Have found a security issue in Symfony? Send the details to
security [at] symfony.com and don't
disclose it publicly until we can provide a fix for it.
Manage your notification preferences to receive an email as soon as a Symfony security release is published.
symfony 1.4.18 has just been released. It contains a security fix.
May 30, 2012
#Security Advisories
Symfony 2.0.11 has just been released. Read the post as this release fixes a security vulnerability in the Serializer Component.
February 24, 2012
#Security Advisories
Symfony 2.0.6 addresses a security vulnerability in the EntityUserProvider as
provided in the Doctrine bridge.
November 16, 2011
#Security Advisories
These releases include yesterday's Doctrine security release.
March 21, 2011
#Security Advisories
This patch addresses a security vulnerability in the view cache that was introduced with symfony 1.3 and 1.4.
June 29, 2010
#Security Advisories
Read more about the latest versions of symfony 1.3 and 1.4 here.
May 31, 2010
#Security Advisories
This release addresses a security vulnerability discovered earlier today.
February 25, 2010
#Security Advisories
These releases include numerous bug fixes and one security fix. All 1.3.x and 1.4.x users should upgrade their projects immediately.
February 13, 2010
#Security Advisories
In accordance with our
security policy,
we are releasing today symfony 1.2.6 to fix a security issue that has been
spotted by the symfony core team.
April 27, 2009
#Security Advisories
In accordance with our security policy, we are releasing today symfony 1.1.4 to fix a security issue that has been reported by a symfony user earlier today. This post contains the description of the vulnerability and the description of the changes we have made to fix it. The affected symfony versions are all symfony 1.1 releases and the 1.2 branch.
October 3, 2008
#Security Advisories