Discourse 2.8.9 Stable Release
Discourse strongly recommends that all sites follow the default tests-passed branch of Discourse. The “stable” branch is more focused on lack of change than lack of bugs - all releases, including those on tests-passed and beta are production ready.
Changes
Security:
- Limit user profile field length (CVE-2022-39226)
- Moderator shouldn’t be able to import a theme via API (CVE-2022-36068)
- Prevent arbitrary file write when decompressing files (CVE-2022-36066)