CVE-2014-6061: Security issue when parsing the Authorization header
Affected Versions¶All 2.0.X, 2.1.X, 2.2.X, 2.3.X, 2.4.X, and 2.5.X versions of the Symfony HttpFoundation component are affected by this security issue.This issue has been fixed in Symfony 2.3.19,...
View ArticleSymfony 2.3.19 released
Symfony 2.3.19 has just been released. Here is a list of the most important changes:security #11832CVE-2014-6072 (fabpot)security #11831CVE-2014-5245 (stof)security #11830CVE-2014-4931 (aitboudad,...
View ArticleSymfony 2.4.9 released
Symfony 2.4.9 has just been released. Here is a list of the most important changes:security #11832CVE-2014-6072 (fabpot)security #11831CVE-2014-5245 (stof)security #11830CVE-2014-4931 (aitboudad,...
View ArticleSymfony 2.5.4 released
Symfony 2.5.4 has just been released. Here is a list of the most important changes:security #11832CVE-2014-6072 (fabpot)security #11831CVE-2014-5245 (stof)security #11830CVE-2014-4931 (aitboudad,...
View ArticleFOSUserBundle: Entropy of generated tokens is lost
Affected versions¶All 1.0.x, 1.1.x, 1.2.x and 1.3.x versions of FOSUserBundle are affected by this security issue. The 2.0.x development version is not affected.The issue has been fixed in...
View ArticleA week of symfony #401 (01->07 September 2014)
This week Symfony released 2.3.19, 2.4.9 and 2.5.4 maintenance version to address several potential security vulnerabilities. In addition, the import/export feature of the web profiler was replaced by...
View ArticleThe full agenda for SymfonyLive New York is now online!
We’ve finally put together the entire schedule for SymfonyLive New York 2014 and this year’s edition is simply awesome! We’re extremely pleased to welcome speakers from eZ, Drupal and Drupal Commerce...
View ArticleA week of symfony #402 (08->14 September 2014)
This week, Symfony project focused on the Intl component, adding some features and proposing a few changes to make it easier to use. Meanwhile, the discussions about the new Symfony installer continued...
View ArticleThelia, a Symfony-based e-commerce solution
An interview with Manuel Raynaud, lead developer of Thelia, a Symfony-based e-commerce solution. Introducing the new Thelia 2 and how it's in perfect harmony with Symfony.Could you please first...
View ArticleA week of symfony #403 (15->21 September 2014)
This week, the development activity of Symfony increased significantly because we are approaching the end of the development phase for 2.6 version, which is scheduled for the end of this month. As part...
View ArticleSymfony 2.6 fast approaching its stabilization phase
Symfony release process follows a time-based model where a new minor version is released every six months: one in May and one in November. The first four months of each period are the development...
View ArticleNew in Symfony 2.6: Smarter assets:install command
Contributed by Roy Van Ginneken in #11312.The assets:install command is one of the trickiest things for Symfony newcomers. This command is used to install the web assets (CSS, JavaScript, images) for...
View ArticleNew in Symfony 2.6: LockHandler
Contributed by Grégoire Pineau in #10475.File locking is a mechanism that restricts access to a computer file by allowing only one user or process access at any specific time. This mechanism was...
View ArticleNew in Symfony 2.6: New shortcut methods for controllers
Contributed by Thomas Royer in #11593. andGrégoire Pineau in #11602.Symfony comes with a very handy base Controller class that assists with some of the most common controller tasks. When your...
View ArticleNew in Symfony 2.6: Date support for Validator constraints
Contributed by Bernhard Schussek in #11673.Comparing dates is one of the most frequently requested functionalities for the Symfony Validator component. That's why Symfony 2.6 will include date support...
View ArticleA week of symfony #404 (22->28 September 2014)
This week finished the development phase for the upcoming Symfony 2.6 version. Development activity was frantic to include all the great features that will be polished during the two month...
View ArticleSymfony 2.3.20 released
Symfony 2.3.20 has just been released. Here is a list of the most important changes:bug #9453 [Form][DateTime] Propagate invalid_message & invalid_message_parameters to date & time (egeloen)bug...
View ArticleSymfony 2.4.10 released
Symfony 2.4.10 has just been released. Here is a list of the most important changes:bug #9453 [Form][DateTime] Propagate invalid_message & invalid_message_parameters to date & time (egeloen)bug...
View ArticleSymfony 2.5.5 released
Symfony 2.5.5 has just been released. Here is a list of the most important changes:bug #12016 [Validator] Added ConstraintValidator::buildViolation() helper for BC with the 2.4 API (webmozart)bug...
View ArticleNew in Symfony 2.6: Simpler Security Voters
Contributed by Roman Marintšenko andRyan Weaver in #11183.Security Voters provide a mechanism to set up fine-grained restrictions in Symfony applications. The main advantage over ACLs is that they are...
View Article