10 December 2025, 10:15

Hello everyone,

We'd like to announce Mahara 25.04.3, a security maintenance release. We recommend that every site is updated to mitigate the security issues that we have found, especially when you use the specific functionalities that exhibit the vulnerabilities.

A list of issues fixed is available to subscribers on the release page for 25.04.3. The security issues are prefixed 'Security issue'.

As a subscriber, you have two options:

• Git: Pull the latest changes from the 25.04 Git branch.

• Downloadable package: Use the 25.04.3 release files listed under 'Mahara download files'. Do not download files labelled 'source code'. They don’t include the compiled code, libraries, or stylesheets needed to run Mahara.

For detailed instructions, visit our update guide in the wiki.

Thank you

The Mahara team at Catalyst