Download & Releases

9.15 (stable)

General Information

Release 9.15 has been published on Novermber 4, 2025

Please read the ILIAS 9 feature page for information about new and abandoned features and changed behaviour of this version.
You find information about first time installation of ILIAS 9 and updating here.
Please also have a look at the Required Software for ILIAS 9 page.

ILIAS is free, open source software and published under the GNU General Public License (GPL), version 3.0 → Licence

Download

ILIAS-9.15.zip
Download (github.com)
156 MB, 2025-11-04
md5: bf458b2914f56a4c4eb3e8abbd424932

ILIAS-9.15.tar.gz
Download (github.com)
141 MB, 2025-11-04
md5: fa15184f73a1b5018f8ab570166b64d1

Important Changes

System Styles: Custom system styles from 8 and earlier do no longer work
- With ILIAS 9 the SCSS has been restructered according to the ITCSS structure suggested in the SASS guidelines. In addition, the depencency to less from Bootstrap has mostly been removed. However, the change from less to SCSS and the abandonment from Bootstrap means, that System Styles from 8 and lower are NOT compatible with ILIAS 9. They cannot be imported, be used, or compiled.
- However, note, that most of the css should still work. Also less and scss are not that far appart. Best read through our SCSS Coding Guidelines to get started.
JavaScript Dependencies: Removal of 'node_modules' folder from Git repository
- The 'npm' dependencies and thus the 'node_modules' folder in the ILIAS root directory were removed from the ILIAS codebase.
- All 'npm' dependencies will still be automatically added to the release builds (linked on the official ILIAS release pages) on GitHub.
- With this change 'npm' will become a requirement for ILIAS installations based on Git branches/tags. To install the 'npm' dependencies on such installations, you'll have to execute:
  
  npm clean-install --omit=dev --ignore-scripts
- The --omit=dev flag can be ignored for development installations.
Chat Server: Removal of 'node_modules' folder from Git repository
- The 'npm' dependencies and thus the 'node_modules' folder of 'Modules/Chatroom/chat' were removed from the ILIAS codebase in Git with the integration of PR 5128.
- All 'npm' dependencies will still be automatically added to the release builds (linked on the official ILIAS release pages) on GitHub.
- With this change 'npm' will become a requirement for ILIAS installations based on Git branches/tags. To install the 'npm' dependencies on such installations, you'll have to execute:
  
  npm clean-install --omit=dev --ignore-scripts
  
  The --omit=dev flag can be ignored for development installations.
Cron Jobs:
- With ILIAS ≧ 9.x and the application of PR 5720 the password must be omitted when executing the ILIAS cron CLI script, see also Installation and Maintenance: Cron Jobs.
PDF Generation:
- wkhtmltopdf has been removed from the code base.
Authentication/SAML:
- Due to an major release upgrade of the underlying 3rd party library, existing configuration files for SimpleSAMLphp have to be adopted according to the documention.
  - See: https://github.com/ILIAS-eLearning/ILIAS/tree/release_9/Services/Saml#config-changes-in-ilias-9 / https://simplesamlphp.org/docs/stable/simplesamlphp-upgrade-notes-2.0.html
- Furthermore, existing federations between ILIAS and SAML IPDs have to re-established due to necessary changes in the metadata XML file.
- When installing the composer dependencies on an existing installation, it might occur that you receive an error caused by the simplesamlphp/simplesamlphp library. In this case, simply remove the vendor folder once by executing: rm -rf ./libs/composer/vendor . Afterwards, install the composer dependencies as usual.
MathJax:
- Please check if you configured a polyfill url at Administration » Third Party Software » MathJax. This is not needed by modern browsers and IE 11 is no longer supported by ILIAS at all. You should NOT use the polyfill.io library any longer, see https://sansec.io/research/polyfill-supply-chain-attack for details.

Known Issues

none

Changed Behaviour

Test & Assessment: Import of Tests with Results: It is no longer possible to deselect questions during the import.
Test & Assessment: Filter "Active Users only" / "Inactive Users only" in Manual Scoring is removed.
Test & Assessment: "Auto-saved" or intermediate answers are not saved anymore as authorised answers when the set test duration limit ends.
Test & Assessment: Zero will no longer be accepted as value for points in File Upload Questions.
Test & Assessnment: The redirect after finishing the test does only work if the participant does not have access to his test results. The info for this setting stated this, but until this bug fix with 44025, the redirect always "wins." 44025 was fixed with ILIAS 9.8, but many institutions are upgrading now to ILIAS 9. So we decided to document this bug fix nevertheless within Changed behavior.
Test & Assessment: Redirect: Starting with Version 9.15, we introduce a separate option to redirect to the logout screen, as redirecting to https://instance.url/logout.php does not work anymore since ILIAS 9.13.
…

Security Fixes

The following security issues have been fixed. For more information about these vulnerabilities, see our 9.15 security blog post.

#45897: [Media Pools and Media Objects] MediaPool: Open/Unvalidated Redirect (Michael Jansen (Databay AG))
#45899: [¥ UI Components / KS] ilUIPluginRouterGUI: Unauthorized function calls (Ilja Lukin (Fachhochschule Dortmund))
#45898: [Wiki] Wiki: Unauthorized Access to LTI Settings (Ilja Lukin (Fachhochschule Dortmund))
#45938: [General] Query UI: Known vulnerability in version 1.13.1 (XSS)
#45910: [LTI] fix: Verification of LTI Result Service Calls
#45975: [SOAP] Unauthorized function calls (Matthias Stock (Hochschule Bielefeld))
#45738: [Certificate] Unauthenticated Remote Code Execution (Florian Wilkens (SRLabs Researchers))

Fixed Issues

The following issues reported in Mantis have been resolved:

#32511: [Accessibility / WCAG Issues] Inaktive Buttons in SCORM Lernmodule erhalten den Tastaturfokus (EZ) (qualitus.hartwig)
#45825: [Blog] Error when trying to view image in fullscreen as anonymous (akill)
#45827: [Blog] Blog: Deleting last posting of a month (with available postings in other months) results in PHP error (akill)
#45457: [Booking Pool] Kalender nicht zu öffnen "… ::getForId(): Return value must be of type array, null returned" (tjoussen)
#45946: [Certificate] Outdated information about Java server (mkunkel)
#41538: [Course Management] Einsicht in Zertifikate von Employees, obwohl diese ausgeblendet sein sollten (tschmitz)
#45548: [CSS / Templates] Item Group header with disabled tiltle only shown half since ILIAS 9 (catenglaender)
#45769: [Data Collection] Verlinkung von URLs in Einzelansicht funktioniert nicht (iszmais)
#45851: [Data Collection] Notification Mail shows 1/0 info for icon checked / unchecked (iszmais)
#45852: [Data Collection] Date entry from a referenced table shows strange in notification (oliversamoila)
#45971: [Data Collection] Missing notifications in Data Collection (iszmais)
#45058: [Didactic Templates] Error when importing an didactic template I just exported from ILIAS before (smeyer)
#45694: [Employee Talk] Pagination and Sorting-Function (tschmitz)
#45931: [Employee Talk] Text is Hardcoded - Language Variable Should be Used Instead (tschmitz)
#45251: [File] Several things get lost while copying a file object (fschmid)
#45736: [File] Replacing all versions of PDFs does not update download link in repository list (fschmid)
#45894: [Forum] Notification-Settings have to be saved twice to be applied (mjansen)
#45576: [ILIAS Page Editor] Error "Undefined property: DOMElement::$myDOMNode" when editing Instance Link Areas of a Media Object (akill)
#43820: [Item Groups] Faulty import to item group (tjoussen)
#45594: [Item Groups] In the page editor, item groups are sorted according to creation date or id (tjoussen)
#45977: [Language Handling] Language: Trying to access array offset on value of type null - when installing Custom Language File (kg)
#40842: [Learning Module SCORM 1.2] Argument 1 passed to ilSCORMObject::setTitle() must be of the type string, null given (qualitus.dahme)
#45824: [Learning Module SCORM 1.2] TypeError: ilUtil::yn2tf(): Argument #1 ($a_yn) must be of type string, null given (qualitus.hartwig)
#40823: [Learning Module SCORM 2004] Upload-Fehler bei Scormmodul in ILIAS 8 --> Resourceid zu lang / Keine Probleme bei ILIAS 7 (qualitus.hartwig)
#45858: [Learning Module SCORM 2004] 1406 Data too long for column 'c_timestamp' at row 1 (qualitus.hartwig)
#45839: [Login, Auth & Registration] self-registration with email confirmation does not work (skergomard)
#45982: [Mail] Mails without Message Content doesn't get delivered (if not HTML frame is used) (mjansen)
#45714: [Main Menu] MainBar: "vsiible" operation not checked when checking visiibility of MainBar items of type "ilMMTypeHandlerRepositoryLink" (fschmid)
#45605: [Mediacast] Lernfortschritt im Mediacast wird nicht übernommen. (akill)
#45740: [News] ilCtrl cannot find path for `ilNewsTimelineGUI` from `ilRepositoryGUI` in Group tabs (ILIAS 9) (tjoussen)
#45610: [Poll] Poll results are not anonymous even if “Without Names / Anonymous” mode is chosen (tschmitz)
#21973: [Search] Advanced Search: Search in Metadata > External Link (tschmitz)
#45932: [Search] Possible race condition in search_command_queue (smeyer)
#46027: [Staff] Setting "Access Control by Organisation Unit Positions" not reflected in "Course Memberships" listing (tschmitz)
#23511: [Test & Assessment] Test module's file locking should check flock's return value (skergomard)
#29648: [Test & Assessment] Units for questions are not included in pool export (tjoussen)
#41547: [Test & Assessment] Kprim: Mode for 'Editor for Answers' (single / multi line) cannot be changed for incomplete question (tjoussen)
#44956: [Test & Assessment] Images are not dislplayed in introductory text after upgrade from 8.19 to 9.8 (skergomard)
#45150: [Test & Assessment] Available actions during text execution not clearly indicated (tjoussen)
#45439: [Test & Assessment] Orphaned Language Variable - tst_instant_feedback_forced (tjoussen)
#45764: [Test & Assessment] Recalling URL for 'Settings' page after saving settings leads to crash (InvalidArgumentException) (tjoussen)
#45809: [Test & Assessment] Small subtab issues with the 'Certificate' settings of a test (ta-bugs)
#45837: [Test & Assessment] Error caused by certain grading system short form entries of test (tjoussen)
#45855: [Test & Assessment] Automatischer Logout nach Abschluss eines Tests (ta-bugs)
#45863: [Test & Assessment] Persmission "Visible" and "Read" sufficient to remove questions from pool (skergomard)
#46016: [Test & Assessment] Locking Path Does Not Include Participant ID and Can Lead to Blocked Servers (skergomard)
#45961: [User Service] Wrong Permission check in User Administration (skergomard)
#45981: [User Service] wording of failure message in Role Assignment (skergomard)
#45696: [¥ Database] ilDBPdoManager->addForeignKey -> undefined class "ForeignKeyConstraints" (fschmid)
#45911: [¥ Object] Undefined array key "timing_type" triggered by search (skergomard)
#45723: [¥ UI Components / KS] Multiselect in Filter shows wrong values (rklees)