Dear ILIAS Admins,
we would like to inform you about a recent PHP Announcement about two
critical PHP security issues whose fixes will be published today (Oct
21st) at 2pm UTC: https://www.php.net/archive/2026.php#2026-10-20-1
We, as the ILIAS Technical Board, are not aware if and how this issue
could be exploited in a running ILIAS installation but we want to inform
you about this issue due to its severity. There are many ILIAS
installations that were already either put behind a firewall or
completely set offline. We ask you to at least check the three weblinks
we provide in this e-mail and then decide on how to proceed for your
ILIAS installation. The final decision will need to be done by your
institution.
We are closely monitoring all new information via e.g.
https://www.cms-admins.de/news/php2shell-kritische-php-sicherheitsluecken-c…
and
https://www.heise.de/news/Wichtige-PHP-Updates-am-21-Oktober-beheben-Codeei….
Heise announced that they will publish further findings at 4pm when the
official release of the fixes takes place.
Let's keep the fingers crossed for all PHP applications worldwide.
Best regards,
Rob
For the Technical Board of the ILIAS Society
--
=============================================
Rob Falkenstein
Abteilung E-Learning
Rechenzentrum der Universität Freiburg
Hermann-Herder-Strasse 10
D-79104 Freiburg i. Br.
Tel: 0761 - 203 - 67780
==============================================
Dear all,
We plan to publish ILIAS 9.24, 10.12 and 11.5 on Tuesday, October 6,
2026.
Please note that this date is subject to change should software bugs
prevent a timely release. We recommend scheduling your system update
for the days following the release date.
Best regards
Fabian Wolf
Dear ILIAS-Admins,
on Sep 3rd the new releases for ILIAS 9 (9.23), ILIAS 10 (10.11) and
ILIAS 11 (11.4) were published. The ILIAS 9 branch is a security-fixes
only branch as announced in:
https://github.com/ILIAS-eLearning/ILIAS/blob/trunk/docs/development/suppor…
In this ILIAS 9 release, however, a security bug introduced a regression
in the learning progress component (#48294). Thus, a fix for this bug
(consisting of 3 commits) was also introduced in this branch after the
release 9.23 tag. Please make sure to checkout the latest commit on the
release_9 branch in order to have a secure and stable ILIAS 9 release.
Best regards
Rob Falkenstein
In the name of the Technical Board
--
=============================================
Rob Falkenstein
Abteilung E-Learning
Rechenzentrum der Universität Freiburg
Hermann-Herder-Strasse 10
D-79104 Freiburg i. Br.
Tel: 0761 - 203 - 67780
==============================================
Dear ILIAS-Administrators,
we would like to inform you about recent improvements in the LTI
Consumer Component of ILIAS for release_11. In the last years there have
been various uncertainties about the implemented and working feature set
of LTI. Thus, we decided to improve this situation within the release_11
branch: Some features that pretended to work in older ILIAS versions
such as deep linking or the assignment and grade services did not work
as expected although the corresponding feature wiki articles and GUI
elements pretend that they do.
Our current authorities for LTI proposed us to clean things up for the
LTI Consumer side for ILIAS 11 which generated a lot of code changes for
this component within a stable release: To make sure that everything
works correctly we founded a working group that thoroughly tested all
improved parts of the implementation. The results of this testing
convinced us to take the next step and introduce these changes which can
be interpreted as a border case between bugfix and feature into the next
shipped ILIAS 11 release which will be ILIAS 11.4. This is an exception
in the ILIAS development process in order to address a very important
quality enhancement within the LTI component. The Technical Board did
not take this decision lightly but we hope for your understanding on
this unique situation.
That means from ILIAS 11.4 on the LTI Consumer side (which means that
you open learning content from an external service within your ILIAS
installation) will fully support the LTI 1.3 specification including
deep linking, dynamic registration and the assignment and grade
services. The corresponding Feature Wiki articles will be updated by the
Technical Board, the corresponding Authorities and the Product Manager
in order to make this change traceable.
We are happy to announce this significant improvement and want to thank
surlabs for all the effort that they invested in shipping an even better
ILIAS.
In case you are a heavy LTI user and want to help out in testing LTI in
upcoming ILIAS releases we and the testcase manager are happy if you
reach out to us via tb(a)ilias.de and offer your help in future testing.
This is especially important now since the corresponding changes (and
additional ones) on the Provider/Tool side of the LTI implementation are
planned to be released in the upcoming ILIAS 12 release and need to also
be thoroughly tested during the testing phase which will start on NOV
4th 2026.
Let us keep ILIAS being a great software.
Best regards,
Rob
For the Technical Board of the ILIAS Society
--
=============================================
Rob Falkenstein
Abteilung E-Learning
Rechenzentrum der Universität Freiburg
Hermann-Herder-Strasse 10
D-79104 Freiburg i. Br.
Tel: 0761 - 203 - 67780
==============================================
