--------------------------------------------------------------------------------Fedora Update Notification
FEDORA-2018-eba0006df2
2018-06-06 13:29:38.347930
--------------------------------------------------------------------------------Name        : php-symfony
Product     : Fedora 28
Version     : 2.8.41
Release     : 1.fc28
URL         : https://symfony.com/
Summary     : PHP framework for web projects
Description :
PHP framework for web projects

--------------------------------------------------------------------------------Update Information:

**Version  2.8.41** (2018-05-25)   * bug #27359 [HttpFoundation] Fix perf issue
during MimeTypeGuesser intialization (nicolas-grekas)  * security
#cve-2018-11408 [SecurityBundle] Fail if security.http_utils cannot be
configured  * security #cve-2018-11406 clear CSRF tokens when the user is logged
out  * security #cve-2018-11385 Adding session authentication strategy to Guard
to avoid session fixation  * security #cve-2018-11385 Adding session strategy to
ALL listeners to avoid *any* possible fixation  * security #cve-2018-11386
[HttpFoundation] Break infinite loop in PdoSessionHandler when MySQL is in loose
mode   ----  **Version  2.8.40** (2018-05-21)   * bug #26781 [Form] Fix
precision of MoneyToLocalizedStringTransformer's divisions on transform()
(syastrebov)  * bug #27286 [Translation] Add Occitan plural rule (kylekatarnls)
* bug #27246 Disallow invalid characters in session.name (ostrolucky)  * bug
#24805 [Security] Fix logout (MatTheCat)  * bug #27141 [Process] Suppress
warnings when open_basedir is non-empty (cbj4074)  * bug #27250 [Session]
limiting :key for GET_LOCK to 64 chars (oleg-andreyev)  * bug #27237 [Debug] Fix
populating error_get_last() for handled silent errors (nicolas-grekas)  * bug
#27236 [Filesystem] Fix usages of error_get_last() (nicolas-grekas)  * bug
#27152 [HttpFoundation] use brace-style regex delimiters (xabbuh)  * feature
#24896 Add CODE_OF_CONDUCT.md (egircys)
--------------------------------------------------------------------------------ChangeLog:

* Mon May 28 2018 Remi Collet  - 2.8.41-1
- update to 2.8.41
* Thu May 24 2018 Remi Collet  - 2.8.40-1
- update to 2.8.40
* Fri May  4 2018 Remi Collet  - 2.8.39-1
- update to 2.8.39
--------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2018-eba0006df2' at the command
line. For more information, refer to the dnf documentation available at
https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/security/
--------------------------------------------------------------------------------
_______________________________________________
package-announce mailing list -- package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/G4XNBMFW33H47O5TZGA7JYCVLDBCXAJV/

Fedora 28: php-symfony Security Update 2018-eba0006df2

June 6, 2018
**Version 2.8.41** (2018-05-25) * bug #27359 [HttpFoundation] Fix perf issue during MimeTypeGuesser intialization (nicolas-grekas) * security #cve-2018-11408 [SecurityBundle] Fail...

Summary

PHP framework for web projects

**Version 2.8.41** (2018-05-25) * bug #27359 [HttpFoundation] Fix perf issue

during MimeTypeGuesser intialization (nicolas-grekas) * security

#cve-2018-11408 [SecurityBundle] Fail if security.http_utils cannot be

configured * security #cve-2018-11406 clear CSRF tokens when the user is logged

out * security #cve-2018-11385 Adding session authentication strategy to Guard

to avoid session fixation * security #cve-2018-11385 Adding session strategy to

ALL listeners to avoid *any* possible fixation * security #cve-2018-11386

[HttpFoundation] Break infinite loop in PdoSessionHandler when MySQL is in loose

mode ---- **Version 2.8.40** (2018-05-21) * bug #26781 [Form] Fix

precision of MoneyToLocalizedStringTransformer's divisions on transform()

(syastrebov) * bug #27286 [Translation] Add Occitan plural rule (kylekatarnls)

* bug #27246 Disallow invalid characters in session.name (ostrolucky) * bug

#24805 [Security] Fix logout (MatTheCat) * bug #27141 [Process] Suppress

warnings when open_basedir is non-empty (cbj4074) * bug #27250 [Session]

limiting :key for GET_LOCK to 64 chars (oleg-andreyev) * bug #27237 [Debug] Fix

populating error_get_last() for handled silent errors (nicolas-grekas) * bug

#27236 [Filesystem] Fix usages of error_get_last() (nicolas-grekas) * bug

#27152 [HttpFoundation] use brace-style regex delimiters (xabbuh) * feature

#24896 Add CODE_OF_CONDUCT.md (egircys)

* Mon May 28 2018 Remi Collet - 2.8.41-1

- update to 2.8.41

* Thu May 24 2018 Remi Collet - 2.8.40-1

- update to 2.8.40

* Fri May 4 2018 Remi Collet - 2.8.39-1

- update to 2.8.39

su -c 'dnf upgrade --advisory FEDORA-2018-eba0006df2' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/G4XNBMFW33H47O5TZGA7JYCVLDBCXAJV/

FEDORA-2018-eba0006df2 2018-06-06 13:29:38.347930 Product : Fedora 28 Version : 2.8.41 Release : 1.fc28 URL : https://symfony.com/ Summary : PHP framework for web projects Description : PHP framework for web projects **Version 2.8.41** (2018-05-25) * bug #27359 [HttpFoundation] Fix perf issue during MimeTypeGuesser intialization (nicolas-grekas) * security #cve-2018-11408 [SecurityBundle] Fail if security.http_utils cannot be configured * security #cve-2018-11406 clear CSRF tokens when the user is logged out * security #cve-2018-11385 Adding session authentication strategy to Guard to avoid session fixation * security #cve-2018-11385 Adding session strategy to ALL listeners to avoid *any* possible fixation * security #cve-2018-11386 [HttpFoundation] Break infinite loop in PdoSessionHandler when MySQL is in loose mode ---- **Version 2.8.40** (2018-05-21) * bug #26781 [Form] Fix precision of MoneyToLocalizedStringTransformer's divisions on transform() (syastrebov) * bug #27286 [Translation] Add Occitan plural rule (kylekatarnls) * bug #27246 Disallow invalid characters in session.name (ostrolucky) * bug #24805 [Security] Fix logout (MatTheCat) * bug #27141 [Process] Suppress warnings when open_basedir is non-empty (cbj4074) * bug #27250 [Session] limiting :key for GET_LOCK to 64 chars (oleg-andreyev) * bug #27237 [Debug] Fix populating error_get_last() for handled silent errors (nicolas-grekas) * bug #27236 [Filesystem] Fix usages of error_get_last() (nicolas-grekas) * bug #27152 [HttpFoundation] use brace-style regex delimiters (xabbuh) * feature #24896 Add CODE_OF_CONDUCT.md (egircys) * Mon May 28 2018 Remi Collet - 2.8.41-1 - update to 2.8.41 * Thu May 24 2018 Remi Collet - 2.8.40-1 - update to 2.8.40 * Fri May 4 2018 Remi Collet - 2.8.39-1 - update to 2.8.39 su -c 'dnf upgrade --advisory FEDORA-2018-eba0006df2' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ package-announce mailing list -- package-announce@lists.fedoraproject.org To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/G4XNBMFW33H47O5TZGA7JYCVLDBCXAJV/

Change Log

References

Update Instructions

Severity
Product : Fedora 28
Version : 2.8.41
Release : 1.fc28
URL : https://symfony.com/
Summary : PHP framework for web projects

Related News