Symfony News: Latest Symfony News

A week of symfony #598 (11-17 June 2018)

This week, development activity focused on the Cache component, which gained sub-second accuracy for internal expiry calculation and stampede protection via probabilistic early expiration. Meanwhile, ...

Call for Papers currently open for the upcoming Symfony conferences

Several conferences are organized at the second semester of 2018, mark your Symfony calendar now and join us there: -SymfonyLive London 2018 on September 28th -SymfonyLive USA 2018 (in San Francisco...

CARE team training

Following the announcement of the CARE team members by Fabien, we would now move forward to organize a training to ensure that we are well prepared to handle incident reports. For this training we int...

A week of symfony #597 (4-10 June 2018)

This week, development activity focused on fixing the first reported issues about the Symfony 4.1 stable version. Meanwhile, work on Symfony 4.2 already started with the addition of a ServiceSubscribe...

SymfonyCon Lisbon: only 100 early bird tickets available!

We’re so happy to announce SymfonyCon Lisbon 2018! We’ve just released the official website, the international Symfony conference will be held at the Lisbon Mariott Hotel on December 6-8! Come to at...

A week of symfony #596 (28 May - 3 June 2018)

This week, Symfony 4.1.0 was released, which includes more than 200 big and small new features. In addition, the registration for the SymfonyCon Lisbon 2018 conference opened with the first 100 early ...

Symfony 4.1.0 released

Symfony 4.1.0 has just been released. Here is a list of the most important changes: bug #27420 Revert "feature #26702 Mark ExceptionInterfaces throwable (ostrolucky)" (@nicolas-grekas) ...

Symfony 4.1 curated new features

Symfony 4.1.0 is going to be released later today. As for any other Symfony minor release, our backward compatibility promise applies and this means that you should be able to upgrade easily without c...

New in Symfony 4.1: Misc. improvements (part 4)

This is the 41st and last post in the series of New features of Symfony 4.1, which will be released at the end of this month and will have support for bug fixes until January 2019 (see Symfony 4.1 roa...

New in Symfony 4.1: Misc. improvements (part 3)

Allow to set the rounding strategy for MoneyType¶ Contributed by syastrebov in #26767. ...

A week of symfony #595 (21-27 May 2018)

This week Symfony released 2.7.48, 2.8.41, 3.3.17, 3.4.11 and 4.0.11 versions to address several security vulnerabilities. Meanwhile Symfony 4.1.0 beta3 was published in preparation for next week's fi...

Symfony 4.1.0-BETA3 released

Symfony 4.1.0-BETA3 has just been released. Here is a list of the most important changes: bug #27388 [Routing] Account for greediness when merging route patterns (@nicolas-grekas) bug #27344 [Htt...

CVE-2018-11385: Session Fixation Issue for Guard Authentication

Affected versions Symfony 2.7.0 to 2.7.47, 2.8.0 to 2.8.40, 3.3.0 to 3.3.16, 3.4.0 to 3.4.10 and 4.0.0 to 4.0.10 versions of the Symfony Security component are affected by this security issue. The i...

CVE-2018-11406: CSRF Token Fixation

Affected versions Symfony 2.7.0 to 2.7.47, 2.8.0 to 2.8.40, 3.3.0 to 3.3.16, 3.4.0 to 3.4.10, and 4.0.0 to 4.0.10 versions of the Symfony Security component are affected by this security issue. The ...

CVE-2018-11408: Open redirect vulnerability on security handlers

Affected versions Symfony 2.7.0 to 2.7.47, 2.8.0 to 2.8.40, 3.3.0 to 3.3.16, 3.4.0 to 3.4.10, and 4.0.0 to 4.0.10 versions of the Symfony Security component are affected by this security issue. The ...

CVE-2018-11407: Unauthorized access on a misconfigured LDAP server when using an empty password

Affected versions Symfony 2.8.0 to 2.8.36, 3.3.0 to 3.3.16, 3.4.0 to 3.4.6, and 4.0.0 to 4.0.6 versions of the Symfony LDAP component are affected by this security issue. The issue has been fixed in...

CVE-2018-11386: Denial of service when using PDOSessionHandler

Affected versions Symfony 2.7.0 to 2.7.47, 2.8.0 to 2.8.40, 3.3.0 to 3.3.16, 3.4.0 to 3.4.10, and 4.0.0 to 4.0.10 versions of the Symfony http-foundation component are affected by this security issue...

Symfony 4.0.11 released

Symfony 4.0.11 has just been released. Here is a list of the most important changes: bug #27364 [DI] Fix bad exception on uninitialized references to non-shared services (@nicolas-grekas) bug #27...

Symfony 3.4.11 released

Symfony 3.4.11 has just been released. Here is a list of the most important changes: bug #27364 [DI] Fix bad exception on uninitialized references to non-shared services (@nicolas-grekas) bug #27...

Symfony 3.3.17 released

Symfony 3.3.17 has just been released. Here is a list of the most important changes: security #cve-2018-11407 [Ldap] cast to string when checking empty passwords security #cve-2018-11408 [SecurityBun...

Symfony News

Latest News

A week of symfony #598 (11-17 June 2018)

Call for Papers currently open for the upcoming Symfony conferences

CARE team training

A week of symfony #597 (4-10 June 2018)

SymfonyCon Lisbon: only 100 early bird tickets available!

A week of symfony #596 (28 May - 3 June 2018)

Symfony 4.1.0 released

Symfony 4.1 curated new features

New in Symfony 4.1: Misc. improvements (part 4)

New in Symfony 4.1: Misc. improvements (part 3)

A week of symfony #595 (21-27 May 2018)

Symfony 4.1.0-BETA3 released

CVE-2018-11385: Session Fixation Issue for Guard Authentication

CVE-2018-11406: CSRF Token Fixation

CVE-2018-11408: Open redirect vulnerability on security handlers

CVE-2018-11407: Unauthorized access on a misconfigured LDAP server when using an empty password

CVE-2018-11386: Denial of service when using PDOSessionHandler

Symfony 4.0.11 released

Symfony 3.4.11 released

Symfony 3.3.17 released

About us

Resources

Find us on Twitter

Find us on Facebook

ADS