Symfony 2.8.49 released

December 6, 2018 • Published by Avatar of Fabien Potencier Fabien Potencier

Warning: Symfony 2.8 is no longer supported. Consider upgrading your applications to the most recent Symfony version.

Symfony 2.8.49 has just been released. Here is a list of the most important changes:

  • security #cve-2018-19790 [SecurityHttp] detect bad redirect targets using backslashes (@xabbuh)
  • security #cve-2018-19789 [Form] Filter file uploads out of regular form types (@nicolas-grekas)

Want to upgrade to this new release? Fortunately, because Symfony protects backwards-compatibility very closely, this should be quite easy. Read our upgrade documentation to learn more.

Want to be notified whenever a new Symfony release is published? Or when a version is not maintained anymore? Or only when a security issue is fixed? Consider subscribing to the Symfony Roadmap Notifications.

Published in #Releases

Help the Symfony project!

As with any Open-Source project, contributing code or documentation is the most common way to help, but we also have a wide range of sponsoring opportunities.

Comments

Avatar of Francesco Montanari
Francesco Montanari said on Dec 6, 2018

the links to cve... don't work

Avatar of Javier Eguiluz
Javier Eguiluz Certified said on Dec 10, 2018

@Francesco they don't work temporarily until the related CVE blog posts aren't published. But links work now. Thanks!

Comments are closed.

To ensure that comments stay relevant, they are closed for old posts.