From d54c43ae8f711e38d54ea4f1c0cfcb120e20a4ac Mon Sep 17 00:00:00 2001 From: Marc Alexander Date: Sun, 28 Apr 2019 09:27:54 +0200 Subject: [PATCH] [prep-release-3.2.6] Update changelog for 3.2.6 --- phpBB/docs/CHANGELOG.html | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) diff --git a/phpBB/docs/CHANGELOG.html b/phpBB/docs/CHANGELOG.html index 37710b30a6..e8dcc2be2b 100644 --- a/phpBB/docs/CHANGELOG.html +++ b/phpBB/docs/CHANGELOG.html @@ -50,6 +50,7 @@
  1. Changelog
      +
    • Changes since 3.2.6-RC1
    • Changes since 3.2.5
    • Changes since 3.2.5-RC1
    • Changes since 3.2.4
    • @@ -136,6 +137,23 @@
      +

      Changes since 3.2.6-RC1

      +

      Bug

      + +

      Security Issue

      +
        +
      • [SECURITY-231] - Remote avatar functionality allows checking for files and ports on local network
      • +
      • [SECURITY-235] - Fulltext native search can be used to cause long execution times
      • +
      +

      Hardening

      +
        +
      • [SECURITY-228] - Require form token in login_box
      • +
      • [SECURITY-233] - SMTP auth data shouldn't be cached
      • +
      • [SECURITY-234] - Main website URL can be set to JS URL in Admin Control Panel
      • +
      +

      Changes since 3.2.5

      Bug