Skip to content

v5.4.54

Latest

Choose a tag to compare

@fabpot fabpot released this 15 Oct 06:52
· 1951 commits to 8.2 since this release
Immutable release. Only release title and notes can be modified.
v5.4.54

Changelog (v5.4.53...v5.4.54)

  • minor #66959 Release v5.4.54
  • bug #65737 Add allowed_classes => false to unserialize() in CacheWarmerAggregate, LoggerDataCollector, and HttpCache Store (@XananasX7)
  • bug #65736 Ignore the session id that PHP kept from a previous request (@nicolas-grekas)
  • bug #65730 Fix TypeError in UriSigner when the hash parameter is not a string (@nicolas-grekas)
  • bug #65687 Validate the profiler token before using it as a file name (@nicolas-grekas)
  • bug #65681 Strip cache-internal headers from backend responses in HttpCache (@nicolas-grekas)

[SECURITY] Security release