v4.3.8
·
34440 commits
to 8.1
since this release
Changelog (since v4.3.7...v4.3.8)
- bug #34344 [Console] Constant STDOUT might be undefined (@nicolas-grekas)
- security #cve-2019-18886 [Security\Core] throw AccessDeniedException when switch user fails (@nicolas-grekas)
- security #cve-2019-18888 [Mime] fix guessing mime-types of files with leading dash (@nicolas-grekas)
- security #cve-2019-11325 [VarExporter] fix exporting some strings (@nicolas-grekas)
- security #cve-2019-18889 [Cache] forbid serializing AbstractAdapter and TagAwareAdapter instances (@nicolas-grekas)
- security #cve-2019-18888 [HttpFoundation] fix guessing mime-types of files with leading dash (@nicolas-grekas)
- security #cve-2019-18887 [HttpKernel] Use constant time comparison in UriSigner (@stof)
[PR] #34352
[SECURITY] Security release