Skip to content

Release v4.0.14 #28103

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 2 commits into from
Aug 1, 2018
Merged

Release v4.0.14 #28103

Changes from 1 commit
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
300bd9e
updated CHANGELOG for 4.0.14
fabpot Aug 1, 2018
af7c14d
updated VERSION for 4.0.14
fabpot Aug 1, 2018
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Next Next commit
updated CHANGELOG for 4.0.14
  • Loading branch information
@fabpot
fabpot committed Aug 1, 2018
commit 300bd9e52c78aa0f55d10cea970a9de4b65e490c
10 changes: 10 additions & 0 deletions CHANGELOG-4.0.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,6 +7,16 @@ in 4.0 minor versions.
To get the diff for a specific change, go to https://github.com/symfony/symfony/commit/XXX where XXX is the change hash
To get the diff between two versions, go to https://github.com/symfony/symfony/compare/v4.0.0...v4.0.1

* 4.0.14 (2018-08-01)

* security #cve-2018-14774 [HttpKernel] fix trusted headers management in HttpCache and InlineFragmentRenderer (nicolas-grekas)
* security #cve-2018-14773 [HttpFoundation] Remove support for legacy and risky HTTP headers (nicolas-grekas)
* bug #28003 [HttpKernel] Fixes invalid REMOTE_ADDR in inline subrequest when configuring trusted proxy with subnet (netiul)
* bug #28007 [FrameworkBundle] fixed guard event names for transitions (destillat)
* bug #28045 [HttpFoundation] Fix Cookie::isCleared (ro0NL)
* bug #28080 [HttpFoundation] fixed using _method parameter with invalid type (Phobetor)
* bug #28052 [HttpKernel] Fix merging bindings for controllers' locators (nicolas-grekas)

* 4.0.13 (2018-07-23)

* bug #28005 [HttpKernel] Fixed templateExists on parse error of the template name (yceruto)
Expand Down