Symfony News

Symfony 4.1.0-BETA3 released

Symfony 4.1.0-BETA3 has just been released. Here is a list of the most important changes: bug #27388 [Routing] Account for greediness when merging route patterns (@nicolas-grekas) bug #27344 [Htt...

Read more

---

CVE-2018-11406: CSRF Token Fixation

Affected versions Symfony 2.7.0 to 2.7.47, 2.8.0 to 2.8.40, 3.3.0 to 3.3.16, 3.4.0 to 3.4.10, and 4.0.0 to 4.0.10 versions of the Symfony Security component are affected by this security issue. The ...

Read more

---

CVE-2018-11386: Denial of service when using PDOSessionHandler

Affected versions Symfony 2.7.0 to 2.7.47, 2.8.0 to 2.8.40, 3.3.0 to 3.3.16, 3.4.0 to 3.4.10, and 4.0.0 to 4.0.10 versions of the Symfony http-foundation component are affected by this security issue...

Read more

---

CVE-2018-11407: Unauthorized access on a misconfigured LDAP server when using an empty password

Affected versions Symfony 2.8.0 to 2.8.36, 3.3.0 to 3.3.16, 3.4.0 to 3.4.6, and 4.0.0 to 4.0.6 versions of the Symfony LDAP component are affected by this security issue. The issue has been fixed in...

Read more

---

CVE-2018-11408: Open redirect vulnerability on security handlers

Affected versions Symfony 2.7.0 to 2.7.47, 2.8.0 to 2.8.40, 3.3.0 to 3.3.16, 3.4.0 to 3.4.10, and 4.0.0 to 4.0.10 versions of the Symfony Security component are affected by this security issue. The ...

Read more

---

CVE-2018-11385: Session Fixation Issue for Guard Authentication

Affected versions Symfony 2.7.0 to 2.7.47, 2.8.0 to 2.8.40, 3.3.0 to 3.3.16, 3.4.0 to 3.4.10 and 4.0.0 to 4.0.10 versions of the Symfony Security component are affected by this security issue. The i...

Read more

---

Symfony 4.0.11 released

Symfony 4.0.11 has just been released. Here is a list of the most important changes: bug #27364 [DI] Fix bad exception on uninitialized references to non-shared services (@nicolas-grekas) bug #27...

Read more

---

Symfony 3.4.11 released

Symfony 3.4.11 has just been released. Here is a list of the most important changes: bug #27364 [DI] Fix bad exception on uninitialized references to non-shared services (@nicolas-grekas) bug #27...

Read more

---

Symfony 3.3.17 released

Symfony 3.3.17 has just been released. Here is a list of the most important changes: security #cve-2018-11407 [Ldap] cast to string when checking empty passwords security #cve-2018-11408 [SecurityBun...

Read more

---

Symfony 2.8.41 released

Symfony 2.8.41 has just been released. Here is a list of the most important changes: bug #27359 [HttpFoundation] Fix perf issue during MimeTypeGuesser intialization (@nicolas-grekas) security #cv...

Read more

---

Symfony 2.7.48 released

Symfony 2.7.48 has just been released. Here is a list of the most important changes: bug #27359 [HttpFoundation] Fix perf issue during MimeTypeGuesser intialization (@nicolas-grekas) security #cv...

Read more

---

New in Symfony 4.1: Misc. improvements (part 2)

New choice_translation_locale option¶ Contributed by Yonel Ceruto in #26825. In Symfo...

Read more

---

New in Symfony 4.1: Misc. improvements (part 1)

During the past months we've published almost 40 blog posts about the main new features of Symfony 4.1. In this article you'll find some of the other small but nice new features. Made csrf_token() us...

Read more

---

New in Symfony 4.1: Configurable trailing slash on imported routes

Contributed by Nicolas Grekas in #26284. In Symfony 4.1 we worked hard on the Routing c...

Read more

---

Symfony 4.1.0-BETA2 released

Symfony 4.1.0-BETA2 has just been released. Here is a list of the most important changes: bug #27312 Supress deprecation notices thrown when getting private servies from container in tests (@arde...

Read more

---

Symfony 4.0.10 released

Symfony 4.0.10 has just been released. Here is a list of the most important changes: bug #27264 [Validator] Use strict type in URL validator (@mimol91) bug #27267 [DependencyInjection] resolve ar...

Read more

---

Symfony 3.4.10 released

Symfony 3.4.10 has just been released. Here is a list of the most important changes: bug #27264 [Validator] Use strict type in URL validator (@mimol91) bug #27267 [DependencyInjection] resolve ar...

Read more

---

Symfony 2.8.40 released

Symfony 2.8.40 has just been released. Here is a list of the most important changes: bug #26781 [Form] Fix precision of MoneyToLocalizedStringTransformer's divisions on transform() (@syastrebov) ...

Read more

---

Symfony 2.7.47 released

Symfony 2.7.47 has just been released. Here is a list of the most important changes: bug #26781 [Form] Fix precision of MoneyToLocalizedStringTransformer's divisions on transform() (@syastrebov) ...

Read more

---

A week of symfony #594 (14-20 May 2018)

This week, we continued polishing Symfony 4.1 before its stable release in two weeks. Our focus was on the Messenger component, which gained a ChainSender to implement multiple senders and also added ...

Read more

---