Changes since 3.2.4-RC1
Bug

[PHPBB3-15860] - Backups filenames arent saved in the expected format

Security Issue

[SECURITY-227] - Phar deserialization in ACP leads to Remote Code Execution

Changes since 3.2.3
Bug

[PHPBB3-11453] - phpbb_notification_method_email unnecessarily loads data of banned users.
[PHPBB3-12430] - hilit not removed from URL after search
[PHPBB3-13043] - Fixing HTML5 conformance
[PHPBB3-13128] - sql_query_info, max_matches and charset_type removed from sphinxsearch 2.2.2-beta
[PHPBB3-14812] - No shadow pruning with system cron enabled
[PHPBB3-15329] - View/Edit drafts contain underlying HTML coding
[PHPBB3-15420] - Quote Notification Sent for Edited Posts by Non Author
[PHPBB3-15494] - Users can only be removed once from newly registered users
[PHPBB3-15507] - PHP 7.2 Warning
[PHPBB3-15544] - Migrations don't delete modules in every case
[PHPBB3-15552] - Private Message (PM) "find a member" button "select marked" not working
[PHPBB3-15557] - Used composer version has bug with PHP 7.2
[PHPBB3-15583] - Updating session time in AJAX request ignores 60 seconds check
[PHPBB3-15593] - Disabling "print view" (permission or private messages settings) actually doesn't block the feature
[PHPBB3-15600] - Ban reasons are not escaped in mcp_ban.html template
[PHPBB3-15604] - Appveyor builds unable to download and unpack MSSQL drivers
[PHPBB3-15606] - Hide/Reveal 'Profile' Link According to Permission Setting
[PHPBB3-15607] - Board's cookies not deleted on disabled board
[PHPBB3-15611] - Prosilver mobile layout: Misaligned text in user profile
[PHPBB3-15612] - PHP warning with MSSQL on PHP 7.2
[PHPBB3-15616] - Jumpbox doesn't display in the login forum page (access to forum with password)
[PHPBB3-15618] - Team page link always appears when you are logout (anonymous), even if you don't have the permission (unlike memberlist link)
[PHPBB3-15619] - Legends of custom profile fields could be hidden in memberlist, when viewing an user group
[PHPBB3-15620] - Avatar gallery can be unusable on multilingual boards, unless people use the board default language
[PHPBB3-15622] - Quoting messages (while viewing one, not inside post editor) can return a wrong chain
[PHPBB3-15637] - Event list only has first line of PHP event description
[PHPBB3-15651] - Migration 'if' conditions only support booleans
[PHPBB3-15659] - retrieve_block_vars generates warnings in PHP 7.2
[PHPBB3-15666] - Language system is not fully supported in Twig
[PHPBB3-15670] - Group forum permission: Can see forum gives NO SQL ERROR
[PHPBB3-15673] - Duplicated links for (ACP,MCP,FAQ) in QuickLinks and main nav bar
[PHPBB3-15680] - INSTALL.html should point to 3.2 documentation instead of 3.1
[PHPBB3-15693] - gen_rand_string() don't return a string with the expected length
[PHPBB3-15695] - gen_rand_string can return less characters than expected
[PHPBB3-15700] - {T_THEME_LANG_NAME} template variable could be wrong when log off
[PHPBB3-15705] - phpbbcli language parse error in PHP <= 5.5.38
[PHPBB3-15716] - OAuth link information remains after deleting a user, causes fatal exception
[PHPBB3-15717] - Old email address missing from log when user changes email address
[PHPBB3-15723] - gen_rand_string() return wrong number or characters sometimes
[PHPBB3-15733] - Remove unused variables related to deprecated flood control
[PHPBB3-15742] - Remove get_magic_quotes_gpc from type_cast_helper
[PHPBB3-15751] - Warning when update with CLI
[PHPBB3-15755] - Broken events in /phpbb/attachment/delete.php
[PHPBB3-15758] - String INSECURE_REDIRECT is not shown translated
[PHPBB3-15770] - Sphinx assertion fails on unread posts when exceeding an offset of 999
[PHPBB3-15788] - Return button from privacy policy shows wrong text
[PHPBB3-15817] - Unable to install in Oracle 11R2 Express
[PHPBB3-15824] - UI test framework Broken for extensions
[PHPBB3-15830] - 'core.modify_notification_message' event is useless
[PHPBB3-15849] - PHP 7.2 compat for bitfield class
[PHPBB3-15852] - IPv6 address not working in Whois

Improvement

[PHPBB3-10432] - Don't require username when user forgets password
[PHPBB3-11500] - on Custom profile fields the field_ident field lacks name
[PHPBB3-12739] - Make the font color palette in ACP same as Prosilver
[PHPBB3-14656] - Add a list-unsubscribe header with the unsubscribe URL
[PHPBB3-14990] - Add core event to the Twig environment
[PHPBB3-15554] - Simple footer after load js
[PHPBB3-15579] - Add core.ucp_main_front_modify_sql and core.ucp_main_front_modify_template_vars
[PHPBB3-15590] - Add PHP events after adding, updating and deleting BBCodes
[PHPBB3-15628] - newtopic_notify.txt does not have directly link to the new topic
[PHPBB3-15638] - Add word-break for overflowing.
[PHPBB3-15642] - String to be used in HTML element contains ">"
[PHPBB3-15656] - Add "View post" link in the mod logs on the ACP
[PHPBB3-15661] - Add core.viewtopic_modify_poll_ajax_data
[PHPBB3-15662] - Add $this->template to core.modify_notification_message
[PHPBB3-15668] - Change JQuery .load(fn) event to .on('load',fn)
[PHPBB3-15674] - Edit language lines in file en\acp\profile.php
[PHPBB3-15683] - Better error message when commit message has CRLF
[PHPBB3-15696] - 'if' module tool should support calling other tools
[PHPBB3-15706] - [Template] - mcp_post_report_buttons_top_*
[PHPBB3-15719] - Add core event on viewtopic post_list query for query modification
[PHPBB3-15726] - Implement selective purge in APCu cache driver
[PHPBB3-15735] - [Template] - *_content_after (for posts)
[PHPBB3-15737] - [PHP] - Add $user_rows to core.delete_user_before
[PHPBB3-15762] - Topics per page Conformity
[PHPBB3-15768] - Add a license to a repository
[PHPBB3-15771] - Q&A configuration instructions not optilmal
[PHPBB3-15799] - Find correct poll for voting animation
[PHPBB3-15803] - Add core events on ucp_pm_compose for additional message list actions
[PHPBB3-15819] - Add core event to functions_posting to modify notifications
[PHPBB3-15825] - Add core.acp_manage_forums_move_content_sql_before
[PHPBB3-15826] - Add core.mcp_main_fork_sql_after
[PHPBB3-15827] - [Template] - Add *_username_{prepend/append} template events
[PHPBB3-15831] - ACP signature update should trigger event
[PHPBB3-15832] - ACP avatar update event
[PHPBB3-15833] - ACP and UCP avatar delete events
[PHPBB3-15837] - Add core.ucp_register_welcome_email_before
[PHPBB3-15838] - Add core.ucp_register_register_after
[PHPBB3-15839] - Add core.ucp_login_link_template_after
[PHPBB3-15841] - Allow postrow pm link to be modified by event
[PHPBB3-15848] - Up-version plupload to v2.3.6 to fix image rotation issues
[PHPBB3-15850] - Use standard SQL cache for notification types

New Feature

[PHPBB3-15792] - [Template] - confirm_delete_body_delete_reason_before

Task

[PHPBB3-15596] - Migrate from data-vocabulary.org to schema.org
[PHPBB3-15621] - Some graphical inconsistencies with colored users groups in posting, UCP and MCP
[PHPBB3-15701] - {SIGNATURE} variable is added in mcp_post.html but not defined in MCP
[PHPBB3-15809] - Allow events with twig syntax
[PHPBB3-15857] - Add rubencm to CREDITS.txt

Changes since 3.2.3-RC2
Bug

[PHPBB3-15504] - phpBB Debug warning in 3.2.2

Improvement

[PHPBB3-15740] - Terms & Privavy hardcoded

Changes since 3.2.3-RC1
Bug

[PHPBB3-11847] - auth_provider_oauth migration must depend on at least one migration that ensures the module tables exist as expected
[PHPBB3-15548] - Dead link in ACP_COOKIE_SETTINGS_EXPLAIN language entry
[PHPBB3-15586] - When creating a module without the modes array a missing 'module_langname' index is accessed
[PHPBB3-15613] - Notification dropdown said to be not RTL compliant
[PHPBB3-15627] - Improve wording of YES_ACCURATE_PM_BUTTON + EXPLAIN
[PHPBB3-15678] - PHP warning in filesystem.php
[PHPBB3-15731] - Fix acp_search language parameters when deleting index

Improvement

[PHPBB3-15630] - Change <b> to <strong>
[PHPBB3-15633] - Remove extra space in GROUP_MAX_RECIPIENTS_EXPLAIN
[PHPBB3-15657] - Add core.mcp_queue_get_posts_for_posts_query_before and core.mcp_queue_get_posts_modify_post_row
[PHPBB3-15676] - Display privacy policy & terms of use more prominently

Task

[PHPBB3-15677] - Updated dependencies for 3.2.3-RC2

Changes since 3.2.2
Bug

[PHPBB3-14936] - Missing language variable INST_ERR_DB
[PHPBB3-15491] - Outdated linkes in installer support page
[PHPBB3-15492] - Permissions role combobox does not work in RTL
[PHPBB3-15500] - Docs outdated for new PHP 5.4.7 requirement
[PHPBB3-15502] - Errors in migrations in 3.2.2 release
[PHPBB3-15506] - Previewing new post empties attachment list of all but first attachment
[PHPBB3-15512] - Avoid reparsing non-existent polls
[PHPBB3-15513] - Signature edit in acp gives error
[PHPBB3-15520] - DbDriver->sql_build_query cant cope with sub-selects
[PHPBB3-15522] - Allow multiple color palettes per page
[PHPBB3-15523] - AdBlocker may cause JS error when using CookieConsent
[PHPBB3-15525] - composer.json License is Invalid/Deprecated
[PHPBB3-15526] - Cast bbcode ID to integer
[PHPBB3-15527] - Cannot interpret the BBCode definition
[PHPBB3-15532] - Update pull request template
[PHPBB3-15533] - Typo in viewtopic_topic_tools.html
[PHPBB3-15558] - phpbb\report\report_handler_post.php
[PHPBB3-15559] - phpbb\report\report_handler_pm.php:56
[PHPBB3-15595] - Migration Module Exists Tool Broken

Improvement

[PHPBB3-12579] - Add BUTTON_ language strings for post & PM buttons
[PHPBB3-15495] - Use transactions for queries in move_forum
[PHPBB3-15499] - Drop HHVM support
[PHPBB3-15510] - Link Orphan attachments in ACP>General to Orphaned attachments page
[PHPBB3-15514] - Improve accessibility by adding vital info from explanation to a title
[PHPBB3-15518] - Do not attempt to accurately determine whether posters can read private messages in viewtopic
[PHPBB3-15528] - Display the version of the installed styles in acp
[PHPBB3-15529] - Color groups in ACP
[PHPBB3-15531] - Log malformed BBCodes
[PHPBB3-15534] - Outdated ACP extensions database link for phpBB 3.2
[PHPBB3-15535] - Add S_FIRST_POST to postrow on viewtopic
[PHPBB3-15537] - Add events core.search_(native|mysql|postgres|sphinx)_index_before
[PHPBB3-15547] - Add file object to event core.avatar_driver_upload_move_file_before
[PHPBB3-15561] - Add core events for adding columns to MySQL and Postgres search backends
[PHPBB3-15568] - Update depencies to latest versions
[PHPBB3-15569] - Adjust update instructions to suggest file replacement method

New Feature

[PHPBB3-15398] - Add event to oauth login after ID check

Security Issue

[PHPBB3-15570] - Extension version check is restricted to TLS 1.0

Task

[PHPBB3-15466] - Move Nils in CREDITS.txt
[PHPBB3-15516] - Add instructions on running UI tests