Get ready for the exciting SymfonyOnline January 2024 event. Today, is the last day left to enjoy the regular registration ticket! Let's break down the schedule for you:
January 16 - 17: online pre-conference workshop days
⏲️ Each day, workshops will… https://symfony.com/blog/symfonyonline-january-2024-last-day-to-enjoy-the-regular-registration?utm_source=Symfony%20Blog%20Feed&utm_medium=feed
This week, Symfony 6.4.0 beta 3 and Symfony 7.0.0 beta 3 were published because their final release is approaching fast and it will take place before the end of November 2023. Meanwhile, the maintenance versions 4.4.51, 5.4.31 and 6.3.8 were published to… https://symfony.com/blog/a-week-of-symfony-880-6-12-november-2023?utm_source=Symfony%20Blog%20Feed&utm_medium=feed
Affected versions Symfony versions >=2.0.0,<4.4.51, >=5.0.0,<5.4.31, and =6.0.0,<6.3.8 of the Symfony Twig Bridge are affected by this security issue. The issue has been fixed in Symfony 4.4.51, 5.4.31, 6.3.8. All other versions are not maintained… https://symfony.com/blog/cve-2023-46734-potential-xss-vulnerabilities-in-codeextension-filters?utm_source=Symfony%20Blog%20Feed&utm_medium=feed
Affected versions Symfony versions >=5.4.21, <5.4.31, and >= 6.2.7, < 6.3.8 of the Symfony Security HTTP component are affected by this security issue. The issue has been fixed in Symfony 5.4.31, 6.3.8. Description SessionStrategyListener does… https://symfony.com/blog/cve-2023-46733-possible-session-fixation?utm_source=Symfony%20Blog%20Feed&utm_medium=feed
Symfony 6.4.0-BETA3 has just been released. Here is the list of the most important changes since 6.4.0-BETA2:
bug #51666 [RateLimiter] CompoundLimiter was accepting requests even when some limiters already consumed all tokens (@10n)
bug #52524 [AssetMapper]… https://symfony.com/blog/symfony-6-4-0-beta3-released?utm_source=Symfony%20Blog%20Feed&utm_medium=feed
Affected versions Symfony versions >=6.3.0, <6.3.8 of the Symfony Webhook component are affected by this security issue. The issue has been fixed in Symfony 6.3.8. Description The error message in WebhookController returns unescaped user-submitted… https://symfony.com/blog/cve-2023-46735-potential-xss-in-webhookcontroller?utm_source=Symfony%20Blog%20Feed&utm_medium=feed
Symfony 7.0.0-BETA3 has just been released. Here is the list of the most important changes since 7.0.0-BETA2:
bug #51666 [RateLimiter] CompoundLimiter was accepting requests even when some limiters already consumed all tokens (@10n)
bug #52524 [AssetMapper]… https://symfony.com/blog/symfony-7-0-0-beta3-released?utm_source=Symfony%20Blog%20Feed&utm_medium=feed
SymfonyCon Brussels 2023 is just around the corner and will start on:
December 5-6: Workshop days. It is possible to attend 1 two-day training or 2 one-day trainings! December 7-8: Conference days with 3 parallels tracks and 1 unconference track… https://symfony.com/blog/symfonycon-brussels-2023-from-chaos-to-control-exception-handling-in-symfony?utm_source=Symfony%20Blog%20Feed&utm_medium=feed
Symfony 5.4.31 has just been released. Here is the list of the most important changes since 5.4.30:
security #cve-2023-46734 [TwigBridge] Ensure CodeExtension's filters properly escape their input (@nicolas-grekas, @GromNaN)
security #cve-2023-46733… https://symfony.com/blog/symfony-5-4-31-released?utm_source=Symfony%20Blog%20Feed&utm_medium=feed
Symfony 4.4.51 has just been released. Here is the list of the most important changes since 4.4.50:
security #cve-2023-46734 [TwigBridge] Ensure CodeExtension's filters properly escape their input (@nicolas-grekas, @GromNaN)
Want to upgrade to this… https://symfony.com/blog/symfony-4-4-51-released?utm_source=Symfony%20Blog%20Feed&utm_medium=feed