04 March 2020, 19:01

Hello Mahara community,

We have made available Mahara minor point updates for all supported versions of Mahara, i.e. 18.10, 19.04, and 19.10. These updates include fixes for security vulnerabilities relating to:

• Information disclosure in Elasticsearch results
• Information disclosure on the 'Edit access' screen
• Third-party library SimpleSAMLPHP

You can get the latest releases from our Git repository. You can also download them from Launchpad:

• 19.10.2
• 19.04.4
• 18.10.5

We recommend you update your instance of Mahara to the latest minor point release of the series of Mahara you are using, or if you are on an unsupported version of Mahara, update to a supported one.

Mahara 18.10 will be supported until the release of Mahara 20.04.0 in the second half of April. Mahara 19.04 will be supported until October 2020, and Mahara 19.10 will be supported until April 2021.

Thank you

Kristina