From Mahara Wiki

< Releases

This is a stable release of Mahara 1.1. Stable releases are fit for
general use. If you find a bug, please report it to the tracker:

This release includes an upgrade path from 1.0. If you wish to
upgrade, we encourage you to make a copy of your website and test the
upgrade on it first, to minimise the effect of any potential
unforeseen problems.

Changes from 1.1.7:

  • Security fixes to bundled copy of smarty (CVE-2008-4810, CVE-2008-4811 and CVE-2009-1669)
  • Fix for SQL injection in MNET usernames (CVE-2010-0400)
  • Fix sql error preventing blocks being moved down two or more places within the same column
  • Respect orderby search parameter in mysql search_user()
  • Solves group pagination problem with Safari and other browsers (LP: #547521)
  • Don't refuse to serve files from inside dataroot when dataroot has a symlink in it (LP: #547289)
  • Fix delete group heading (LP: #547639)