Skip to content

Commit a2260e4

Browse files
authored
chore: prep 1.8.16 (#4586)
1 parent bec89ae commit a2260e4

2 files changed

Lines changed: 13 additions & 1 deletion

File tree

CHANGELOG.md

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,17 @@
11
# Changelog
22

3+
## [v1.8.16](https://github.com/flarum/framework/compare/v1.8.15...v1.8.16)
4+
### Security
5+
* Path traversal in LESS parser via theme color settings, incomplete fix for CVE-2023-27577 (https://github.com/flarum/framework/security/advisories/GHSA-xjvc-pw2r-6878)
6+
* Account takeover via expired password reset token (https://github.com/flarum/framework/security/advisories/GHSA-649p-3mfg-mx5r)
7+
* Invalidate active sessions when password is changed (https://github.com/flarum/framework/pull/4546)
8+
* Delete stale password tokens when requesting a new reset (https://github.com/flarum/framework/pull/4547)
9+
### Added
10+
* Sync abandoned extensions list from `flarum/abandoned-extensions` (https://github.com/flarum/framework/pull/4559)
11+
* Add `forum-widget` extension category (https://github.com/flarum/framework/pull/4542)
12+
### Fixed
13+
* [Tags] Use forum description for meta description on tags homepage (https://github.com/flarum/framework/pull/4557)
14+
315
## [v1.8.15](https://github.com/flarum/framework/compare/v1.8.14...v1.8.15)
416
### Added
517
* Announcements widget on admin dashboard (https://github.com/flarum/framework/pull/4472)

framework/core/src/Foundation/Application.php

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -23,7 +23,7 @@ class Application
2323
*
2424
* @var string
2525
*/
26-
const VERSION = '1.8.15';
26+
const VERSION = '1.8.16';
2727

2828
/**
2929
* The IoC container for the Flarum application.

0 commit comments

Comments
 (0)