Fedora 35: 2021-10fd47b32d Moderate: php-symfony4 Information Disclosure

Symfony PHP framework (version 4).

NOTE: Does not require PHPUnit bridge.

**Version 4.4.35** (2021-11-24) * security **CVE-2021-41270** [Serializer]

Use single quote to escape formulas (jderusse) * bug #44232 [Cache] fix

connecting to local Redis sockets (nicolas-grekas) * bug #44204 [HttpClient]

fix closing curl multi handle when destructing client (nicolas-grekas) * bug

#44208 [Process] exclude argv/argc from possible default env vars (nicolas-grekas) ---- **Version 4.4.34** (2021-11-22) * bug #44188 [VarExporter] fix

exporting declared but unset properties when __sleep() is implemented (nicolas-grekas) * bug #44119 [HttpClient][Mime] Add correct IDN flags for IDNA2008

compliance (j-bernard) * bug #44131 [Yaml] properly parse quoted strings tagged

with !!str (xabbuh) * bug #42323 [TwigBridge] do not merge label classes into

expanded choice labels (xabbuh) * bug #44121 [Serializer] fix support for lazy

properties (nicolas-grekas) * bug #44111 [Serializer] fix support for unset

properties on PHP < 7.4 (nicolas-grekas) * bug #44070 [Process] intersect with

getenv() to populate default envs (nicolas-grekas) * bug #44043 [Cache] fix

dbindex Redis (a1812) * bug #44042 Fix

DateIntervalToStringTransformer::transform() doc (BenMorel) * bug #44034 [Yaml]

don't try to replace references in quoted strings (xabbuh) * bug #44028

[ErrorHandler] Fix FlattenException::setPrevious argument typing (welcoMattic)

* bug #44012 [DependencyInjection] fix inlining when non-shared services are

involved (nicolas-grekas) * bug #44002 [Cache] Fix Memory leak (a1812) * bug

#43981 [FrameworkBundle] fix registering late resettable services (nicolas-grekas) * bug #43988 [DoctrineBridge] add support for the JSON type (dunglas)

* bug #43987 [PhpUnitBridge] Fix Uncaught ValueError (dunglas) * bug #43961

[HttpClient] Curl http client has to reinit curl multi handle on reset

(rmikalkenas) * bug #43922 [DependencyInjection] only allow

`ReflectionNamedType` for `ServiceSubscriberTrait` (kbond) * bug #43901

[SecurityBundle] Default access_decision_manager.strategy option with merge

(biozshock) * bug #43909 [VarExporter] escape unicode chars involved in

directionality (nicolas-grekas) * bug #43867 [VarDumper] Make dumping

DateInterval instances timezone-independent (derrabus) * bug #43096 [Messenger]

Use `TransportMessageIdStamp` in `InMemoryTransport` allows retrying (alexndlm)

* bug #43501 [HttpKernel] fix ErrorException in CacheWarmerAggregate

(Ahummeling) * bug #42361 [Translation] correctly handle intl domains with

TargetOperation (acran) * bug #43834 [Inflector] Fix inflector for "zombies"

(acodispo) * bug #43267 [Config] Fix signature generation with nested

attributes on PHP 8.1 (agustingomes)

* Wed Nov 24 2021 Remi Collet - 4.4.35-1

- update to 4.4.35

* Tue Nov 23 2021 Remi Collet - 4.4.34-1

- update to 4.4.34

- allow psr/simple-cache v2

su -c 'dnf upgrade --advisory FEDORA-2021-10fd47b32d' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure