Mahara Community

Forums | Mahara Community

Security Announcements /
Insecure permissions in Elasticsearch 7 before Mahara 24.04.10

This topic is closed. Only moderators and the group administrators can post new replies.
Doris ⚡'s profile picture
Doris ⚡
Posts: 108

01 May 2025, 17:01

Hello,

The latest release for Mahara 24.04 contains a security fix. Whether your site is affected depends whether you have Elasticsearch 7 enabled on your site. We recommend updating your Mahara site as soon as possible.

A list of issues fixed is available to subscribers on the 'Releases' page.

As a subscriber, you have two options:

  • Git: Pull the latest changes from the 24.04 Git branch .

  • Downloadable package: Use the 24.04.10 release files listed under 'Mahara download files' . (Do not download files labelled 'source code'. They don’t include the compiled code, libraries, or stylesheets needed to run Mahara)

For detailed instructions, visit our update guide in the wiki.

Thank you for keeping your Mahara site secure,

The Mahara team at Catalyst

1 result