·
55 commits
to development
since this release
v26.05.5
ssddanbrown
Dan Brown
This tag was signed with the committer’s verified signature.
ssddanbrown
Dan Brown
771a2d0
This commit was signed with the committer’s verified signature.
ssddanbrown
Dan Brown
Security Release
This is a security release which addresses a vulnerability related to social login accounts, to prevent accounts from different services being potentially mis-matched.
Upgrading is strongly advised if the instance has ever used more than one third-party/social login option (including previously used options which are no longer active).
Thanks to Google and Ada Logics for the discovery and responsible disclosure of this issue.
Full List of Changes
- Updated social logins to scope social account queries to social system.
- Updated PHP package versions.