Moodle 4.1.20

Unsupported Moodle Version

This version of Moodle is no longer supported and will not receive fixes for security risks.
You are encouraged to upgrade to a supported version of Moodle.

Release date: 11 August 2025

Here is the full list of fixed issues in 4.1.20.

General fixes and improvements

• MDL-86049 - Purge cache scripts too fragile
• MDL-86176 - Users are getting "Invalid request" when sending their badges to Canvas Credentials
• MDL-85316 - Update AWS Aurora MySQL version support

Security fixes

• MSA-25-0037 - Unnecessary CSRF token (sesskey) requirement in some LMS BigBlueButton playback functionality could leak user's sesskey to external BBB service
• MSA-25-0038 - Course Logs report did not respect Separate Groups mode
• MSA-25-0039 - Feedback activity results did not always respect Separate Groups mode
• MSA-25-0040 - Capabilities and callback that control access to profiles not working in some web services