Merge pull request #21928 from atomiix/release-1.7.6.9

.travis.yml

@@ -66,6 +66,7 @@ matrix:
       env: EXTRA_DEPS=phpHigh  PRESTASHOP_TEST_TYPE=unit
 
 before_install:
+  - composer self-update --1
   - /sbin/start-stop-daemon --start --quiet --pidfile /tmp/custom_xvfb_10.pid --make-pidfile --background --exec /usr/bin/Xvfb -- :10 -ac -screen 0 1600x1200x16
   # Avoid Composer authentication issues
   - if [[ "$TRAVIS_REPO_SLUG" = PrestaShop/PrestaShop ]]; then cp travis-scripts/.composer-auth.json ~/.composer/auth.json; fi;

app/AppKernel.php

@@ -31,11 +31,11 @@ use Symfony\Component\HttpKernel\Kernel;
 
 class AppKernel extends Kernel
 {
-    const VERSION = '1.7.6.8';
+    const VERSION = '1.7.6.9';
     const MAJOR_VERSION_STRING = '1.7';
     const MAJOR_VERSION = 17;
     const MINOR_VERSION = 6;
-    const RELEASE_VERSION = 8;
+    const RELEASE_VERSION = 9;
 
     /**
      * @{inheritdoc}

docs/CHANGELOG.txt

@@ -23,6 +23,13 @@ International Registered Trademark & Property of PrestaShop SA
 
 Release Notes for PrestaShop 1.7
 --------------------------------
+####################################
+#   v1.7.6.9 - (2020-11-16)
+####################################
+- Core:
+  - Bug fix:
+    - #GHSA-frf2-c9q3-qg9m:  Improper Access Control with submitReorder function (by @PierreRambaud)
+
 ####################################
 #   v1.7.6.8 - (2020-09-24)
 ####################################

install-dev/install_version.php

@@ -24,7 +24,7 @@
  * International Registered Trademark & Property of PrestaShop SA
  */
 
-define('_PS_INSTALL_VERSION_', '1.7.6.8');
+define('_PS_INSTALL_VERSION_', '1.7.6.9');
 
 define('_PS_INSTALL_MINIMUM_PHP_VERSION_ID_', 50600);
 define('_PS_INSTALL_MINIMUM_PHP_VERSION_', '5.6');