LoginSign Up
← Back to all sparks
I

ILIAS

EDTECH
Velocity5.0

Open source learning management system used by universities, schools, and training organizations.

www.ilias.de ↗

Three supported majors, one security fix, patched in lockstep every month.

lmssecurity-patchesself-hostedmulti-branchmaintenance
◆Current state
ILIAS maintains versions 9, 10 and 11 simultaneously and patches all three on the same day. The August drop (11.3, 10.10, 9.22) and the July drop (11.2, 10.9, 9.21) are identical in shape: a maintenance release per branch, each described only as containing security fixes with the details held behind the project's security blog. Release notes carry no changelog at all, just a pointer and a warning to download the packaged tarball rather than GitHub's auto-generated source archive, which breaks composer.
◆Where it's heading
The pattern is a disciplined coordinated-disclosure cadence rather than a development roadmap — roughly monthly, all branches together, no feature content in the feed. Keeping three majors on the same patch schedule tells you the installed base is spread across all of them, which is what you would expect from self-hosted university deployments that upgrade on academic-year boundaries. Nothing observable here indicates what version 12 might contain.
◆Prediction
Expect the next coordinated triple in roughly a month, again with the substance published on the security blog rather than in the release notes.

◆Recent moves

  1. 7d ago

    ILIAS 11.3 security maintenance release

    The current major's monthly security patch, shipped alongside identical releases on the 10 and 9 branches. The notes disclose nothing beyond the existence of security fixes, so the substance lives on the project's security blog rather than in the feed.

    View source ↗
  2. 7d ago

    ILIAS 10.10 security backport

    The version 10 backport of the same August security work. Counted once with 11.3 rather than as separate news.

    View source ↗
  3. 7d ago

    ILIAS 9.22 security backport

    The version 9 backport completing the August triple. Its existence confirms the 9 branch is still supported.

    View source ↗
  4. 1mo ago

    ILIAS 11.2 security maintenance release

    July's patch on the current major, structurally identical to August's. The one-month spacing between coordinated drops is the clearest signal this feed carries.

    View source ↗
  5. 1mo ago

    ILIAS 10.9 security backport

    July's version 10 backport, published the same day as 11.2 and 9.21.

    View source ↗
  6. 1mo ago

    ILIAS 9.21 security backport

    July's version 9 backport, closing that month's coordinated set.

    View source ↗