Symfony 5.4.47 released

November 13, 2024 • Published by Avatar of Fabien Potencier Fabien Potencier

Symfony 5.4 is backed by:

Private Packagist is a fast, reliable, and secure Composer repository for your private packages. It mirrors all your open-source dependencies for better availability and monitors them for security vulnerabilities.
Ibexa is the leading DXP for Symfony developers. Ibexa DXP is used across the world by thousands of websites/shops/portals and supported by a fantastic, passionate community of developers, agencies, and users. We love Symfony!

Symfony 5.4.47 has just been released. Here is the list of the most important changes since 5.4.46:

  • security #cve-2024-50342 [HttpClient] Resolve hostnames in NoPrivateNetworkHttpClient (@nicolas-grekas)
  • security #cve-2024-51996 [Security] Check owner of persisted remember-me cookie (@jderusse)
  • bug #58799 [String] Fix some spellings in EnglishInflector (@alexandre-daubois)
  • bug #58791 [RateLimiter] handle error results of DateTime::modify() (@xabbuh)
  • bug #58800 [PropertyInfo] fix support for phpstan/phpdoc-parser 2 (@xabbuh)

Want to upgrade to this new release? Because Symfony protects backwards-compatibility very closely, this should be quite easy. Use SymfonyInsight upgrade reports to detect the code you will need to change in your project and read our upgrade documentation to learn more.

Want to be notified whenever a new Symfony release is published? Or when a version is not maintained anymore? Or only when a security issue is fixed? Consider subscribing to the Symfony Roadmap Notifications.

Published in #Releases

Help the Symfony project!

As with any Open-Source project, contributing code or documentation is the most common way to help, but we also have a wide range of sponsoring opportunities.

Comments

Login with SymfonyConnect to comment