Download & Releases
8.13 (stable) 7.30 (stable)
General Information
Release 7.30 has been published on May 14, 2024
- Please read the ILIAS 7 feature page for information about new and abandoned features and changed behaviour of this version.
- You find information about first time installation of ILIAS 7 and updating here.
- Please also have a look at the Required Software for ILIAS 7 page.
If you use a customized skin/style, please change the skin settings for root user and default of installation to ‘delos‘ before upgrading to ILIAS 7. Otherwise you may not login any more due to templates changes in former versions.
The storing of files will be changed and improved with ILIAS 7. All files need to be migrated to the new structure. More information is available in the installation instruction.
ILIAS is free, open source software and published under the GNU General Public License (GPL), version 3.0 → Licence
Download
Important Changes
- ILIAS Page Editor
- With Release 7, the ILIAS page editor was fundamentally revised. As part of the page editor, the content style was also adjusted and redundant text and block formats removed. You can see the list of removed paragraphs here:
- When updating to ILIAS 7, please bear in mind that the changes in the content style will affect your existing content. To prevent this, you can export the content style before an update OR download the ILIAS 6 Default Content Style from the following link:
- Setup
- With ILIAS 7 the GUI for the Setup has been abandoned. Installing and updating ILIAS is now handled by a command line implementation of the setup. The features for maintenance mode and multi-clients have been removed completely as discussed in the context of the Setup Revision. For more information about the new Setup please have a look into the detailed documentation of the setup in the file
setup/README.mdor take a look into the ILIAS installation instructions atdocs/configuration/install.md.
- With ILIAS 7 the GUI for the Setup has been abandoned. Installing and updating ILIAS is now handled by a command line implementation of the setup. The features for maintenance mode and multi-clients have been removed completely as discussed in the context of the Setup Revision. For more information about the new Setup please have a look into the detailed documentation of the setup in the file
- Migration of files
- In addition to the new setup via CLI, since version 7 ILIAS also requires that so-called migrations are carried out after an update. With ILIAS 7, such a migration is, for example, that files are migrated from the file object into the new resource storage service. These migrations can already be started after the update in live mode. To do this, run
# php setup/cli.php migratein the CLI for more information.
- In addition to the new setup via CLI, since version 7 ILIAS also requires that so-called migrations are carried out after an update. With ILIAS 7, such a migration is, for example, that files are migrated from the file object into the new resource storage service. These migrations can already be started after the update in live mode. To do this, run
- Workflow Engine
- Due to low demand and security issues, we removed the workflow engine with 7.23 and 8.3
- OpenIDConnect
- We switched the implementation from the "Implicit Flow" (e.g. because of https://datatracker.ietf.org/doc/html/draft-ietf-oauth-browser-based-apps#name-attacks-on-the-implicit-flo) to the "Authorization Code Flow".
Known Issues
- none
Changed Behaviour
- …
Security Fixes
#41053: [File] Remote Code Execution via bypassing upload restrictions (CVE-2024-33529) (Daniel Schlecht (ERNW Enno Rey Netzwerke GmbH))
#41055: [RBAC] Roles: Fix XSS via import (CVE-2024-33526) (Daniel Schlecht (ERNW Enno Rey Netzwerke GmbH))
#41054: [User Service] User: Fix XSS via import (CVE-2024-33527) (Daniel Schlecht (ERNW Enno Rey Netzwerke GmbH))
#40957: [Course Management] Folder: XSS via import file (CVE-2024-33528) (Daniel Schlecht (ERNW Enno Rey Netzwerke GmbH))
#40956: [Course Management] Course: XSS via import file (CVE-2024-33528) (Daniel Schlecht (ERNW Enno Rey Netzwerke GmbH))
#40976: [Exercise] Exercise: XSS via import file (CVE-2024-33528) (Daniel Schlecht (ERNW Enno Rey Netzwerke GmbH))
#41340: [Background Tasks] Background Tasks: Prevent unauthenticated download (Ilja Lukin (Fachhochschule Dortmund))
#41080: [¥ Object] Fixed Escaping of Title on ObjectOwnershipManagementTable
#40995: [Test & Assessment] Fixed escaping of Title and Author in Test-InfoScreen
#40970: [Exercise] Exercise: XSS via import file (Ilja Lukin (Fachhochschule Dortmund))
#40990: [¥ Object] Fixed Escaping of Title and Description in Various Places
#40875: [Media Pools and Media Objects] Media Objects: XSS via import file (Ilja Lukin (Fachhochschule Dortmund))
#41056: [Organisational Units] OrgUnits: XSS via import file (Daniel Schlecht (ERNW Enno Rey Netzwerke GmbH))
#41153: [ILIAS Page Editor] XSS via import file
#41055: [RBAC] Roles: Fix XSS via import (CVE-2024-33526) (Daniel Schlecht (ERNW Enno Rey Netzwerke GmbH))
#41054: [User Service] User: Fix XSS via import (CVE-2024-33527) (Daniel Schlecht (ERNW Enno Rey Netzwerke GmbH))
#40957: [Course Management] Folder: XSS via import file (CVE-2024-33528) (Daniel Schlecht (ERNW Enno Rey Netzwerke GmbH))
#40956: [Course Management] Course: XSS via import file (CVE-2024-33528) (Daniel Schlecht (ERNW Enno Rey Netzwerke GmbH))
#40976: [Exercise] Exercise: XSS via import file (CVE-2024-33528) (Daniel Schlecht (ERNW Enno Rey Netzwerke GmbH))
#41340: [Background Tasks] Background Tasks: Prevent unauthenticated download (Ilja Lukin (Fachhochschule Dortmund))
#41080: [¥ Object] Fixed Escaping of Title on ObjectOwnershipManagementTable
#40995: [Test & Assessment] Fixed escaping of Title and Author in Test-InfoScreen
#40970: [Exercise] Exercise: XSS via import file (Ilja Lukin (Fachhochschule Dortmund))
#40990: [¥ Object] Fixed Escaping of Title and Description in Various Places
#40875: [Media Pools and Media Objects] Media Objects: XSS via import file (Ilja Lukin (Fachhochschule Dortmund))
#41056: [Organisational Units] OrgUnits: XSS via import file (Daniel Schlecht (ERNW Enno Rey Netzwerke GmbH))
#41153: [ILIAS Page Editor] XSS via import file
Fixed Issues
The following issues reported in Mantis have been resolved:
#38394: [Accessibility / WCAG Issues] TA Page Issues (skergomard)
#26662: [Calendar] No more ICS import for course calendars – intentional or bug? (smeyer)
#40944: [Calendar] Consultation Hours not working (smeyer)
#41082: [Calendar] Klick auf Sprechstunden führt zum Errorcode (smeyer)
#41122: [Category and Repository] Recommended content filtered by favorites, even if favorites are deactivated (akill)
#40338: [Exercise] Remaining Working Time Countdown is not resetted if user is deleted (akill)
#31997: [Language Handling] Text missing (-cont_double_click_to_delete-) (mkunkel)
#32311: [Language Handling] Streamline spelling: "Internal and external Link" (mkunkel)
#33379: [Language Handling] inconsistency in german language variables: Zwischenablage - Medien-Clipboard (mkunkel)
#40932: [Language Handling] Different Handling of ' and " of accessing and restriction (mkunkel)
#41026: [Learning Module ILIAS : Assessment Questions] Aufrufen der Registerkarte "Gesperrte Benutzer" führt zum Absturz (skergomard)
#41118: [Login, Auth & Registration] Attribute mapping of salutation does not work with Shibboleth authentication (fschmid)
#40946: [Metadata + ADT] Keywords get lost when exporting ILIAS LM (tschmitz)
#22341: [PDF] PhantomJS does not render SVG gradients (gvollbach)
#41148: [Personal Profile] Personal Starting Point - Object with nonexistent ID leads to error (skergomard)
#29750: [Session (Course & Group)] Failed test: Sitzung importieren (tschmitz)
#37759: [Test & Assessment] Finish Open Passes returns Exception : Object not found (maxbecker)
#39808: [Test & Assessment] Failed test: Formelfrage erstellen (Speichern durch Enter-Taste) (skergomard)
#40658: [Test & Assessment] Setting for 'Mode of answer specific feedback' of Kprim question is reset upon import (skergomard)
#40789: [Test & Assessment] Ordering Question (vertical): Editing complete question and saving in incomplete state deletes answer pictures (skergomard)
#40833: [Test & Assessment] Question pools can neither be created nor accessed (skergomard)
#40870: [Test & Assessment] More constructur signature issues (skergomard)
#40901: [Test & Assessment] Multiple errors because ilAssQuestionList is constructed with a missing param (refinery ) (skergomard)
#40860: [User Service] Unaccessible starting page leads to endless redirect (skergomard)
#41180: [User Service] saving user data leads to an error under certain circumstances (skergomard)
#41297: [User Service] Neuer benutzer anlegen uber benutzer verwaltung funktionier nicht (skergomard)
#40572: [WebDAV] Moving Files via WebDAV results in broken files (skergomard)
#26662: [Calendar] No more ICS import for course calendars – intentional or bug? (smeyer)
#40944: [Calendar] Consultation Hours not working (smeyer)
#41082: [Calendar] Klick auf Sprechstunden führt zum Errorcode (smeyer)
#41122: [Category and Repository] Recommended content filtered by favorites, even if favorites are deactivated (akill)
#40338: [Exercise] Remaining Working Time Countdown is not resetted if user is deleted (akill)
#31997: [Language Handling] Text missing (-cont_double_click_to_delete-) (mkunkel)
#32311: [Language Handling] Streamline spelling: "Internal and external Link" (mkunkel)
#33379: [Language Handling] inconsistency in german language variables: Zwischenablage - Medien-Clipboard (mkunkel)
#40932: [Language Handling] Different Handling of ' and " of accessing and restriction (mkunkel)
#41026: [Learning Module ILIAS : Assessment Questions] Aufrufen der Registerkarte "Gesperrte Benutzer" führt zum Absturz (skergomard)
#41118: [Login, Auth & Registration] Attribute mapping of salutation does not work with Shibboleth authentication (fschmid)
#40946: [Metadata + ADT] Keywords get lost when exporting ILIAS LM (tschmitz)
#22341: [PDF] PhantomJS does not render SVG gradients (gvollbach)
#41148: [Personal Profile] Personal Starting Point - Object with nonexistent ID leads to error (skergomard)
#29750: [Session (Course & Group)] Failed test: Sitzung importieren (tschmitz)
#37759: [Test & Assessment] Finish Open Passes returns Exception : Object not found (maxbecker)
#39808: [Test & Assessment] Failed test: Formelfrage erstellen (Speichern durch Enter-Taste) (skergomard)
#40658: [Test & Assessment] Setting for 'Mode of answer specific feedback' of Kprim question is reset upon import (skergomard)
#40789: [Test & Assessment] Ordering Question (vertical): Editing complete question and saving in incomplete state deletes answer pictures (skergomard)
#40833: [Test & Assessment] Question pools can neither be created nor accessed (skergomard)
#40870: [Test & Assessment] More constructur signature issues (skergomard)
#40901: [Test & Assessment] Multiple errors because ilAssQuestionList is constructed with a missing param (refinery ) (skergomard)
#40860: [User Service] Unaccessible starting page leads to endless redirect (skergomard)
#41180: [User Service] saving user data leads to an error under certain circumstances (skergomard)
#41297: [User Service] Neuer benutzer anlegen uber benutzer verwaltung funktionier nicht (skergomard)
#40572: [WebDAV] Moving Files via WebDAV results in broken files (skergomard)