Symfony News

Symfony 4.4.38 released

Symfony 4.4.38 has just been released. Here is the list of the most important changes since 4.4.37: bug #44570 [WebProfilerBundle] add nonces to profiler (@garak) bug ...

Read more

---

A Week of Symfony #791 (21-27 February 2022)

This week, Symfony announced that Symfony 6.1 will require PHP 8.1. This is needed to fix some issues related to PHP preloading. We also decided to extend Symfony 6.0 ...

Read more

---

Symfony 6.1 will require PHP 8.1

Historically, we've always tried to keep the minimum PHP version for a new major Symfony version (X.0) for all its minor versions (X.Y). But recently, we've faced a ch...

Read more

---

Last talks and speakers announced for SymfonyLive Paris 2022

SymfonyLive Paris, the French Symfony conference welcomes the last conference speakers and their talks. Keynotes will be soon announced. Check out the conferen...

Read more

---

A Week of Symfony #790 (14-20 February 2022)

This week, Symfony introduced the Twig 3 certification and updated the official Symfony book to showcase Symfony 5.4 and 6.0 versions. In addition, SymfonyLive Paris 2...

Read more

---

All the pre-conference workshops at SymfonyLive Paris 2022 are announced

Le SymfonyLive Paris 2022 est un événement de 4 jours destiné à la communauté francophone de Symfony. Nous avons le plaisir de vous retrouver cette année : les 5-6 a...

Read more

---

The Symfony Fast Track book now available for Symfony 5.4 and 6.0

I'm very happy to announce that the Symfony book, "The Fast Track", is now available for Symfony 5.4 and Symfony 6.0. What's new? Besides updating the code to work wit...

Read more

---

Discover more talks and speakers selected for SymfonyLive Paris 2022

Discover more talks and speakers selected for SymfonyLive Paris 2022, the Symfony conference organized in French on April 7-8 2022. Le SymfonyLive Paris 202...

Read more

---

Last day of Call for Papers for SymfonyWorld Online 2022 Summer Edition

The SymfonyWorld Online 2022 Summer Edition international conference will be organized online on June 16-17 2022, entirely in English. Join us for 2 days of on...

Read more

---

Introducing the Twig 3 Certification

Twig is the fast, flexible, and secure template language for PHP. Twig syntax has been designed to be concise and easy to learn. This allows Twig to be used by all kin...

Read more

---

A Week of Symfony #789 (7-13 February 2022)

This week, the upcoming Symfony 6.1 version deprecated the $defaultName property in Console commands and added a new cache:pool:invalidate-tags command to ease the man...

Read more

---

First selected talks at SymfonyLive Paris 2022

First selected talks at SymfonyLive Paris 2022, discover the first talks scheduled at the French conference on April 7-8 2022. Nous sommes très heureux d’an...

Read more

---

Call for Papers open for SymfonyWorld Online 2022 Summer Edition and SymfonyCon Disneyland Paris 2022

We’re super excited with the upcoming conferences of 2022! Currently, the Call for Papers for SymfonyWorld Online 2022 Summer Edition and SymfonyCon Disneyland Paris ...

Read more

---

A Week of Symfony #788 (31 January - 6 February 2022)

This week, the upcoming Symfony 6.1 version added context builders to simplify the creation of serialization contexts. In addition, SymfonyCon announced that it's comi...

Read more

---

Twig security release: disallow non closures in the sort filter

Affected versions Twig >2.0.0,<2.14.11 || >3.0.0,<3.3.8 are affected by this security issue. Twig 1.x is not affected as the "sort" filter does not allow an arr...

Read more

---

Excited to announce SymfonyCon Disneyland Paris 2022

The SymfonyCon Disneyland Paris was initially scheduled in 2020, then postponed to 2021. But at that time, we didn't have enough visibility to organize it prop...

Read more

---

A Week of Symfony #787 (24-30 January 2022)

This week, Symfony 4.4.37, 5.3.14, 5.4.3 and 6.0.3 maintenance versions were released. In addition, a potential security vulnerability related to CSRF tokens in forms ...

Read more

---

CVE-2022-23601: CSRF token missing in forms

Affected versions Symfony 5.3.14, 5.4.3, and 6.0.3 versions of the Symfony Framework Bundle is affected by this security issue. The issue has been fixed in Symfony 5....

Read more

---

CVE-2022-xxxx: CSRF token missing in forms

Description The Symfony form component provides a CSRF protection mechanism by using a random token injected in the form and using the session to store and control th...

Read more

---

Symfony 6.0.4 released

Symfony 6.0.4 has just been released. Here is the list of the most important changes since 6.0.3: security #cve-2022-xxxx [FrameworkBundle] Enable CSRF in FORM by defa...

Read more

---