CVE-2015-8125 fixes a potential remote timing attack vulnerability in Security remember-me service.
November 23, 2015
#Security Advisories
CVE-2015-8124 fixes a session fixation in the "Remember Me" login feature.
November 23, 2015
#Security Advisories
This week, the first beta of Symfony 2.8.0 and the first beta of Symfony 3.0.0 were released. In addition, we published an article about using Symfony as a microframework. Lastly, there were some tech discussions about the security voters and the need of the log folder.
November 22, 2015
#A week of symfony
Symfony 2.8 introduces a new microkernel trait which enables to use Symfony as a microframework. This will greatly simplify the creation of single-file (or just smaller) Symfony applications.
November 19, 2015
#Living on the edge
Paris, the city of light, was plunged into temporary darkness last weekend, but united we will find the strength to keep moving forward. In spite of these terrible attacks, the conference is going ahead as planned on its initial dates.
November 18, 2015
#Community
This week, Symfony project continued focusing on the stabilization of the upcoming 2.8 version. Meanwhile, the Symfony community organized a joint effort to make the most popular bundles compatible with Symfony 3. Check out the progress of this initiative and join us updating the Symfony ecosystem.
November 15, 2015
#A week of symfony
The Symfony Console component is our second most popular component, with more than 1 million monthly downloads and more than 2,300 projects depending on it. In Symfony 2.8 we extended its capabilities with some new features.
November 13, 2015
#Living on the edge
LDAP is used by lots of companies as a centralized repository for user information, including their security roles, and as an authentication service. That's why Symfony 2.8 includes a new LDAP component which provides seamless integration with the Symfony Security component.
November 11, 2015
#Living on the edge