Dear all,
We recently became aware of a security risk, which we have now resolved and the fix is available in Moodle 4.0.3, 3.11.9 and 3.9.16. These minor versions were released today in order to allow sites to be protected as soon as possible.
In line with our responsible disclosure policy, further details of any security fixes will be provided a week from now in the Security fixes section of the release notes and at https://moodle.org/security.
The upcoming 12 September minor release will continue to go ahead as scheduled.
As usual, you can find the releases via our download channels (https://download.moodle.org or Git).
We strongly recommend you upgrade your Moodle sites as soon as possible, to benefit from the security fixes, as well as other general bug fixes.
The release notes for each version can be found on the following pages:
Please see the releases page for more details.
| Version | Release status | Initial release | General support ends | Security support ends |
|---|---|---|---|---|
| 3.9 (LTS) | Current security | 15 June 2020 | 10 May 2021 | 13 November 2023 (ext 6M) |
| 3.11 | Current stable | 17 May 2021 | 14 Nov 2022 (ext 6M) | 13 Nov 2023 (ext 12M) |
| 4.0 | Current stable | 19 April 2022 | May 2023 | November 2023 |
| 4.1 (LTS) | Future stable | November 2022 | November 2023 | November 2025 |