Changes since 3.2.5-RC1
Bug

[PHPBB3-15888] - Update link to user guide
[PHPBB3-15893] - Call to undefined $user in phpbb_format_quote() when BBCodes are disabled
[PHPBB3-15911] - SQL general error on DB update from 3.0 branch

Hardening

[SECURITY-229] - Update to latest version of jQuery 1.x and add ajax prefilter

Changes since 3.2.4
Bug

[PHPBB3-15665] - MSSQL implementation crashes when upload directory > 2GB
[PHPBB3-15858] - Unapproved User(s) appearing as Guest in Team Page.
[PHPBB3-15867] - Contact form without class
[PHPBB3-15871] - PHP 7.1+ warning in ACP extensions module
[PHPBB3-15875] - BBCode parsing error (PHP fatal error)
[PHPBB3-15881] - Login keys are not reset after password update in some cases

Improvement

[PHPBB3-15542] - Some JS files being called without assets version
[PHPBB3-15859] - Modify the topic ordering if needed
[PHPBB3-15863] - Modify the topic sort ordering from the beginning
[PHPBB3-15870] - Modify the forum ID to handle the correct display of viewtopic if needed
[PHPBB3-15872] - Add show_user_activity to display_user_activity_modify_actives
[PHPBB3-15873] - Event to add/modify MCP report details template data.
[PHPBB3-15878] - Add attachment to core.ucp_pm_view_message
[PHPBB3-15879] - Modify attachment's poster_id for get_submitted_attachment_data

Changes since 3.2.4-RC1
Bug

[PHPBB3-15860] - Backups filenames arent saved in the expected format

Security Issue

[SECURITY-227] - Phar deserialization in ACP leads to Remote Code Execution

Changes since 3.2.3
Bug

[PHPBB3-11453] - phpbb_notification_method_email unnecessarily loads data of banned users.
[PHPBB3-12430] - hilit not removed from URL after search
[PHPBB3-13043] - Fixing HTML5 conformance
[PHPBB3-13128] - sql_query_info, max_matches and charset_type removed from sphinxsearch 2.2.2-beta
[PHPBB3-14812] - No shadow pruning with system cron enabled
[PHPBB3-15329] - View/Edit drafts contain underlying HTML coding
[PHPBB3-15420] - Quote Notification Sent for Edited Posts by Non Author
[PHPBB3-15494] - Users can only be removed once from newly registered users
[PHPBB3-15507] - PHP 7.2 Warning
[PHPBB3-15544] - Migrations don't delete modules in every case
[PHPBB3-15552] - Private Message (PM) "find a member" button "select marked" not working
[PHPBB3-15557] - Used composer version has bug with PHP 7.2
[PHPBB3-15583] - Updating session time in AJAX request ignores 60 seconds check
[PHPBB3-15593] - Disabling "print view" (permission or private messages settings) actually doesn't block the feature
[PHPBB3-15600] - Ban reasons are not escaped in mcp_ban.html template
[PHPBB3-15604] - Appveyor builds unable to download and unpack MSSQL drivers
[PHPBB3-15606] - Hide/Reveal 'Profile' Link According to Permission Setting
[PHPBB3-15607] - Board's cookies not deleted on disabled board
[PHPBB3-15611] - Prosilver mobile layout: Misaligned text in user profile
[PHPBB3-15612] - PHP warning with MSSQL on PHP 7.2
[PHPBB3-15616] - Jumpbox doesn't display in the login forum page (access to forum with password)
[PHPBB3-15618] - Team page link always appears when you are logout (anonymous), even if you don't have the permission (unlike memberlist link)
[PHPBB3-15619] - Legends of custom profile fields could be hidden in memberlist, when viewing an user group
[PHPBB3-15620] - Avatar gallery can be unusable on multilingual boards, unless people use the board default language
[PHPBB3-15622] - Quoting messages (while viewing one, not inside post editor) can return a wrong chain
[PHPBB3-15637] - Event list only has first line of PHP event description
[PHPBB3-15651] - Migration 'if' conditions only support booleans
[PHPBB3-15659] - retrieve_block_vars generates warnings in PHP 7.2
[PHPBB3-15666] - Language system is not fully supported in Twig
[PHPBB3-15670] - Group forum permission: Can see forum gives NO SQL ERROR
[PHPBB3-15673] - Duplicated links for (ACP,MCP,FAQ) in QuickLinks and main nav bar
[PHPBB3-15680] - INSTALL.html should point to 3.2 documentation instead of 3.1
[PHPBB3-15693] - gen_rand_string() don't return a string with the expected length
[PHPBB3-15695] - gen_rand_string can return less characters than expected
[PHPBB3-15700] - {T_THEME_LANG_NAME} template variable could be wrong when log off
[PHPBB3-15705] - phpbbcli language parse error in PHP <= 5.5.38
[PHPBB3-15716] - OAuth link information remains after deleting a user, causes fatal exception
[PHPBB3-15717] - Old email address missing from log when user changes email address
[PHPBB3-15723] - gen_rand_string() return wrong number or characters sometimes
[PHPBB3-15733] - Remove unused variables related to deprecated flood control
[PHPBB3-15742] - Remove get_magic_quotes_gpc from type_cast_helper
[PHPBB3-15751] - Warning when update with CLI
[PHPBB3-15755] - Broken events in /phpbb/attachment/delete.php
[PHPBB3-15758] - String INSECURE_REDIRECT is not shown translated
[PHPBB3-15770] - Sphinx assertion fails on unread posts when exceeding an offset of 999
[PHPBB3-15788] - Return button from privacy policy shows wrong text
[PHPBB3-15817] - Unable to install in Oracle 11R2 Express
[PHPBB3-15824] - UI test framework Broken for extensions
[PHPBB3-15830] - 'core.modify_notification_message' event is useless
[PHPBB3-15849] - PHP 7.2 compat for bitfield class
[PHPBB3-15852] - IPv6 address not working in Whois

Improvement

[PHPBB3-10432] - Don't require username when user forgets password
[PHPBB3-11500] - on Custom profile fields the field_ident field lacks name
[PHPBB3-12739] - Make the font color palette in ACP same as Prosilver
[PHPBB3-14656] - Add a list-unsubscribe header with the unsubscribe URL
[PHPBB3-14990] - Add core event to the Twig environment
[PHPBB3-15554] - Simple footer after load js
[PHPBB3-15579] - Add core.ucp_main_front_modify_sql and core.ucp_main_front_modify_template_vars
[PHPBB3-15590] - Add PHP events after adding, updating and deleting BBCodes
[PHPBB3-15628] - newtopic_notify.txt does not have directly link to the new topic
[PHPBB3-15638] - Add word-break for overflowing.
[PHPBB3-15642] - String to be used in HTML element contains ">"
[PHPBB3-15656] - Add "View post" link in the mod logs on the ACP
[PHPBB3-15661] - Add core.viewtopic_modify_poll_ajax_data
[PHPBB3-15662] - Add $this->template to core.modify_notification_message
[PHPBB3-15668] - Change JQuery .load(fn) event to .on('load',fn)
[PHPBB3-15674] - Edit language lines in file en\acp\profile.php
[PHPBB3-15683] - Better error message when commit message has CRLF
[PHPBB3-15696] - 'if' module tool should support calling other tools
[PHPBB3-15706] - [Template] - mcp_post_report_buttons_top_*
[PHPBB3-15719] - Add core event on viewtopic post_list query for query modification
[PHPBB3-15726] - Implement selective purge in APCu cache driver
[PHPBB3-15735] - [Template] - *_content_after (for posts)
[PHPBB3-15737] - [PHP] - Add $user_rows to core.delete_user_before
[PHPBB3-15762] - Topics per page Conformity
[PHPBB3-15768] - Add a license to a repository
[PHPBB3-15771] - Q&A configuration instructions not optilmal
[PHPBB3-15799] - Find correct poll for voting animation
[PHPBB3-15803] - Add core events on ucp_pm_compose for additional message list actions
[PHPBB3-15819] - Add core event to functions_posting to modify notifications
[PHPBB3-15825] - Add core.acp_manage_forums_move_content_sql_before
[PHPBB3-15826] - Add core.mcp_main_fork_sql_after
[PHPBB3-15827] - [Template] - Add *_username_{prepend/append} template events
[PHPBB3-15831] - ACP signature update should trigger event
[PHPBB3-15832] - ACP avatar update event
[PHPBB3-15833] - ACP and UCP avatar delete events
[PHPBB3-15837] - Add core.ucp_register_welcome_email_before
[PHPBB3-15838] - Add core.ucp_register_register_after
[PHPBB3-15839] - Add core.ucp_login_link_template_after
[PHPBB3-15841] - Allow postrow pm link to be modified by event
[PHPBB3-15848] - Up-version plupload to v2.3.6 to fix image rotation issues
[PHPBB3-15850] - Use standard SQL cache for notification types

New Feature

[PHPBB3-15792] - [Template] - confirm_delete_body_delete_reason_before

Task

[PHPBB3-15596] - Migrate from data-vocabulary.org to schema.org
[PHPBB3-15621] - Some graphical inconsistencies with colored users groups in posting, UCP and MCP
[PHPBB3-15701] - {SIGNATURE} variable is added in mcp_post.html but not defined in MCP
[PHPBB3-15809] - Allow events with twig syntax
[PHPBB3-15857] - Add rubencm to CREDITS.txt

Changes since 3.2.3-RC2
Bug

[PHPBB3-15504] - phpBB Debug warning in 3.2.2

Improvement

[PHPBB3-15740] - Terms & Privavy hardcoded

Changes since 3.2.3-RC1
Bug

[PHPBB3-11847] - auth_provider_oauth migration must depend on at least one migration that ensures the module tables exist as expected
[PHPBB3-15548] - Dead link in ACP_COOKIE_SETTINGS_EXPLAIN language entry
[PHPBB3-15586] - When creating a module without the modes array a missing 'module_langname' index is accessed
[PHPBB3-15613] - Notification dropdown said to be not RTL compliant
[PHPBB3-15627] - Improve wording of YES_ACCURATE_PM_BUTTON + EXPLAIN
[PHPBB3-15678] - PHP warning in filesystem.php
[PHPBB3-15731] - Fix acp_search language parameters when deleting index

Improvement

[PHPBB3-15630] - Change <b> to <strong>
[PHPBB3-15633] - Remove extra space in GROUP_MAX_RECIPIENTS_EXPLAIN
[PHPBB3-15657] - Add core.mcp_queue_get_posts_for_posts_query_before and core.mcp_queue_get_posts_modify_post_row
[PHPBB3-15676] - Display privacy policy & terms of use more prominently

Task

[PHPBB3-15677] - Updated dependencies for 3.2.3-RC2