Symfony News

Symfony 6.0.0 released

Symfony 6.0.0 has just been released. Here is a list of the most important changes: bug #44309 [Messenger] Leverage DBAL's getNativeConnection() method (@derrabus) bug #44300 [Framewo...

Read more

---

Symfony 5.4.0 released

Symfony 5.4.0 has just been released. Here is a list of the most important changes: bug #44309 [Messenger] Leverage DBAL's getNativeConnection() method (@derrabus) bug #44300 [Framewo...

Read more

---

A Week of Symfony #778 (22-28 November 2021)

This week, Symfony 4.4.35 and 5.3.12 releases were published to address some potential security vulnerabilities. In addition, Symfony 5.4.0-RC1 and 6.0.0-RC1 were published in prepara...

Read more

---

New in Symfony 5.4: Notifier integrations

The Notifier component was introduced in Symfony 5.2 as the best way to send notifications via one or more channels (email, SMS, chats, etc.) The component is already integrated with ...

Read more

---

Last Days of Symfony Black Friday 2021 Deals

Symfony Black Friday 2021 deals will end in just three days, on Monday, November 29, 2021. Here's a quick recap of this year's deals: 30% discount on Symfony and Twig certifications C...

Read more

---

New in Symfony 5.4: Profiler improvements

In addition to the redesigned logs panel, Symfony 5.4 includes other improvements related to the Symfony profiler. Conditional profiling ...

Read more

---

Two weeks left before SymfonyWorld Online 2021 Winter Edition, book your ticket now!

The SymfonyWorld Online 2021 Winter Edition conference will take place in just two weeks, on December 9-10, 2021. The event includes 25 talks covering a wide range of topics related t...

Read more

---

New in Symfony 5.4: Messenger Improvements

Configurable handlers with PHP attributes Contributed by Alireza Mirsepassi in #43588. PHP...

Read more

---

CVE-2021-41268: Remember me cookie persistance after password changes

Description Since the rework of the Remember me cookie in Symfony 5.3, the cookie is not invalidated anymore when the user changes its password. Attackers can therefore maintain the...

Read more

---

CVE-2021-41267: Webcache Poisoning via X-Forwarded-Prefix and sub-request

Description When a Symfony application is running behind a proxy or a load-balancer, you can tell Symfony to look for the X-Forwarded-* HTTP headers. HTTP headers that are not part o...

Read more

---

CVE-2021-41270: Prevent CSV Injection via formulas

Description CSV Injection, also known as Formula Injection, occurs when websites embed untrusted input inside CSV files. When a spreadsheet program opens a CSV, any cell starting wit...

Read more

---

Symfony 6.0.0-RC1 released

Symfony 6.0.0-RC1 has just been released. Here is a list of the most important changes: security #cve-2021-41268 [SecurityBundle] Default signature_properties to the previous behavior...

Read more

---

Symfony 5.4.0-RC1 released

Symfony 5.4.0-RC1 has just been released. Here is a list of the most important changes: security #cve-2021-41268 [SecurityBundle] Default signature_properties to the previous behavior...

Read more

---

Symfony 5.3.12 released

Symfony 5.3.12 has just been released. Here is a list of the most important changes: security #cve-2021-41268 [SecurityBundle] Default signature_properties to the previous behavior (@...

Read more

---

Symfony 4.4.35 released

Symfony 4.4.35 has just been released. Here is a list of the most important changes: security #cve-2021-41270 [Serializer] Use single quote to escape formulas (@jderusse) bug #44232 [...

Read more

---

New in Symfony 5.4: DependencyInjection Improvements

Inject tagged services in service locators Contributed by Ion Bazan in #43015. In Symfony ...

Read more

---

Symfony 5.3.11 released

Symfony 5.3.11 has just been released. Here is a list of the most important changes: bug #44188 [VarExporter] fix exporting declared but unset properties when __sleep() is implemented...

Read more

---

Symfony 4.4.34 released

Symfony 4.4.34 has just been released. Here is a list of the most important changes: bug #44188 [VarExporter] fix exporting declared but unset properties when __sleep() is implemented...

Read more

---

A Week of Symfony #777 (15-21 November 2021)

This week, Symfony 5.4.0 BETA3 and 6.0.0 BETA3 versions were published so you can test them on your applications before their final release at the end of the month. In addition, the S...

Read more

---

New in Symfony 5.4: Translation Improvements

Renamed the Translation Update Command Contributed by Mathieu Santostefano in #43758. The ...

Read more

---