Symfony 3.4.35
20 November 2019
Symfony version 3.4.35 is now available (security release).
Upgrading to Symfony 3.4.35
Symfony 3.4.35 can be upgraded to (or installed) using any of Installatron's products. Use Installatron's optional Automatic Update feature to automatically apply Symfony updates as new versions are released, or use Installatron's Clone feature to duplicate an existing Symfony install to test the 3.4.35 upgrade prior to applying it live. Get started managing your Symfony installations with Installatron
What's New in Symfony 3.4.35
3.4.35
Bug Fixes
- bug #34344 [Console] Constant STDOUT might be undefined (@nicolas-grekas)
- security #cve-2019-18889 [Cache] forbid serializing AbstractAdapter and TagAwareAdapter instances (@nicolas-grekas)
- security #cve-2019-18888 [HttpFoundation] fix guessing mime-types of files with leading dash (@nicolas-grekas)
- security #cve-2019-18887 [HttpKernel] Use constant time comparison in UriSigner (@stof)
3.4.34
Bug Fixes
- bug #34297 [DI] fix locators with numeric keys (@nicolas-grekas)
- bug #34282 [DI] Dont cache classes with missing parents (@nicolas-grekas)
- bug #34181 [Stopwatch] Fixed bug in getDuration when counting multiple ongoing periods (@TimoBakx)
- bug #34179 [Stopwatch] Fixed a bug in StopwatchEvent::getStartTime (@TimoBakx)
- bug #34203 [FrameworkBundle] [HttpKernel] fixed correct EOL and EOM month (@erics86)