Totara Release Notes

Emergency Release of 2.4.19.1, 2.5.12.1 and 2.6.0.1

Security Releases for Totara 2.2.39, 2.4.32, 2.5.29, 2.6.22 and 2.7.5 released 21st July 2015
Emergency release of 2.7.5.1, 2.6.22.1, and 2.5.29.1 - Released 29th July 2015

Due to a recently discovered bug that can lead to data-loss, we are putting out emergency releases for Totara versions 2.4, 2.5 and 2.6 today.

Affected versions:

2.4.18

2.4.19

2.5.10

2.5.11

2.5.12

2.6.0

If you do not use course completion at all you will not be affected.

Bug description:

Due to an coding error, instead of deleting course completion criteria data for a single course, all course completion criteria data for all courses is deleted.

This can be triggered by:

* Unlocking or editing course completion on an existing course

* Editing course completion criteria on a new course

* When course completion data is archived for a course (either manually or as part of a certification renewal)

* Resetting a course

Mitigation steps:

You should upgrade to a patched version as soon as possible.

If you are unable to upgrade immediately we would strongly recommend:
* Immediately making a backup of your site's database

* Disabling the cron until you are able to upgrade

* Warn all users with course editing capabilities not to alter any course completion settings until you are able to upgrade

Apologies for any inconvenience caused! The changelogs for the affected versions are below.

Ciaran

Release 2.4.19.1 (7th May 2014):
==================================================

Bug Fixes:

    T-12280    Fix critical error causing deletion of course completion criteria data
    T-12159    Fix link to Release Notes forum on Notifications page

Release 2.5.12.1 (7th May 2014):
==================================================

Bug Fixes:
    T-12280    Fix critical error causing deletion of course completion criteria data
    T-12159    Fix link to Release Notes forum on Notifications page
    T-12153    Fix the setting of users timecreated field when new users are created by Totara Sync
    T-12160    Fix breadcrumbs when a manager views a Record of Learning of one of their staff
    T-12198    Fix undeclared tag variable in wiki activity
    T-12204    Fix incorrect error message being displayed when uploading large files

Release 2.6.0.1 (7th May 2014):
==================================================

Bug Fixes:

    T-12280    Fix critical error causing deletion of course completion criteria data
    T-12149    Fix navigation menu when adding course custom fields

(Edited by Tom Ireland - original submission Wednesday, 7 May 2014, 5:42 PM - Corrected typo.)

Permalien

Here is some additional information on the effects of this issue:

To determine if your site has been affected.

Your site is affected if you meet ALL three criteria below:

1. Your site was live with any of the following versions:

2.4.18
2.4.19
2.5.10
2.5.11
2.5.12
2.6.0

Note: These versions were all released on or after 15th April 2014 11th March 2014 so if you haven't upgraded since then you will be unaffected.

2. You make use of the "Course completion" feature.

3. Any of the following actions were performed while you were running one of the affected version (e.g. since upgrading):

Action	Log record
Edited the course completion settings on any course in your site, unless you just pressed "Unlock criteria without deleting".	'course completion updated' (unless immediately preceeded by 'course completion unlocked without reset').
Clicking "Unlock criteria and delete existing completion data" button on any course completion settings page.	'course completion data reset'
Deleted any course in your site.	'course delete'
Deleted a category on your site, if the category contained courses and you chose the "delete all contents" option.	'category delete'. No way to tell if it contained courses or if 'delete all contents' was chosen.
Reset any course in your site with the "delete completion data" option checked.	None
Restore a course into current or another existing course with "delete the contents of the existing course and then restore" option selected	None

The log records column indicates if this action is recorded in the site logs. You should be able to search your recent logs and look for the 'action' mentioned to see if each event occurred.

What will be lost if you are affected:

The data that is lost indicates which individual course completion criteria have been met. The bug does not affect the overall course completion data so if users have already completed a course that will still be shown. However if they are part way through a course their progress may have gone, and if they have completed a course the course completion report won't show which criteria they met.

To recover lost data if you are affected:

Some criteria can be regenerated based off other data within the site. This is dependent on the course completion criteria type you are using:

The following criteria will automatically be regenerated the next time your site's cron is run:

Date
Days left (duration)

The following criteria is recoverable, and we will provide an upgrade script in the next release of 2.4 and 2.5 to recalculate this data when you upgrade:

Activity completion (all activities)
Completion of other courses
Course Grade

The following criteria are unfortunately not recoverable without database backups:

Manual self completion
Manual completion by others

Simon

Permalien | Niveau supérieur