Merge pull request #153 from YunoHost-Apps/testing

Upgrade to v4.48.0 and Reenable RestrictAddressFamilies safety setting

README.md

@@ -17,7 +17,7 @@ If you don't have YunoHost, please consult [the guide](https://yunohost.org/#/in
 
 Publishing, memberships, subscriptions and newsletters platform
 
-**Shipped version:** 4.47.2~ynh1
+**Shipped version:** 4.48.0~ynh1
 
 
 

README_fr.md

@@ -13,7 +13,7 @@ Si vous n'avez pas YunoHost, regardez [ici](https://yunohost.org/#/install) pour
 
 Plateforme d'édition, d'adhésions, d'abonnements et de newsletters
 
-**Version incluse :** 4.47.2~ynh1
+**Version incluse :** 4.48.0~ynh1
 
 
 

conf/admin.src

@@ -1,5 +1,5 @@
-SOURCE_URL=https://github.com/TryGhost/Admin/archive/refs/tags/v4.47.2.zip
-SOURCE_SUM=7a1a35463c3d332e73126ddfd76b285620bf009668ba0bc89e69ad2354fdf0d7
+SOURCE_URL=https://github.com/TryGhost/Admin/archive/refs/tags/v4.48.0.zip
+SOURCE_SUM=54e8bf3f07dfbc227274cb5e465051a83823110b84270d2a182cce65eccac989
 SOURCE_SUM_PRG=sha256sum
 SOURCE_FORMAT=zip
 SOURCE_IN_SUBDIR=false

conf/systemd.service

@@ -17,8 +17,7 @@ Restart=always
 NoNewPrivileges=yes
 PrivateTmp=yes
 PrivateDevices=yes
-#RestrictAddressFamilies disabled, prevents any write access on the app
-#RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
+RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6 AF_NETLINK
 RestrictNamespaces=yes
 RestrictRealtime=yes
 DevicePolicy=closed

manifest.json

@@ -6,7 +6,7 @@
         "en": "Publishing, memberships, subscriptions and newsletters platform",
         "fr": "Plateforme d'édition, d'adhésions, d'abonnements et de newsletters"
     },
-    "version": "4.47.2~ynh1",
+    "version": "4.48.0~ynh1",
     "url": "https://ghost.org/",
     "upstream": {
         "license": "MIT",