Symfony News

A Week of Symfony #642 (15-21 April 2019)

This week, Symfony 2.7.51, 2.8.50, 3.4.26, 4.1.12 and 4.2.7 versions were released to address some security issues. Meanwhile, the upcoming Symfony 4.3 version added a native password hasher which cho...

Read more

---

CVE-2019-10913: Reject invalid HTTP method overrides

Affected versions Symfony 2.7.0 to 2.7.50, 2.8.0 to 2.8.49, 3.4.0 to 3.4.25, 4.1.0 to 4.1.11 and 4.2.0 to 4.2.6 versions of the Symfony HttpFoundation component are affected by this security issue. ...

Read more

---

CVE-2019-10910: Check service IDs are valid

Affected versions Symfony 2.7.0 to 2.7.50, 2.8.0 to 2.8.49, 3.4.0 to 3.4.25, 4.1.0 to 4.1.11 and 4.2.0 to 4.2.6 versions of the Symfony Dependency Injection component are affected by this security is...

Read more

---

CVE-2019-10911: Add a separator in the remember me cookie hash

Affected versions Symfony 2.7.0 to 2.7.50, 2.8.0 to 2.8.49, 3.4.0 to 3.4.25, 4.1.0 to 4.1.11 and 4.2.0 to 4.2.6 versions of Symfony Security component are affected by this security issue. The issue ...

Read more

---

CVE-2019-10909: Escape validation messages in the PHP templating engine

Affected versions Symfony 2.7.0 to 2.7.50, 2.8.0 to 2.8.49, 3.4.0 to 3.4.25, 4.1.0 to 4.1.11 and 4.2.0 to 4.2.6 versions of Symfony Framework Bundle templating are affected by this security issue. T...

Read more

---

CVE-2019-10912: Prevent destructors with side-effects from being unserialized

Affected versions Symfony 2.8.0 to 2.8.49, 3.4.0 to 3.4.25, 4.1.0 to 4.1.11 and 4.2.0 to 4.2.6 versions of the Symfony Cache component are affected by this security issue. The issue has been fixed i...

Read more

---

Symfony 4.2.7 released

Symfony 4.2.7 has just been released. Here is a list of the most important changes: bug #31107 [Routing] fix trailing slash redirection with non-greedy trailing vars (@nicolas-grekas) bug #31108 ...

Read more

---

Symfony 4.1.12 released

Symfony 4.1.12 has just been released. Here is a list of the most important changes: security #cve-2019-10910 [DI] Check service IDs are valid (@nicolas-grekas) security #cve-2019-10909 [Framewor...

Read more

---

Symfony 3.4.26 released

Symfony 3.4.26 has just been released. Here is a list of the most important changes: bug #31084 [HttpFoundation] Make MimeTypeExtensionGuesser case insensitive (@vermeirentony) bug #31142 Revert ...

Read more

---

Symfony 2.8.50 released

Symfony 2.8.50 has just been released. Here is a list of the most important changes: security #cve-2019-10910 [DI] Check service IDs are valid (@nicolas-grekas) security #cve-2019-10909 [Framewor...

Read more

---

Symfony 2.7.51 released

Symfony 2.7.51 has just been released. Here is a list of the most important changes: security #cve-2019-10910 [DI] Check service IDs are valid (@nicolas-grekas) security #cve-2019-10909 [Framewor...

Read more

---

New in Symfony 4.3: Sodium password encoder

Contributed by Robin Chalas in #31019. In Symfony 3.4 we added an Argon2i password hash...

Read more

---

New in Symfony 4.3: Simpler access to Intl data

Contributed by Roland Franssen in #28846. The ICU project ("International Componen...

Read more

---

Symfony 4.2.6 released

Symfony 4.2.6 has just been released. Here is a list of the most important changes: bug #31088 [DI] fix removing non-shared definition while inlining them (@nicolas-grekas) bug #29944 [DI] Overri...

Read more

---

Symfony 3.4.25 released

Symfony 3.4.25 has just been released. Here is a list of the most important changes: bug #29944 [DI] Overriding services autowired by name under _defaults bind not working (@przemyslaw-bogusz, &#...

Read more

---

New in Symfony 4.3: Workflow improvements

In Symfony 4.3 we improved the Workflow component with lots of major and minor features. This blog post summarizes the most important ones. Added a context to Workflow::apply()¶ ...

Read more

---

A Week of Symfony #641 (8-14 April 2019)

This week, Symfony development activity focused on merging the last new features of the upcoming Symfony 4.3 version (such as a new SodiumPasswordEncoder and support for setting a callback for Console...

Read more

---

Falta apenas 1 mês para o SymfonyLive São Paulo 2019

SymfonyLive conferences are organized in the language of their hosting country. This is why this post is in Portuguese. O SymfonyLive São Paulo está chegando! Junte-se a comunidade PHP e Symfony br...

Read more

---

New in Symfony 4.3: Better inflector

Contributed by Michael Babker, Nicolas Grekas in #26890 ...

Read more

---

SymfonyLive Warszawa 2019: discover the conference schedule!

The first SymfonyLive conference organized in Warszawa, Poland, is coming on June! The conference will be split into 2 parts: Tuesday 11th and Wednesday 12th are dedicated to the pre-conference wo...

Read more

---