From d62b14978f96dfe9d8c698e090354db9b4c18e0d Mon Sep 17 00:00:00 2001 From: Paul Santus Date: Wed, 9 Sep 2026 01:01:25 +0200 Subject: [PATCH] chore(spip): bump SPIP core to 4.4.23 (security) 4.4.23 fixes a privilege-escalation -> RCE vulnerability (CERTFR-2026-AVI-1109, SPIP security bulletin 2026-09-02) NOT covered by the SPIP security screen, and a 4.4.22 regression that could break the public site. Bump the pinned version; the Dockerfile fetches core at build time so this is the whole change. --- spip/SPIP_VERSION | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spip/SPIP_VERSION b/spip/SPIP_VERSION index 9ed60f8..36a9353 100644 --- a/spip/SPIP_VERSION +++ b/spip/SPIP_VERSION @@ -1 +1 @@ -4.4.22 +4.4.23