LORIS Release 28.0.3

[driusan]

This release pushes forward the changes from LORIS v27.0.5 to the v28.0.x release branch.

It also incorporates a number of security fixes for issues that were reported by the Ministère de la Cybersécurité et du Numérique du Quebec. These issues do not yet have CVEs published, but we have decided to publish the release and advisories without a CVE reference because of delays in the issuance of CVEs with the assumption that they will later be issued.

It is strongly recommended to upgrade. For details on the issues see the following advisories:

GHSA-cxv9-vq96-c44g
https://github.com/aces/Loris/security/advisories/GHSA-7qp4-46qh-3vrw
GHSA-7q8g-g764-4286
GHSA-gc8r-37wr-jch6
https://github.com/aces/Loris/security/advisories/GHSA-73xp-5fqj-8g93
GHSA-vfwx-wj8q-fp58
GHSA-q57f-8r6c-rj4c
GHSA-wx4f-w3wh-2hwg
GHSA-mhmh-hq54-22h6
GHSA-vwrg-x293-r7g3
GHSA-6pwq-62xc-g39j

Full Changelog: v28.0.2...v28.0.3

---

This discussion was created from the release LORIS Release 28.0.3.