# 2.7.9: Security Release

**URL:** https://meta.discourse.org/t/2-7-9-security-release/206588
**Category:** Announcements
**Tags:** release-notes
**Created:** [October 20, 2021, 9:40pm UTC](https://meta.discourse.org/t/2-7-9-security-release/206588 "2021-10-20T21:40:12Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![neil](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/neil/32/102150_2.png) [@neil](https://meta.discourse.org/u/neil)
#### Post date: [October 20, 2021, 9:40pm UTC](https://meta.discourse.org/t/2-7-9-security-release/206588/1 "2021-10-20T21:40:12Z")

</div>

## Discourse 2.7.9 Stable Release

Discourse strongly recommends that all sites follow the default tests-passed branch of Discourse. The “stable” branch is more focused on _lack of change_ than _lack of bugs_ - all releases, including those on tests-passed and beta are production ready.

### Changes

#### Security:

- Prevent a RCE via malicious SNS subscription payload. ([PR](https://github.com/discourse/discourse/pull/14671)) (CVE-2021-41163)

---

<div class="post-metadata">

### Author: ![neil](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/neil/32/102150_2.png) [@neil](https://meta.discourse.org/u/neil)
#### Post date: [October 20, 2021, 9:59pm UTC](https://meta.discourse.org/t/2-7-9-security-release/206588/2 "2021-10-20T21:59:11Z")

</div>