# 2.7.7: Security Release

**URL:** https://meta.discourse.org/t/2-7-7-security-release/197959
**Category:** Announcements
**Tags:** release-notes
**Created:** [July 23, 2021, 2:57pm UTC](https://meta.discourse.org/t/2-7-7-security-release/197959 "2021-07-23T14:57:07Z")
**Posts on this page:** 1
**Page:** 1

<div class="post-metadata">

### Author: ![jomaxro](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jomaxro/32/126216_2.png) [@jomaxro](https://meta.discourse.org/u/jomaxro)
#### Post date: [July 23, 2021, 2:57pm UTC](https://meta.discourse.org/t/2-7-7-security-release/197959/1 "2021-07-23T14:57:07Z")

</div>

## Discourse 2.7.7 Stable Release

Discourse strongly recommends that all sites follow the default tests-passed branch of Discourse. The “stable” branch is more focused on _lack of change_ than _lack of bugs_ - all releases, including those on tests-passed and beta are production ready.

### Changes

#### Security:

- Do not reveal post whisperer in personal messages (CVE-2021-32788)
- Don’t leak user of previous whisper post when deleting a topic (CVE-2021-32788)