This week we have releases of both the 1.0 and 1.1 versions of Totara, which both include one security fix.

Here's the 1.0.36 changelog:

Release 1.0.36 (2 May 2012):
==================================================

Security fixes:
    T-9666      XSS vulnerability in forum posts for IE users                                           Updated to clean via Javascript too

Improvements:
    T-8485      Additions to Chinese, Dutch, Finnish, Hebrew and Hungarian language packs

Bug fixes:
    T-9511      Manually chosen course backup file names now go through clean_filename()                This means filenames with spaces now work
    T-9612      Fix bug in Reportbuilder to allow users to view hidden reports
    T-9599      Update Calendar bugfix in v1.0.32 to use Moodle upstream version
    MDL-32388   Fix SCORM pop-ups when using Google Chrome
    T-9692      Bug in sort order calculation for new hierarchy items

And here's the 1.1.15 changelog:

Release 1.1.15 (2 May 2012):
==================================================

Security fixes:
    T-9666      XSS vulnerability in forum posts for IE users                                   Updated to clean via Javascript too

Improvements:
    T-8485      Additions to Chinese, Dutch, Finnish, Hebrew and Hungarian language packs
    T-9629      Add detection to Tasks in Dashboard when approving Facetoface sessions
                that are already full
    T-9554      Position assignment records with a valid time from but not valid
                time to can now be saved
    T-9337      Dialog for finding related competencies no longer shows the
                current competency

Bug fixes:
    T-9511      Manually chosen course backup file names now go through clean_filename()        This means filenames with spaces now work
    T-9599      Update Calendar bugfix in v1.1.11 to use Moodle upstream version
    T-9685      Fix PHP Notice when deleting a custom field
    T-9649      Added support for HTTP_IF_MODIFIED_SINCE to files.php to avoid resending
                files cached by the browser
    T-9690      Fix Reportbuilder Cron failure with error 'invalidurl' on Windows servers
    MDL-32388   Fix SCORM pop-ups when using Google Chrome
    T-9678      Fix permissions checks when generating count for course categories
    T-9677      Fix permissons on program editing pages
    T-9694      Fix issue with empty attempts in IE when popups blocked

Simon