Download & Releases

Functions

9.1 (stable)

General Information

Release 9.1 has been published on May 17, 2024
  • Please read the ILIAS 9 feature page for information about new and abandoned features and changed behaviour of this version.
  • You find information about first time installation of ILIAS 9 and updating here.
  • Please also have a look at the Required Software for ILIAS 9 page.
ILIAS is free, open source software and published under the GNU General Public License (GPL), version 3.0  →  Licence

Download

ILIAS-9.1.zip
Download (github.com)
151 MB, 2024-05-17
md5: 0f95bfb620df4254ce147fffc6fe33da
ILIAS-9.1.tar.gz
Download (github.com)
136 MB, 2024-05-17
md5: 4f66f7e67dea8452d5f8af7a1fe4548f

Important Changes

  • JavaScript Dependencies: Removal of 'node_modules' folder from Git repository
    • The 'npm' dependencies and thus the 'node_modules' folder in the ILIAS root directory was removed from the ILIAS codebase.

      All 'npm' dependencies will still be automatically added to the release builds (linked on the official ILIAS release pages) on GitHub.

      With this change 'npm' will become a requirement for ILIAS installations based on Git branches/tags. To install the 'npm' dependencies on such installations, you'll have to execute:

      npm clean-install --omit=dev --ignore-scripts

      The --omit=dev flag can be ignored for development installations. 
  • Chat Server: Removal of 'node_modules' folder from Git repository
    • The 'npm' dependencies and thus the 'node_modules' folder of 'Modules/Chatroom/chat' was removed from the ILIAS codebase in Git with the integration of PR 5128.

      All 'npm' dependencies will still be automatically added to the release builds (linked on the official ILIAS release pages) on GitHub.

      With this change 'npm' will become a requirement for ILIAS installations based on Git branches/tags. To install the 'npm' dependencies on such installations, you'll have to execute:

      npm clean-install --omit=dev --ignore-scripts

      The --omit=dev flag can be ignored for development installations. 
  • Cron Jobs:
  • PDF Generation:
    • wkhtmltopdf has been removed from the code base. 
  • Authentication/SAML:

Known Issues

  • none

Changed Behaviour

Security Fixes

#41053: [File] Remote Code Execution via bypassing upload restrictions (CVE-2024-33529) (Daniel Schlecht (ERNW Enno Rey Netzwerke GmbH))
#41340: [Background Tasks] Background Tasks: Prevent unauthenticated download (Ilja Lukin (Fachhochschule Dortmund))
#41056: [Organisational Units] OrgUnits: XSS via import file (CVE-2024-33525) (Daniel Schlecht (ERNW Enno Rey Netzwerke GmbH))
#41368: [Test & Assessment] Test Question Pool: Remote Code Execution (RCE) via import function (Rene Rehme (rehme.infosec))

Fixed Issues

The following issues reported in Mantis have been resolved:
#37051: [Course Management] Failed test: Benachrichtigung über zu geringe Teilnehmerzahl auslösen (Buchungsfrist) (tschmitz)
#41333: [File] File won't be uploaded (fschmid)
#39368: [ILIAS Page Editor] Object block IDs are displayed to a user with Read permission (akill)
#39618: [Item Groups] Empty item group that is embedded in page editor is not rendered but displayed as [item-group-####] (akill)
#41292: [Learning Module ILIAS : Editor] Change Comments in ILIAS LM : "explode(): Passing null to parameter #2 ($string) of type string is deprecated" (akill)
#41319: [Personal Profile] Nutzerbildes per Kamera abspeichern (skergomard)
#41341: [Taxonomies] Edit title of a node => Save => Error2 (akill)
#38857: [Test & Assessment] Test: Prüfungsansicht auf kleinerer Monitoren (nhaagen)
#41317: [Test & Assessment] Style for Ordering Questions broken (akill)
#41361: [User Service] User/XML Import: PHP type error when UDF values are read from database and NULL, and these fields are not updated by the XML (skergomard)