Skip to content

v5.3.2
Compare
Choose a tag to compare
@fabpot fabpot released this 17 Jun 14:21
· 14948 commits to 7.1 since this release
v5.3.2
This tag was signed with the committer’s verified signature.
fabpot Fabien Potencier
GPG key ID: EB8AA69A566C0795
Learn about vigilant mode.
a290dde
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.

Changelog (v5.3.1...v5.3.2)

  • security #cve-2021-32693 [SecurityHttp] Fix "Authentication granted with multiple firewalls" (@wouterj)
  • bug #41693 [Uid] fix performance and prevent collisions with the real clock_seq (@nicolas-grekas)
  • bug #41700 [Security] Fix deprecation notice on TokenInterface::getUser() stringable return (@tscni)
  • bug #41703 [Security] Restore extension point in MessageDigestPasswordEncoder (@derrabus)
  • bug #41716 [Messenger] Fix RequestContext not updated (@jderusse)
  • bug #41616 [Messenger] Remove TLS related options when not using TLS (@odolbeau)
  • bug #41719 [FrameworkBundle] fix Could not find service "test.service_container" (@smilesrg)
  • bug #41686 [Console] Fix using #[AsCommand] without DI (@nicolas-grekas)
  • bug #41673 [DependencyInjection] fix parsing classes for attributes (@nicolas-grekas)
  • bug #41675 [Runtime] fix overriding --env|-e with single-command apps (@nicolas-grekas)
  • bug #41674 [HttpClient] fix compat with cURL <= 7.37 (@nicolas-grekas)
  • bug #41680 [Console] fix managing signals when commands are lazy loaded (@nicolas-grekas)
  • bug #41678 [PasswordHasher] Fix missing PasswordHasherAwareInterface allowed type (@chalasr)
  • bug #41656 [HttpClient] throw exception when AsyncDecoratorTrait gets an already consumed response (@nicolas-grekas)
  • bug #41600 [Notifier] Escape . char for Telegram transport (@clément)
  • bug #41644 [Config] fix tracking attributes in ReflectionClassResource (@nicolas-grekas)
  • bug #41621 [Process] Fix incorrect parameter type (@bch36)
  • bug #41624 [HttpClient] Revert bindto workaround for unaffected PHP versions (@derrabus)
  • bug #41597 [DependencyInjection] fix when@{env} inside imported files (@nusje2000)
  • bug #41553 [Messenger] fix BC for FrameworkBundle 4.4 with a non-existence alias being used (@monteiro)
  • bug #41582 Fix not null get collection key types (@dragosprotung)
  • bug #41572 [PasswordHasher] Prevent PHP fatal error when using auto algorithm (@matason)
  • bug #41549 [Security] Fix opcache preload with alias classes (@jderusse)
  • bug #41491 [Serializer] Do not allow to denormalize string with spaces only to valid a DateTime object (@sidz)
  • bug #41535 [Console] Fix negated options not accessible (@jderusse)
  • bug #41472 [Validator] remove service if its class doesn't exist (@xabbuh)
  • bug #41218 [DependencyInjection] Update loader’s directory when calling ContainerConfigurator::withPath (@MatTheCat)
  • bug #41505 [FrameworkBundle] fix KernelBrowser::loginUser with a stateless firewall (@dunglas)
  • bug #41509 [SecurityBundle] Link UserProviderListener to correct firewall dispatcher (@Matth--)
  • bug #41386 [Console] Escape synopsis output (@jschaedl)
  • bug #41523 [Notifier] [Bridge] Remove hidden dependency on HttpFoundation for SmsBiurasTransport (@fre5h)
  • bug #41512 Relax requirement on symfony/runtime (@lyrixx)

[PR] #41728
[SECURITY] Security release

Assets 2