Dear administrators,

on July 7th the new releases for ILIAS 9 (9.21), ILIAS 10 (10.9) and ILIAS 11 (11.2) were published. The ILIAS 9 branch is a security-fixes only branch as announced in: https://github.com/ILIAS-eLearning/ILIAS/blob/trunk/docs/development/supported-versions.md

In this ILIAS 9 release, however, a security fix introduced a severe new bug in the DataCollection component.

Saving table/field settings of a Data Collection could fail with "Whoops\Exception\ErrorException: Directory .../vendor/ezyang/htmlpurifier/library/HTMLPurifier/DefinitionCache/Serializer not writable", because HTMLPurifier tried to write its definition cache into the (often non-writable) Composer vendor tree.

A fix (https://github.com/ILIAS-eLearning/ILIAS/commit/3ec685ebf47d2cd30df0a3b7c8640264ae9b6c9b) was introduced in the release_9 branch after the 9.21 tag, removing this requirement on the vendor directory. Please make sure to checkout the latest commit on the release_9 branch and clear your caches in order to have a secure and stable ILIAS 9 release.

If you have any questions, don't hesitate to contact us.

Best regards,

Michael