open source e-learning & collaboration software
Joined January 2010
- Tweets67
- Following7
- Followers196
- Likes3
Chamilo Security retweeted
🛡️ Chamilo 3.0.2 is out! A large security release: stronger permission checks in course tools, a fix for a two-factor login bypass, safer SSO and LTI logins, plus the 1.11.x and 2.0 security fixes.
If you run Chamilo 2.0 or 3.0, please update soon 👇
chamilo.org/download
Chamilo Security retweeted
Good to know: Chamilo 2.0 is no longer an actively maintained branch. If your portal still runs 2.0, please plan your move to Chamilo 3.0.
As always, back up your files and database before you update or migrate.
Downloads: chamilo.org/en/download/
Chamilo Security retweeted
🛡️ Chamilo 2.0.4 is out! A security-focused release with 70 security fixes, plus fixes for forum grading on MySQL 8.4+, saving learning path progress and more.
If you manage a Chamilo 2.0.x portal, please update as soon as possible 👇
github.com/chamilo/chamilo-l…
This is not usual for us, but we have recategorized support for v2.0 (which has been superseded by v3.0 a few weeks ago after a short life), to "only critical patches" from now on. Normally, this was only going to happen from January 2027, so only a 2 months schedule change.
🔒 Chamilo 1.11.42 is out: a maintenance & security release that fixes 35+ vulnerabilities, 2 of them critical.
Running ANY 1.11.x version? We strongly recommend updating now.
Download: chamilo.org/download
What's inside:
• 35+ security fixes (2 critical)
• Install now works on MySQL 8.4+
• Session coaches can open their session's certificates again
• 2 new REST web services
Full list in the changelog.
[1/2] Two critical vulnerabilities affect all PHP versions today.
To protect your server and Chamilo, please apply one of the following methods:
1. upgrade to 8.5.12, 8.4.27, 8.3.36 or 8.2.35
2. change your PHP config (php.ini, not .htaccess or ini_set() by adding this...
[2/2] ...at the end:
# temporary fix for critical CVEs
memory_limit=-1
post_max_size = 32M
upload_max_filesize = 16M
session.upload_progress.enabled=0
fatal_error_backtraces=0 # only for php 8.5
See php.net/index.php#2026-10-20… for details (CTRL+F5 if it doesn't show today's post)
Long time no see!
We have just released Chamilo 3.0.1. This version includes fixes for several vulnerabilities detected in Chamilo 2.0.* and 3.0.0. Please update soon to avoid service interruption or undesired data access.
chamilo.org/en/download/
Chamilo Security retweeted
Security patch versions Chamilo 1.11.40 and 2.0.3 have been released with important security fixes.
Please update your Chamilo installation to keep your system and your users safe.
chamilo.org/en/download/
We have just released version 1.11.38 of Chamilo at record speed, fixing multiple issues, some of them CRITICAL. Notably, one of these was accessible without authentication.
Please update as soon as possible to protect your Chamilo portal and the personal data of your users.
🚨We have received several reports of Chamilo 1.11.* (including 1.11.36) portals getting cracked on the basis of a new unauthenticated RCE vulnerability. It only affects portals with the main/install/ directory. If you still have it, please remove it ASAP! [1/2]
We are actively working on a fix and will provide a new version for download in the next few hours.
Please also check for scripts like rce_[somenumber].php or up_[some-number].php in your files, and verify configuration.php for any added code like file_put_contents() and remove
📢Chamilo 1.11.36 is now available for download. It contains a few more fixes to vulnerabilities of different types (on top of 1.11.34, released recently). Please update your Chamilo platform soon.
chamilo.org/en/download/
📢Chamilo 1.11.34 is now available for download.
It contains a number of fixes to vulnerabilities of different types, 1 of them CRITICAL.
Please update your Chamilo platform as soon as possible to avoid data loss/theft.
chamilo.org/en/download/