Skip to content

v7.4.22

Choose a tag to compare

@fabpot fabpot released this 28 Oct 18:21
· 225 commits to 8.2 since this release
Immutable release. Only release title and notes can be modified.
v7.4.22

Changelog (v7.4.21...v7.4.22)

  • bug #67504 Ignore malformed and multiple ranges in BinaryFileResponse (@jack-worman)
  • bug #67501 Don't reject suffix ranges longer than the file in BinaryFileResponse (@jack-worman)
  • bug #67496 Match whole subtags in Request::getPreferredLanguage() (@nicolas-grekas)
  • bug #67296 Handle filter failures in array values (@nicolas-grekas)
  • bug #67345 Fix cookie names and header parsing (@nicolas-grekas)
  • bug #67126 Fix MigratingSessionHandler sending needless cookies to delete empty sessions (@nicolas-grekas)
  • bug #67123 Destroy empty sessions in updateTimestamp() of the Redis, Memcached, MongoDb and Pdo session handlers (@PhilETaylor)
  • bug #67125 Don't marshall empty session data in MarshallingSessionHandler (@nicolas-grekas)
  • bug #67059 Don't announce a Content-Length on non-successful BinaryFileResponse (@lazerg)
  • bug #67060 Register the session shutdown function only once in NativeSessionStorage (@lazerg)

[SECURITY] Security release