Download Symfony 4.1.3 / 4.0.14 / 3.4.14 / 3.3.18 / 2.8.44 / 2.7.49

Symfony is a php web application framework and is available under the mit license† In addition to a framework and reusable components offers Symfony a philosophy, methodology and community, supported by SensioLabs. There are also various topics about this on our Forum. The developers released versions 4.1.3, 4.0.14, 3.4.14, 3.3.18, 2.8.44, and 2.7.49 a few days ago with the following announcements:

Symphony 4.1.3 released

Symfony 4.1.3 has just been released. Here is a list of the most important changes:

• security #cve-2018-14774 [HttpKernel] fix trusted headers management in HttpCache and InlineFragmentRenderer (@nicolas-grekas)
• security #cve-2018-14773 [HttpFoundation] Remove support for legacy and risky HTTP headers (@nicolas-grekas)
• bug #28003 [HttpKernel] Fixes invalid REMOT _ADDR in inline subrequest when configuring trusted proxy with subnet (@netiul)
• bug #28007 [FrameworkBundle] fixed guard event names for transitions (@destillat)
• bug #28045 [HttpFoundation] Fix Cookie::isCleared (@ro0NL)
• bug #28080 [HttpFoundation] fixed using _method parameter with invalid type (@Phobetor)
• bug #28059 [Messenger] Fix error message on undefined message class for non-subscriber handler (@chalasr)
• bug #28052 [HttpKernel] Fix merging bindings for controllers’ locators (@nicolas-grekas)
• bug #28014 [Messenger] Fix chaining senders with their aliases (@sroze)

Symphony 4.0.14 released

Symfony 4.0.14 has just been released. Here is a list of the most important changes:

• security #cve-2018-14774 [HttpKernel] fix trusted headers management in HttpCache and InlineFragmentRenderer (@nicolas-grekas)
• security #cve-2018-14773 [HttpFoundation] Remove support for legacy and risky HTTP headers (@nicolas-grekas)
• bug #28003 [HttpKernel] Fixes invalid REMOT _ADDR in inline subrequest when configuring trusted proxy with subnet (@netiul)
• bug #28007 [FrameworkBundle] fixed guard event names for transitions (@destillat)
• bug #28045 [HttpFoundation] Fix Cookie::isCleared (@ro0NL)
• bug #28080 [HttpFoundation] fixed using _method parameter with invalid type (@Phobetor)
• bug #28052 [HttpKernel] Fix merging bindings for controllers’ locators (@nicolas-grekas)

Symphony 3.4.14 released

Symfony 3.4.14 has just been released. Here is a list of the most important changes:

• security #cve-2018-14774 [HttpKernel] fix trusted headers management in HttpCache and InlineFragmentRenderer (@nicolas-grekas)
• security #cve-2018-14773 [HttpFoundation] Remove support for legacy and risky HTTP headers (@nicolas-grekas)
• bug #28003 [HttpKernel] Fixes invalid REMOT _ADDR in inline subrequest when configuring trusted proxy with subnet (@netiul)
• bug #28007 [FrameworkBundle] fixed guard event names for transitions (@destillat)
• bug #28045 [HttpFoundation] Fix Cookie::isCleared (@ro0NL)
• bug #28080 [HttpFoundation] fixed using _method parameter with invalid type (@Phobetor)
• bug #28052 [HttpKernel] Fix merging bindings for controllers’ locators (@nicolas-grekas)

Symphony 3.3.18 released

Symfony 3.3.18 has just been released. Here is a list of the most important changes:

• security #cve-2018-14774 [HttpKernel] fix trusted headers management in HttpCache and InlineFragmentRenderer (@nicolas-grekas)
• security #cve-2018-14773 [HttpFoundation] Remove support for legacy and risky HTTP headers (@nicolas-grekas)

Symphony 2.8.44 released

Symfony 2.8.44 has just been released. Here is a list of the most important changes:

• security #cve-2018-14774 [HttpKernel] fix trusted headers management in HttpCache and InlineFragmentRenderer (@nicolas-grekas)
• security #cve-2018-14773 [HttpFoundation] Remove support for legacy and risky HTTP headers (@nicolas-grekas)
• bug #28003 [HttpKernel] Fixes invalid REMOT _ADDR in inline subrequest when configuring trusted proxy with subnet (@netiul)
• bug #28045 [HttpFoundation] Fix Cookie::isCleared (@ro0NL)
• bug #28080 [HttpFoundation] fixed using _method parameter with invalid type (@Phobetor)

Symphony 2.7.49 released

Symfony 2.7.49 has just been released. Here is a list of the most important changes:

• security #cve-2018-14774 [HttpKernel] fix trusted headers management in HttpCache and InlineFragmentRenderer (@nicolas-grekas)
• security #cve-2018-14773 [HttpFoundation] Remove support for legacy and risky HTTP headers (@nicolas-grekas)