kurs (akill)
#33070: [Learning Module ILIAS : Editor] ILIAS Lernmodul : Verfügbarkeit / Vorbedingungen ohne Anzeige von Objektinformationen (akill)
#35648: [Main Menu] main menu entry configuration dialog: „Visibility for roles“ is not persistant (fschmid)
#8602: [Media Pools and Media Objects] Small Icons Should Never Been Blown Up In Thumbnail View (akill)
#28007: [Personal Profile] vCard on Technical Support page broken and contact link is no link (akill)
#23815: [Personal Profile] Prompting to Personal Profil: Entering the value 0 results in an error. (akill)
#26796: [Personal and Shared Resources (aka ‚My Workspace‘)] Persönliche und geteilte Ressourcen VS Persönliche Ressourcen (akill)
#33073: [Portfolio Template] Portfoliovorlage : Verfügbarkeit / Vorbedingungen ohne Anzeige von Objektinformationen (akill)
#35612: [Statistics and Learning Progress] Typo in German language variable trac_last_maxed_out_sessions (smeyer)
#28104: [Survey] Failed test: Bestehende Umfrage importieren (ohne Fragenpool) (akill)
#35736: [Terms of Service] Lack of request for renewed consent to ToS (mjansen)
#35735: [Terms of Service] Outdated ToS shown when clicking on footer link (mjansen)
#35687: [Test & Assessment] Error on creating Hints in KPrim Question (IPE) (skergomard)
#35692: [Test & Assessment] Error while purging incomplete error text questions (skergomard)
#35683: [Test & Assessment] Formula Question: „Edit Question“ results in an error (skergomard)
#34717: [Test & Assessment] Ordering Question (vertical): Trying to save incomplete question in ‚answer picture‘ mode leads to fatal (nhaagen)
#35710: [Test & Assessment] Copying or importing a test results in an error (skergomard)
#26113: [Test & Assessment] Archivdatei erstellt immer mehr Versionen (ta-bugs)
#31815: [Test & Assessment] Formula questions with fractions as result are wrong depending on the precision (ta-bugs)
#20770: [Wiki] Seitentemplates-Definition (akill)
#20767: [Wiki] Seite löschen (akill)

Quelle: https://docu.ilias.de/goto_docu_st_229.html