Skip to content

v6.4.49

Choose a tag to compare

View all tags
@fabpot fabpot released this 28 Oct 18:17
· 555 commits to 8.2 since this release
Immutable release. Only release title and notes can be modified.
v6.4.49
This tag was signed with the committer’s verified signature.
fabpot Fabien Potencier
SSH Key Fingerprint: 2Epes5EqLalzBuDpYoQuproz9c57CsymvlzEGYtOXJw
Verified
Learn about vigilant mode.
aed9ac2

Changelog (v6.4.48...v6.4.49)

  • bug #67504 Ignore malformed and multiple ranges in BinaryFileResponse (@jack-worman)
  • bug #67501 Don't reject suffix ranges longer than the file in BinaryFileResponse (@jack-worman)
  • bug #67296 Handle filter failures in array values (@nicolas-grekas)
  • bug #67345 Fix cookie names and header parsing (@nicolas-grekas)
  • bug #67126 Fix MigratingSessionHandler sending needless cookies to delete empty sessions (@nicolas-grekas)
  • bug #67123 Destroy empty sessions in updateTimestamp() of the Redis, Memcached, MongoDb and Pdo session handlers (@PhilETaylor)
  • bug #67125 Don't marshall empty session data in MarshallingSessionHandler (@nicolas-grekas)
  • bug #67059 Don't announce a Content-Length on non-successful BinaryFileResponse (@lazerg)
  • bug #67060 Register the session shutdown function only once in NativeSessionStorage (@lazerg)

[SECURITY] Security release

Contributors

nicolas-grekas, PhilETaylor, and 2 other contributors
Assets 3
Loading