Skip to content

Symfony Blog

All about Symfony releases, new Symfony features, and other important announcements

In Symfony 4.3, the HttpCache responses can include more logging info so you can process it later to find more caching opportunities.
April 24, 2019 #Living on the edge
In Symfony 4.3, a new UrlHelper class will simplify the generation of absolute/relative URLs for a given path.
April 23, 2019 #Living on the edge
This week, Symfony 2.7.51, 2.8.50, 3.4.26, 4.1.12 and 4.2.7 versions were released to address some security issues. Meanwhile, the upcoming Symfony 4.3 version added a native password hasher which chooses the best hashing algorithm automatically.
April 21, 2019 #A week of symfony
CVE-2019-10912 fixes an issue where files could be deleted or raw output echoed when some classes were unserialized.
April 17, 2019 #Security Advisories
CVE-2019-10913 ensures that HTTP Methods are sanitized for use in unescaped contexts.
April 17, 2019 #Security Advisories
CVE-2019-10909 fixes an issue where when using the form theme of the PHP templating engine validation messages were not correctly escaped.
April 17, 2019 #Security Advisories
CVE-2019-10910 fixes an issue where crafted service IDs could be executed as code
April 17, 2019 #Security Advisories
CVE-2019-10911 fixes an issue where there was not a clear differentiation between different parts of the content of a cookie allowing for potential to authenticate as a different user in particular situations
April 17, 2019 #Security Advisories
April 17, 2019 #Releases
April 17, 2019 #Releases