Discover the speaker line-up for SymfonyLive New York, don't miss this great event!
September 9, 2014
#Community
#Conferences
This week Symfony released 2.3.19, 2.4.9 and 2.5.4 maintenance version to address several potential security vulnerabilities. In addition, the import/export feature of the web profiler was replaced by a CLI tool.
September 7, 2014
#A week of symfony
FOSUserBundle: Entropy of generated tokens is lost.
September 5, 2014
#Community
CVE-2014-6072 is about fixing a CSRF vulnerability in the Web Profiler.
September 3, 2014
#Security Advisories
CVE-2014-6061 is about a potential security issue when parsing the Authorization header.
September 3, 2014
#Security Advisories
CVE-2014-5245 is about being able to access ESI URLs even behind a trusted
proxy.
September 3, 2014
#Security Advisories
CVE-2014-5244 is about a potential denial of service with a malicious HTTP Host header.
September 3, 2014
#Security Advisories