10000 Release v3.4.14 by fabpot · Pull Request #28102 · symfony/symfony · GitHub
[go: up one dir, main page]

Skip to content

Release v3.4.14 #28102

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 2 commits into from
Aug 1, 2018
Merged
Changes from 1 commit
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
8000
Diff view
Diff view
Next Next commit
updated CHANGELOG for 3.4.14
  • Loading branch information
fabpot committed Aug 1, 2018
commit 22cb50a7ad3ce954411b03aaa6c7ce4e245d76e5
10 changes: 10 additions & 0 deletions CHANGELOG-3.4.md
Original file line number Diff line number Diff line change
Expand Up @@ -7,6 +7,16 @@ in 3.4 minor versions.
To get the diff for a specific change, go to https://github.com/symfony/symfony/commit/XXX where XXX is the change hash
To get the diff between two versions, go to https://github.com/symfony/symfony/compare/v3.4.0...v3.4.1

* 3.4.14 (2018-08-01)

* security #cve-2018-14774 [HttpKernel] fix trusted headers management in HttpCache and InlineFragmentRenderer (nicolas-grekas)
* security #cve-2018-14773 [HttpFoundation] Remove support for legacy and risky HTTP headers (nicolas-grekas)
* bug #28003 [HttpKernel] Fixes invalid REMOTE_ADDR in inline subrequest when configuring trusted proxy with subnet (netiul)
* bug #28007 [FrameworkBundle] fixed guard event names for transitions (destillat)
* bug #28045 [HttpFoundation] Fix Cookie::isCleared (ro0NL)
* bug #28080 [HttpFoundation] fixed using _method parameter with invalid type (Phobetor)
* bug #28052 [HttpKernel] Fix merging bindings for controllers' locators (nicolas-grekas)

* 3.4.13 (2018-07-23)

* bug #28005 [HttpKernel] Fixed templateExists on parse error of the template name (yceruto)
Expand Down
0