FEDORA-2021-121edb82dd — security update for php-symfony4

stable

php-symfony4-4.4.24-1.fc33

FEDORA-2021-121edb82dd created by remi 5 years ago for Fedora 33

Version 4.4.24 (2021-05-19)

security CVE-2021-21424 [Security\Core] Fix user enumeration via response body on invalid credentials (chalasr)
bug #41230 [FrameworkBundle][Validator] Fix deprecations from Doctrine Annotations+Cache (derrabus)
bug #41240 Fixed deprecation warnings about passing null as parameter (derrabus)
bug #41241 [Finder] Fix gitignore regex build with "**" (mvorisek)
bug #41224 [HttpClient] fix adding query string to relative URLs with scoped clients (nicolas-grekas)
bug #41233 [DependencyInjection][ProxyManagerBridge] Don't call class_exists() on null (derrabus)
bug #41210 [Console] Fix Windows code page support (orkan)

Version 4.4.23 (2021-05-12)

security CVE-2021-21424 [Security][Guard] Prevent user enumeration (chalasr)
bug #41176 [DependencyInjection] fix dumping service-closure-arguments (nicolas-grekas)
bug #41168 WDT: Only load "Sfjs" if it is not present already (weaverryan)
bug #41147 [Inflector][String] wrong plural form of words ending by "pectus" (makraz)
bug #41160 [HttpClient] Don't prepare the request in ScopingHttpClient (nicolas-grekas)
bug #40763 Fix/Rewrite .gitignore regex builder (mvorisek)
bug #40917 [Config][DependencyInjection] Uniformize trailing slash handling (dunglas)
bug #40699 [PropertyInfo] Make ReflectionExtractor correctly extract nullability (shiftby)
bug #40874 [PropertyInfo] fix attribute namespace with recursive traits (soullivaneuh)
bug #41099 [Cache] Check if phpredis version is compatible with stream parameter (nicolassing)
bug #41072 [VarExporter] Add support of PHP enumerations (alexandre-daubois)
bug #41105 [Inflector][String] Fixed singularize edges > edge (ruudk)
bug #41075 [ErrorHandler] Skip "same vendor" @method deprecations for Symfony\* classes unless symfony/symfony is being tested (nicolas-grekas)

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2021-121edb82dd

This update has been submitted for testing by remi.

5 years ago

This update's test gating status has been changed to 'ignored'.

5 years ago

This update's test gating status has been changed to 'waiting'.

5 years ago

This update has obsoleted php-symfony4-4.4.23-1.fc33, and has inherited its bugs and notes.

5 years ago

This update's test gating status has been changed to 'ignored'.

5 years ago

This update has been pushed to testing.

5 years ago

This update has been submitted for stable by bodhi.

5 years ago

This update has been pushed to stable.

5 years ago

Please log in to add feedback.

Metadata

Type

security

Severity

low

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

7 days

Dates

submitted

5 years ago

in testing

5 years ago

in stable

5 years ago

Builds

php-symfony4-4.4.24-1.fc33

BZ#1960631 CVE-2021-21424 php-symfony: user enumeration in authentication mechanisms [fedora-all]

php-symfony4-4.4.24-1.fc33

Automated Test Results

ignored