Merge pull request symfony#29491 from fabpot/release-4.0.15

fabpot · web-flow · commit a1cce5a8b410 · 2018-12-06T17:29:57.000Z
released v4.0.15
diff --git a/CHANGELOG-4.0.md b/CHANGELOG-4.0.md
@@ -7,6 +7,11 @@ in 4.0 minor versions.
 To get the diff for a specific change, go to https://github.com/symfony/symfony/commit/XXX where XXX is the change hash
 To get the diff between two versions, go to https://github.com/symfony/symfony/compare/v4.0.0...v4.0.1
 
+* 4.0.15 (2018-12-06)
+
+ * security `#cve-2018-19790 <https://symfony.com/cve-2018-19790>`_ [Security\Http] detect bad redirect targets using backslashes (@xabbuh)
+ * security `#cve-2018-19789 <https://symfony.com/cve-2018-19789>`_ [Form] Filter file uploads out of regular form types (@nicolas-grekas)
+
 * 4.0.14 (2018-08-01)
 
  * security #cve-2018-14774 [HttpKernel] fix trusted headers management in HttpCache and InlineFragmentRenderer (nicolas-grekas)
diff --git a/src/Symfony/Component/HttpKernel/Kernel.php b/src/Symfony/Component/HttpKernel/Kernel.php
@@ -63,12 +63,12 @@ abstract class Kernel implements KernelInterface, RebootableInterface, Terminabl
     private $requestStackSize = 0;
     private $resetServices = false;
 
-    const VERSION = '4.0.15-DEV';
+    const VERSION = '4.0.15';
     const VERSION_ID = 40015;
     const MAJOR_VERSION = 4;
     const MINOR_VERSION = 0;
     const RELEASE_VERSION = 15;
-    const EXTRA_VERSION = 'DEV';
+    const EXTRA_VERSION = '';
 
     const END_OF_MAINTENANCE = '07/2018';
     const END_OF_LIFE = '01/2019';
