Dynamic LMS
Security update information
This page provides details regarding the December 2025 security updates for your Dynamic LMS.
These updates are important, as it ensures that your LMS remains safe and secure. Details of the updates are provided below.
Moodle general fixes and improvements
Moodle’s general fixes and improvements details can be found here: https://moodledev.io/general/releases/4.5/4.5.8 (Please note this link will only become active once security updates are complete).
Moodle security updates
Security updates are not published publicly until next week. If you would like further details on these, please contact us and we will provide these when they are released.
Dynamic enhancements and bug fixes
- Bug – Arbitrary file download security vulneratbility – Users with the download auto reports capability can exploit the pages to download any file on the server.
- Bug – Face to face – Session attendees page displayes language string error if the cancelled reason category is set to one that contains spaces.
- Bug: Mobile navigation – Mobile links were not loading correctly.
- Bug: Theme – Background image on the LMS did not fill to the footer.
- Bug: Theme – Competency drop down lists display colours incorrectly.
- Bug: Theme – Manager dashboard revert button colours displayed incorrectly.
- Bug: Theme – Manager dashboard icons displayed incorrectly.
- Bug: Theme – Active learning thumbnails displayed incorrectly.
- Bug: Face to face & Certificate activities – Client system managers were receiving teacher notifications even though they were not part of the course or category.
- Bug: Active Learning – The active learning block was calculating the overdue date of courses by the initial deadline date rather than the actual expiry date of the accreditation meaning that users were seeing that they were hundreds of days overdue on their course when in fact they were in their re-accreditaiton period. The active learning block now displays the expiry date for accredited courses and deadlines only when the user has never completed the course previously.
- Enhancement: H5P activity icon – these have been updated.
- Enhancement: SCORM – Table of contents inside SCORM packages have been removed to avoid overlapping.
- Enhancement: List view chevron – has been updated to an icon so that it can be styled in different colours where required.
- Enhancement: Course thumbnails – supports resizing based on height and width so that they fit the area correctly. Options for selecting how these are displayed are available in the Learning Experience settings in Site Administration.
- Enhancement: TinyMCE text editor – Font colour, Font family and Font size plugins have been added to the LMS to allow customisation of text within text editors across the LMS. Further communication will be provided via newsletter in due course regarding settings available for these plugins.
If you have any questions about any of the above, please don’t hesitate to email us at helpdesk@dynamicbusiness.co.uk or phone us on 0113 323 0766.