Hello everyone,
The following versions of Totara have now been released:
These versions do contain security fixes, and for this reason we strongly recommend upgrade.
Each release also includes various bug fixes and improvements.
Please contact Totara or your partner company if you require more detail on any issue.
Kind regards
Release Team
Release 19.1.3 (22nd September 2025):
Security issues:
TL-43155 Improved security when storing credentials for external badge backpack connections
TL-46012 Fixed feedback activity results not always respecting the Separate Groups mode (MSA-25-0039)
Improvements:
TL-44415 Improved messaging when catalog filter selection changes update the results
Bug fixes:
TL-38610 Fixed warnings thrown by the component loader when open_basedir was configured in PHP
TL-40919 Fixed the 'Program ID number' filter for the certifications tab of record of learning
TL-42583 Fixed integer and decimal custom fields being validated even when not specified when creating and updating positions and organisations via the external API
TL-44442 Fixed formatting issue with Weka editor in quiz questions
TL-44715 Fixed unexpected competency records being displayed in record of learning
TL-45819 Removed overdue status on record of learning when certification is unassigned
TL-45870 Fixed a crash with the front page login block when various authentication providers were used together
TL-46026 Fixed bug where some toast notifications would not show if the message contained multi-byte characters
TL-46063 Fixed a bug when trying to authenticate with an external tool
TL-46089 Fixed invalid page state when rendering reports with SQL errors
TL-45431 Fixed an issue that was causing unwanted horizontal scrolling on pages with tables
Technical changes:
TL-46189 Fixed PHPUnit checks after upgrading to PHPUnit 10
Release 19.0.9 (22nd September 2025):
Security issues:
TL-43155 Improved security when storing credentials for external badge backpack connections
TL-46012 Fixed feedback activity results not always respecting the Separate Groups mode (MSA-25-0039)
Improvements:
TL-44415 Improved messaging when catalog filter selection changes update the results
Bug fixes:
TL-38610 Fixed warnings thrown by the component loader when open_basedir was configured in PHP
TL-40919 Fixed the 'Program ID number' filter for the certifications tab of record of learning
TL-42583 Fixed integer and decimal custom fields being validated even when not specified when creating and updating positions and organisations via the external API
TL-44442 Fixed formatting issue with Weka editor in quiz questions
TL-44715 Fixed unexpected competency records being displayed in record of learning
TL-45819 Removed overdue status on record of learning when certification is unassigned
TL-45870 Fixed a crash with the front page login block when various authentication providers were used together
TL-45994 Fixed manage certification header to use the correct lang string
TL-46026 Fixed bug where some toast notifications would not show if the message contained multi-byte characters
TL-46063 Fixed a bug when trying to authenticate with an external tool
TL-46089 Fixed invalid page state when rendering reports with SQL errors
TL-45431 Fixed an issue that was causing unwanted horizontal scrolling on pages with tables
Technical changes:
TL-46189 Fixed PHPUnit checks after upgrading to PHPUnit 10
Release 18.22 (22nd September 2025):
Security issues:
TL-43155 Improved security when storing credentials for external badge backpack connections
TL-46012 Fixed feedback activity results not always respecting the Separate Groups mode (MSA-25-0039)
Improvements:
TL-44415 Improved messaging when catalog filter selection changes update the results
Bug fixes:
TL-38610 Fixed warnings thrown by the component loader when open_basedir was configured in PHP
TL-40919 Fixed the 'Program ID number' filter for the certifications tab of record of learning
TL-44442 Fixed formatting issue with Weka editor in quiz questions
TL-44715 Fixed unexpected competency records being displayed in record of learning
TL-45819 Removed overdue status on record of learning when certification is unassigned
TL-46063 Fixed a bug when trying to authenticate with an external tool
TL-46089 Fixed invalid page state when rendering reports with SQL errors
Release 17.35 (22nd September 2025):
Security issues:
TL-46012 Fixed feedback activity results not always respecting the Separate Groups mode (MSA-25-0039)
Bug fixes:
TL-38610 Fixed warnings thrown by the component loader when open_basedir was configured in PHP
TL-43927 Fixed an error message that appeared when switching language immediately after using the Log in as feature
TL-44715 Fixed unexpected competency records being displayed in record of learning
TL-46063 Fixed a bug when trying to authenticate with an external tool
Release 16.41 (22nd September 2025):
Security issues:
TL-46012 Fixed feedback activity results not always respecting the Separate Groups mode (MSA-25-0039)
Bug fixes:
TL-38610 Fixed warnings thrown by the component loader when open_basedir was configured in PHP
TL-43927 Fixed an error message that appeared when switching language immediately after using the Log in as feature
TL-44715 Fixed unexpected competency records being displayed in record of learning
Release 15.47 (22nd September 2025):
Security issues:
TL-46012 Fixed feedback activity results not always respecting the Separate Groups mode (MSA-25-0039)