FEDORA-2019-2a7f472198

security update in Fedora 28 for php-symfony3

Status: stable 4 months ago

Version 3.4.26 (2019-04-17)

  • bug #31084 [HttpFoundation] Make MimeTypeExtensionGuesser case insensitive (vermeirentony)
  • bug #31142 Revert "bug #30423 [Security] Rework firewall's access denied rule (dimabory)" (chalasr)
  • security #cve-2019-10910 [DI] Check service IDs are valid (nicolas-grekas)
  • security #cve-2019-10909 [FrameworkBundle][Form] Fix XSS issues in the form theme of the PHP templating engine (stof)
  • security #cve-2019-10912 [Cache][PHPUnit Bridge] Prevent destructors with side-effects from being unserialized (nicolas-grekas)
  • security #cve-2019-10911 [Security] Add a separator in the remember me cookie hash (pborreli)
  • security #cve-2019-10913 [HttpFoundation] reject invalid method override (nicolas-grekas)

Version 3.4.25 (2019-04-16)

  • bug #29944 [DI] Overriding services autowired by name under _defaults bind not working (przemyslaw-bogusz, renanbr)
  • bug #31076 [HttpKernel] Fixed LoggerDataCollector crashing on empty file (althaus)
  • bug #31071 property normalizer should also pass format and context to isAllowedAttribute (dbu)
  • bug #31059 Show more accurate message in profiler when missing stopwatch (linaori)
  • bug #30423 [Security] Rework firewall's access denied rule (dimabory)
  • bug #31012 [Process] Fix missing $extraDirs when open_basedir returns (arsonik)
  • bug #30907 [Serializer] Respect ignored attributes in cache key of normalizer (dbu)
  • bug #30085 Fix TestRunner compatibility to PhpUnit 8 (alexander-schranz)
  • bug #30977 [serializer] prevent mixup in normalizer of the object to populate (dbu)
  • bug #30976 [Debug] Fixed error handling when an error is already handled when another error is already handled (5) (lyrixx)
  • bug #30979 Fix the configurability of CoreExtension deps in standalone usage (stof)
  • bug #30918 [Cache] fix using ProxyAdapter inside TagAwareAdapter (dmaicher)
  • bug #30961 [Form] fix translating file validation error message (xabbuh)
  • bug #30951 Handle case where no translations were found (greg0ire)
  • bug #29800 [Validator] Only traverse arrays that are cascaded into (corphi)
  • bug #30921 [Translator] Warm up the translations cache in dev (tgalopin)
  • bug #30922 [TwigBridge] fix horizontal spacing of inlined Bootstrap forms (xabbuh)
  • bug #30895 [Form] turn failed file uploads into form errors (xabbuh)
  • bug #30919 [Translator] Fix wrong dump for PO files (deguif)
  • bug #30889 [DependencyInjection] Fix a wrong error when using a factory (Simperfit)
  • bug #30879 [Form] Php doc fixes and cs + optimizations (Jules Pietri)
  • bug #30883 [Console] Fix stty not reset when aborting in QuestionHelper::autocomplete() (Simperfit)
  • bug #30878 [Console] Fix inconsistent result for choice questions in non-interactive mode (chalasr)

Comments 7

This update has been submitted for testing by remi.

This update has obsoleted php-symfony3-3.4.25-1.fc28, and has inherited its bugs and notes.

This update has been pushed to testing.

This update has reached 7 days in testing and can be pushed to stable now if the maintainer wishes

This update has been submitted for batched by remi.

This update has been submitted for stable by bodhi.

This update has been pushed to stable.

Add Comment & Feedback

Please login to add feedback.

Content Type
RPM
Status
stable
Test Gating
Submitted by
Update Type
security
Update Severity
high
Karma
0
stable threshold: 3
unstable threshold: -3
Autopush (karma)
Enabled
Autopush (time)
Disabled
Dates
submitted 4 months ago
in testing 4 months ago
in stable 4 months ago

Automated Test Results