2.7.7: Security Release

announcements
1

Discourse 2.7.7 Stable Release

Discourse strongly recommends that all sites follow the default tests-passed branch of Discourse. The “stable” branch is more focused on lack of change than lack of bugs - all releases, including those on tests-passed and beta are production ready.

Changes

Security:

  • Do not reveal post whisperer in personal messages (CVE-2021-32788)
  • Don’t leak user of previous whisper post when deleting a topic (CVE-2021-32788)
8 Likes