A business model for Symfony

I’ve been working on Symfony for the last 14 years! Next year will be “year 15” for me. That’s huge. I’m very grateful for the whole experience, and I would never have dreamed of such a ride. I want more! Symfony popularity is still growing after all the years. Adoption is rising. Numbers are staggering.…

A Week of Symfony #624 (10-16 December 2018)

This week Symfony announced that there will be nine official Symfony conferences in 2019 in eight countries and three continents. Meanwhile, the work on the upcoming Symfony 4.3 started with the addition of new features like hyperlinks support in the console. Symfony development highlights This week, 47 pull requests were merged (40 in code and…

SymfonyTour 2019

The SymfonyTour 2018 is now over! We ended this wonderful Tour of Symfony conferences last week at the amazing SymfonyCon in Lisbon. With 900+ attendees during 2 days of fantastic conferences, fabulous speakers, great sponsors and a few Pasteis de Nata, all wrapped up in the Portuguese atmosphere: it was the best way to end…

SymfonyCon Lisbon 2018 was a blast!

Last week, the Symfony Community met in Lisbon, Portugal, for the international Symfony conference from December 6th to 8th in the great Marriott hotel. We were super pleased to welcome more than 900 people, more than 25 speakers and our amazing sponsors. A full week of Symfony took place last week in the wonderful city…

Local Web Server Reloaded for Symfony Apps

The new Symfony binary introduced as part of SymfonyCloud will be a key piece of the Symfony developer experience. During his SymfonyCon Lisbon 2018 keynote, Fabien unveiled more of its amazing new features. Symfony’s binary provides a local web server that supports HTTP/2, uses PHP-FPM when possible and generates TLS certificates for local apps automatically.…

A Week of Symfony #623 (3-9 December 2018)

This week, 2.7.50, 2.8.49, 3.4.20, 4.0.15, 4.1.9 and 4.2.1 were published as maintenance and security releases. In addition, the SymfonyCon Lisbon 2018 conference gathered hundreds of Symfony community members from all around the world. Symfony development highlights This week, 44 pull requests were merged (31 in code and 13 in docs) and 54 issues were…

Symfony 4.2.1 released

Symfony 4.2.1 has just been released. Here is a list of the most important changes: security #cve-2018-19790 [SecurityHttp] detect bad redirect targets using backslashes (@xabbuh) security #cve-2018-19789 [Form] Filter file uploads out of regular form types (@nicolas-grekas) bug #29481 [TwigBridge] Deprecating legacy Twig paths in DebugCommand and simplifications (@yceruto) bug #29436 [Cache] Fixed Memcached adapter…

CVE-2018-19789: Disclosure of uploaded files full path

Affected versions Symfony 2.7.0 to 2.7.49, 2.8.0 to 2.8.48, 3.0.0 to 3.4.19, 4.0.0 to 4.0.14, 4.1.0 to 4.1.8 and 4.2.0 versions of the Symfony Form component are affected by this security issue. The issue has been fixed in Symfony 2.7.50, 2.8.49, 3.4.20, 4.0.15, 4.1.9 and 4.2.1. Note that no fixes are provided for Symfony 3.0,…