Download & Releases
8.19 (stable)
General Information
ILIAS version 8 has reached the end of full maintenance! There will be no more bugfix releases. From now on, all releases for 8 will only contain security fixes.
Release 8.19 has been published on April 1, 2025
- Please read the ILIAS 8 feature page for information about new and abandoned features and changed behaviour of this version.
- You find information about first time installation of ILIAS 8 and updating here.
- Please also have a look at the Required Software for ILIAS 8 page.
ILIAS is free, open source software and published under the GNU General Public License (GPL).
Download
ILIAS-8.19.zip
Download (github.com)218 MB, 2025-04-01md5: 40d0c862e7e1f5e5461c3a77f464d839
ILIAS-8.19.tar.gz
Download (github.com)195 MB, 2025-04-01md5: a789400fd5861b98734d6c2aa04ef8e8
Important Changes
- Services/PDFGeneration
- Since the development for wkhtmltopdf has stopped and the consumer for the service are regressive, the jour Fixe decided to deprecate the PDFGeneration Service with ILIAS 8 and to remove this service with ILIAS 9
- https://docu.ilias.de/goto_docu_wiki_wpage_7795_1357.html
- Plugins
- Plugins which provide a configuration screen must add an explicit `ilCtrl` directive in the PHPDoc comments of the `il*ConfigGUI` class.
- Example:
- /**
* @ilCtrl_IsCalledBy ilMyPluginConfigGUI: ilObjComponentSettingsGUI
*/
class ilMyPluginConfigGUI extends ilPluginConfigGUI
{
// Code ...
}
- /**
- Example:
- Many public methods of class `ilPluginAdmin` (often considered as public API of the component service in ILIAS by developers) were removed. The class itself is marked as deprecated and will be removed in future ILIAS releases. Plugin developers should use `ilComponentRepository` and `ilComponentFactory` instead. Implementations of these interfaces can be retrieved from the dependency injection container ($DIC["component.repository"] and $DIC["component.factory"]).
- Please always execute a `composer du` command if you put a new plugin into the plugin directories in your filesystem or if you applied any changes to your `plugin.php`. Otherwise the plugin will not be listed in the global ILIAS plugin administration or may cause other problems.
- Plugins which provide a configuration screen must add an explicit `ilCtrl` directive in the PHPDoc comments of the `il*ConfigGUI` class.
- Workflow Engine
- Due to low demand and security issues, we removed the workflow engine with 7.23 and 8.3
- OpenIDConnect
- We switched the implementation from the "Implicit Flow" (e.g. because of https://datatracker.ietf.org/doc/html/draft-ietf-oauth-browser-based-apps#name-attacks-on-the-implicit-flo) to the "Authorization Code Flow".
- SAML
- MathJax
- Please check if you configured a polyfill url at Administration > Third Party Software > MathJax. This is not needed by modern browsers and IE 11 is no longer supported by ILIAS at all. You should NOT use the polyfill.io library any longer, see https://sansec.io/research/polyfill-supply-chain-attack for details.
Known Issues
- none
Changed Behaviour
- T&A: Import of Tests with Results: IIt's no longer possible to deselect questions during the import.
- See changes concerning uploading ZIPs and unzipping here: Drag&Drop Files in Container Objects
- The visibility of the user administration has been adjusted. For a read-only access, the permission "Read" and no longer "Read Access to User Accounts" is used. Mantis 37269.
- T&A: "Auto-saved" or intermediate answers are not saved anymore as authorized answers when the set test duration limit ends.
- T&A: Zero will not be accepted any longer as value for points in File Upload Questions.
Security Fixes
The following security issues have been fixed. For more information about these vulnerabilities, see our 8.19 security blog post.
#44255: [Bibliographic List Item] Bibliographic: Missing input validation (Ilja Lukin (Fachhochschule Dortmund))
#44254: [¥ Database] ActiveRecord: Missing escaping (Ilja Lukin (Fachhochschule Dortmund))
#44737: [¥ Object] Added Missing RBAC Check in TranslationsGUI
#44342: [Learning Sequence] LearningSequence: Unauthorized access (Ilja Lukin (Fachhochschule Dortmund))
#44438: [Test & Assessment] Test: Missing RBAC checks (Michael Jansen (Databay AG))
#44441: [Test & Assessment] XSS in Question Titles (Martin-Luther-Universität Halle-Wittenberg)
#40995: [Test & Assessment] Fixed escaping of Title and Author in Tile-View of Objects
#44199: [Test & Assessment] XSS hidden input escaping