Ilias-Lernplattform Security und Bugfix Release 7.19

Die Open-Source Lernplattform Ilias, die von vielen Universitäten, Schulen und Behörden eingesetzt wird, erhielt das Update 7.19.

Ilias 7.19 Release Notes

Important Changes

• ILIAS Page Editor
  • With Release 7, the ILIAS page editor was fundamentally revised. As part of the page editor, the content style was also adjusted and redundant text and block formats removed. You can see the list of removed paragraphs here:
    • Page Editor » Text Editing
  • When updating to ILIAS 7, please bear in mind that the changes in the content style will affect your existing content. To prevent this, you can export the content style before an update OR download the ILIAS 6 Default Content Style from the following link:
    • Content Styles-Börse
• Setup
  • With ILIAS 7 the GUI for the Setup has been abandoned. Installing and updating ILIAS is now handled by a command line implementation of the setup. The features for maintenance mode and multi-clients have been removed completely as discussed in the context of the Setup Revision. For more information about the new Setup please have a look into the detailed documentation of the setup in the file setup/README.md or take a look into the ILIAS installation instructions at docs/configuration/install.md.
• Migration of files
  • In addition to the new setup via CLI, since version 7 ILIAS also requires that so-called migrations are carried out after an update. With ILIAS 7, such a migration is, for example, that files are migrated from the file object into the new resource storage service. These migrations can already be started after the update in live mode. To do this, run# php setup/cli.php migratein the CLI for more information.

Known Issues

• none

Changed Behaviour

• …

Fixed Issues

Security Fixes

#36479: [Login, Auth & Registration] oidc susceptible to XSS attacks (ILIAS thanks Armin Stock from the SEC Consult Vulnerability Lab)
#36253: [Exercise] Information Disclosure in exercise submissions
#31647: [General] Missing RBAC check

The following issues reported in Mantis have been resolved:

#36232: [Accessibility / WCAG Issues] Label missing in Mail (mjansen)
#32504: [Accessibility / WCAG Issues] Auszeichnung Filterbereich (akill)
#32521: [Accessibility / WCAG Issues] Multicheckboxen „AN/CC/BCC“ sind nicht ausgezeichnet (mjansen)
#32505: [Accessibility / WCAG Issues] Filter anzeigen/ausblenden-Link, sollte ein Button sein (akill)
#32507: [Accessibility / WCAG Issues] Fehlender Alt-Text bei Grafik der Sortierrichtung in Tabellen (akill)
#31619: [Booking Tool] no notification mails from booking tool (akill)
#29143: [Booking Tool] Booking Tool (Fixed Schedule): Post Booking Information cannot be viewed again after a reservation. (akill)
#35819: [CSS / Templates] Customizing custom style css data strong cached (fschmid)
#36309: [Category and Repository] Repo object titles get cut off after 128 chars (akill)
#26610: [Chat] OnScreenChat : Neue Zeile im Inputfeld, ohne abzusenden (lscharmer)
#36814: [Content Page (Repository Object, not ILIAS Page Editor)] Permission denied when click a media object from a content page (mjansen)
#22328: [Course Management] Session View past sessions (smeyer)
#20687: [Course Management] Show all previous sessions Link is missing (smeyer)
#36615: [Course Management] Failed test: Lernplanungskurs mit relativen Daten kopieren (smeyer)
#31565: [Exercise] opening team log is very slow (akill)
#36757: [File] File Upload of a file with an extension in capital letters (e.g. „xxx.PNG“) causes a wrong ILIAS message, up/download works (fschmid)
#34975: [File] Apostrophe und anschließendem accent im Dateinamen wird beim Down/-Upload der Datei umbenannt (fschmid)
#36727: [File] Fehlermeldung bei Upload einer Datei mit Zeichenkette „zip“ im Dateinamen (fschmid)
#36747: [Forum] Moderator shown as „anonym“ if draft is saved (mjansen)
#34976: [ILIAS Page Editor] Resizing issues with videos in Test (akill)
#32288: [ILIAS Page Editor] Interactive image: Marker seems to have absolute position on page (akill)
#35638: [Item Groups] Item Groups lose position in a customized page, after export / import (akill)
#34657: [Language Handling] Updating an ILIAS 7.13 installation takes a long time in step ‚Install/Update languages en, de…‘, see 0033687 (kg)
#35810: [Learning Module ILIAS : Presentation] Closing content table leads to CSS-problem (akill)
#32716: [Staff] Certificate cannot be downloaded at Organization/Staff List (tfamula)
#28118: [Staff] Inactive users aren’t visible in ‘Staff’ views concerning courses (tfamula)
#36300: [Staff] MyStaff Certificates: Navigation does not work (tfamula)
#36301: [Staff] MyStaff Certificates: Orginisational Unit Filter not working, but shows all existing units (tfamula)
#30428: [Staff] Personal Starting Point „Staff“ is accessible although OrgaUnits is deactivated (tfamula)
#31001: [Survey] Fehler im CronJob „Benutzer an Teilnahme erinnern / Tutoren Ergebnisse zusenden“ (akill)
#36950: [Test & Assessment] Import an ordering question (skergomard)
#36619: [Test & Assessment] Exam view shows excessive whitespace (skergomard)
#36792: [Test & Assessment] Excel Export – Problem with multibyte-strings for worksheet titles because of php-substr (skergomard)
#36907: [Test & Assessment] ILIAS 7: Random Set of Question Selection is broken (maxbecker)
#36101: [Test & Assessment] add ordering question to a pool from a test will loose answers (skergomard)
#35995: [Test & Assessment] no Elements of an Ordering Question (vertical) via Questionpool (skergomard)
#29915: [Test & Assessment] Failed test: Test aus älterer ILIAS-Version importieren und Fragen in einen Fragenpool kopieren (skergomard)
#30518: [Test & Assessment] Anzeige von Rückmeldungen im Test fehlerhaft (ta-bugs)
#36885: [Test & Assessment] Error when creating test with random questions from pool(s) (skergomard)
#33910: [Test & Assessment] Copying Question Pool Test with Ordering Questions vertical –> Answers in OQ(v) are lost in copy (skergomard)
#36947: [User Tracking] Inhaltsseite crashed, wenn Lernfortschritt nach erstellen nicht deaktiviert und angeklickt wird. (smeyer)
#32789: [Wiki] Fehler bei nicht-eingeloggtem User bei Zugriff auf Wiki, wenn Seite Umlaute enthält (akill)
#22773: [Wiki] Wiki send notification for every change on one page (akill)
#24244: [¥ Object] Missing assignment of imported folder (akill)

Quelle: DOCU: Releases (ilias.de)