Fedora 28: 2018-eba0006df2 Moderate: php-symfony CSRF Session Fix

PHP framework for web projects

**Version 2.8.41** (2018-05-25) * bug #27359 [HttpFoundation] Fix perf issue

during MimeTypeGuesser intialization (nicolas-grekas) * security

#cve-2018-11408 [SecurityBundle] Fail if security.http_utils cannot be

configured * security #cve-2018-11406 clear CSRF tokens when the user is logged

out * security #cve-2018-11385 Adding session authentication strategy to Guard

to avoid session fixation * security #cve-2018-11385 Adding session strategy to

ALL listeners to avoid *any* possible fixation * security #cve-2018-11386

[HttpFoundation] Break infinite loop in PdoSessionHandler when MySQL is in loose

mode ---- **Version 2.8.40** (2018-05-21) * bug #26781 [Form] Fix

precision of MoneyToLocalizedStringTransformer's divisions on transform()

(syastrebov) * bug #27286 [Translation] Add Occitan plural rule (kylekatarnls)

* bug #27246 Disallow invalid characters in session.name (ostrolucky) * bug

#24805 [Security] Fix logout (MatTheCat) * bug #27141 [Process] Suppress

warnings when open_basedir is non-empty (cbj4074) * bug #27250 [Session]

limiting :key for GET_LOCK to 64 chars (oleg-andreyev) * bug #27237 [Debug] Fix

populating error_get_last() for handled silent errors (nicolas-grekas) * bug

#27236 [Filesystem] Fix usages of error_get_last() (nicolas-grekas) * bug

#27152 [HttpFoundation] use brace-style regex delimiters (xabbuh) * feature

#24896 Add CODE_OF_CONDUCT.md (egircys)

* Mon May 28 2018 Remi Collet - 2.8.41-1

- update to 2.8.41

* Thu May 24 2018 Remi Collet - 2.8.40-1

- update to 2.8.40

* Fri May 4 2018 Remi Collet - 2.8.39-1

- update to 2.8.39

su -c 'dnf upgrade --advisory FEDORA-2018-eba0006df2' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/G4XNBMFW33H47O5TZGA7JYCVLDBCXAJV/