Today's releases of Totara versions 1.0.41, 1.1.26 and 2.6.2 all contain a fix for a potential security vulnerability. We recommend upgrading to these releases.

We would like to take this opportunity to remind all users on the Totara 1.0 series that 1.0 reaches end of support in October 2014, so if you have not yet begun planning upgrading to a more recent version you really should consider doing so as soon as possible. Totara 1.1 will remain supported until August 2015.

On the 2.6 release we are aware that many partners are increasingly aware of Accessibility requirements (Section 508/WCAG) especially in governmental and large corporate installations. We have an ongoing project currently underway to significantly improve Accessibility in Totara 2.7, and some of those improvements will be finding their way into 2.6 point releases - this release contains the first batch of those.

Here are the changelogs:

Release 1.0.41 (3rd June 2014):
==================================================

Security fixes:
    T-12441    Fixed potential XSS vulnerability in quicklinks block

Bug fixes:
    T-12470    Fix backup of user and completion data in automated backups 

Release 1.1.26 (3rd June 2014):
==================================================

Security fixes:
    T-12441    Fixed potential XSS vulnerability in quicklinks block

Bug fixes:
    T-12159    Fix link to Release Notes forum on Notifications page
    T-11799    Fix completion logic error when using grade and status in SCORM activities

Release 2.6.2 (3rd June 2014):
==================================================

Security Fixes:
    T-12441    Fixed potential XSS vulnerability in quicklinks block

Improvements:
    T-11961    Added ability to assign Audience members based on position & organisation types
    T-12326    Extended execution time on completion reaggregation script
    T-12483    Added new alternate name fields when importing users with totara_sync
    T-12364    Improved contrast on Hierarchy selected items to meet Accessibility guidelines

Bug Fixes:
    T-12467    Fixed display of SCORM packages on secure HTTPS sites
    T-12463    Fixed critical SCORM error where subsequent attempts after an initial failed attempt are not recorded
    T-12471    Fixed display of grades in Course Completion Report for grades uploaded by completion import tool
    T-12469    Fixed sending of notifications when a Facetoface booking date/time is changed
    T-12277    Fixed Face-to-face reminders still being sent to users who have cancelled from a session
    T-12121    Fixed transaction error when quiz completion triggers sending of messages
    T-12307    Fixed days not being translated in weekly scheduled reports
    T-12327    Fixed issue with dialog boxes being too wide for some screens
    T-12179    Fixed choosing of position on email self-registration when Javascript is disabled
    T-12263    Fixed Javascript for type filter dropdown in Audience Visibility
    T-12451    Fixed sort order of dependent courses in Course Completion settings
    T-12461    Fixed display of move and settings admin options for Quicklinks block
    T-12184    Fixed capitalisation of Program and Certification columns in Course Catalog
    T-12455    Fixed changing of visibility of a Certification on Audience Visible Learning tab
    T-12368    Fixed hidden labels in Hierarchy search dialog
    T-12371    Fixed alt attribute on course icons
    T-12362    Fixed alt and title attributes on competency icons
    T-12376    Fixed labels when creating a scheduled report in ReportBuilder
    T-12379    Fixed page title when deleting scheduled report
    T-12349    Fixed page title when deleting a Learning Plan
    T-12348    Fixed table column header on list of Learning Plans
    T-12237    Fixed HTML table in Alerts information popup dialog
    T-12473    Removed redundant get_totara_menu function in totara_core
    T-12478    Removed blink tag from element library 

(Edited by Alastair Munro (Core Developer) - original submission Tuesday, 3 June 2014, 6:14 AM)