Symfony News

A Week of Symfony #840 (30 January - 5 February 2023)

This week, Symfony 4.4.50, 5.4.20, 6.0.20, 6.1.12, and 6.2.6 were released to address some security issues related to CSRF tokens and cookie headers in HTTP Cache. Moreover, we celebrated the companie...

Read more

---

SymfonyLive Paris 2023 - Getting ready for Symfony certification - and beyond

SymfonyLive Paris 2023, conference in French language only, will take place from March 23 to 24! The schedule is currently being revealed as we go along. More details are available here. Nou...

Read more

---

SymfonyLive Paris 2023 - Announcement of all pre-conference workshops

SymfonyLive Paris 2023, conference in French language only, will take place in less than 2 months already, from March 23 to 24! Today we are excited to announced all the practical workshops tha...

Read more

---

SymfonyLive Paris 2023 - Welcome to the wonderful world of distributed systems!

SymfonyLive Paris 2023, conference in French language only, will take place in less than 2 months already, from March 23 to 24! The schedule is currently being revealed as we go along. More det...

Read more

---

SymfonyLive Paris 2023 - From social to tech - a plea for atypical profiles

SymfonyLive Paris 2023, conference in French language only, will take place from March 23 & 24! As this event approaches we are pleased to announce you the next person joining the speaker t...

Read more

---

SymfonyLive Paris 2023 - Generics (in PHP)

SymfonyLive Paris 2023, conference in French language only, will take place from March 23 & 24! The schedule is currently being revealed as we go along. Join us by registering now. More de...

Read more

---

SymfonyLive Paris 2023 - Reinventing the Symfony Console component

SymfonyLive Paris 2023, conference in French language only, will take place in less than 2 months already, from March 23 to 24! The schedule is currently being revealed as we go along. More det...

Read more

---

CVE-2022-24894: Prevent storing cookie headers in HttpCache

Affected versions Symfony versions >=2.0.0, <4.4.50, >= 5.0.0, < 5.4.20, >= 6.0.0, < 6.0.20, >= 6.1.0, < 6.1.12, and >= 6.2.0, < 6.2.6 of the Symfony Security Bundle are...

Read more

---

CVE-2022-24895: CSRF token fixation

Affected versions Symfony versions >=2.0.0, <4.4.50, >= 5.0.0, < 5.4.20, >= 6.0.0, < 6.0.20, >= 6.1.0, < 6.1.12, and >= 6.2.0, < 6.2.6 of the Symfony Security Bundle are...

Read more

---

Symfony 6.2.6 released

Symfony 6.2.6 has just been released. Here is the list of the most important changes since 6.2.5: bug #49141 [HttpFoundation] Fix bad return type in IpUtils::checkIp4() (@tristankretzer) bug #491...

Read more

---

Symfony 6.1.12 released

Symfony 6.1.12 has just been released. Here is the list of the most important changes since 6.1.11: bug #49141 [HttpFoundation] Fix bad return type in IpUtils::checkIp4() (@tristankretzer) bug #4...

Read more

---

Symfony 6.0.20 released

Symfony 6.0.20 has just been released. Here is the list of the most important changes since 6.0.19: bug #49141 [HttpFoundation] Fix bad return type in IpUtils::checkIp4() (@tristankretzer) bug #4...

Read more

---

Symfony 5.4.20 released

Symfony 5.4.20 has just been released. Here is the list of the most important changes since 5.4.19: bug #49141 [HttpFoundation] Fix bad return type in IpUtils::checkIp4() (@tristankretzer) bug #4...

Read more

---

Symfony 4.4.50 released

Symfony 4.4.50 has just been released. Here is the list of the most important changes since 4.4.49: security #cve-2022-24895 [Security/Http] Remove CSRF tokens from storage on successful login (@...

Read more

---

Sponsoring Program - Symfony 6.2 backers

The Symfony 6.2 release has brought many new components and improvements like the Clock Component, better Emoji Support, Notifier and Mailer Integrations, Uid Features and many more. This would not ha...

Read more

---

SymfonyLive Paris 2023 - Designing your API for the future

SymfonyLive Paris 2023, conference in French language only, will take place from March 23 & 24! The schedule is currently being revealed as we go along. Join us by registering now. More de...

Read more

---

A Week of Symfony #839 (23-29 January 2023)

This week, Symfony 5.4.19, 6.0.19, 6.1.11 and 6.2.5 maintenance versions were released. The 6.0 and 6.1 branches will no longer receive any updates, so consider updating your projects to Symfony 6.2. ...

Read more

---

SymfonyLive Paris 2023 - Once upon a time, the Workflow component

SymfonyLive Paris 2023, conference in French language only, will take place from March 23 & 24! The schedule is currently being revealed as we go along. More details are available here. ...

Read more

---

Symfony 6.2.5 released

Symfony 6.2.5 has just been released. Here is the list of the most important changes since 6.2.4: bug #49078 [Security/Http] Check tokens before loading users from providers (@nicolas-grekas) bug...

Read more

---

Symfony 6.1.11 released

Symfony 6.1.11 has just been released. Here is the list of the most important changes since 6.1.10: bug #49078 [Security/Http] Check tokens before loading users from providers (@nicolas-grekas) b...

Read more

---