Dear administrators,
on July 7th the new releases for ILIAS 9 (9.21), ILIAS 10 (10.9) and ILIAS 11 (11.2) were published. The ILIAS 9 branch is a security-fixes only branch as announced in: [1] https://github.com/ILIAS-eLearning/ILIAS/blob/trunk/docs/development/support...
In this ILIAS 9 release, however, a security fix introduced a severe new bug in the DataCollection component.
Saving table/field settings of a Data Collection could fail with "Whoops\Exception\ErrorException: Directory .../vendor/ezyang/htmlpurifier/library/HTMLPurifier/DefinitionCache/Serializer not writable", because HTMLPurifier tried to write its definition cache into the (often non-writable) Composer vendor tree.
A fix ([2] https://github.com/ILIAS-eLearning/ILIAS/commit/3ec685ebf47d2cd30df0a3b7c864...) was introduced in the release_9 branch after the 9.21 tag, removing this requirement on the vendor directory. Please make sure to checkout the latest commit on the release_9 branch and clear your caches in order to have a secure and stable ILIAS 9 release.
If you have any questions, don't hesitate to contact us.
Best regards, Michael
Im Namen des ILIAS open source e-Learning e.V. --- E-Mail: tb[3] @ilias.de Geschäftsstelle: Berrenrather Str. 177 • 50937 Köln [4] https://verein.ilias.de
[1] https://github.com/ILIAS-eLearning/ILIAS/blob/trunk/docs/development/support... [2] https://github.com/ILIAS-eLearning/ILIAS/commit/3ec685ebf47d2cd30df0a3b7c864... [3] mailto:wolf@ilias.de [4] https://verein.ilias.de