# Symfony v6.0.0-RC1 and v5.4.0-RC1 released!

**URL:** <https://forum.devtalk.com/t/symfony-v6-0-0-rc1-and-v5-4-0-rc1-released/30390>\
**Category:** Backend Official News\
**Tags:** newsbot, symfony, official-news\
**Created:** [24 November 2021 09:14 UTC](https://forum.devtalk.com/t/symfony-v6-0-0-rc1-and-v5-4-0-rc1-released/30390 "2021-11-24T09:14:55Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![NewsBot](https://forum.devtalk.com/user_avatar/forum.devtalk.com/newsbot/32/1114_2.png) [@NewsBot](https://forum.devtalk.com/u/NewsBot)\
**Post date:** [24 November 2021 09:14 UTC](https://forum.devtalk.com/t/symfony-v6-0-0-rc1-and-v5-4-0-rc1-released/30390/1 "2021-11-24T09:14:55Z")

</div>

[Symfony](https://devtalk.com/symfony) v6.0.0-RC1 and v5.4.0-RC1 has been released.

> [@](#):
>
> **Changelog** ([Comparing v6.0.0-BETA3...v6.0.0-RC1 · symfony/symfony · GitHub](https://github.com/symfony/symfony/compare/v6.0.0-BETA3...v6.0.0-RC1))
> 
> - security #cve-2021-41268 [SecurityBundle] Default signature\_properties to the previous behavior (@wouterj)
> - security #cve-2021-41267 [HttpKernel] Fix missing extra trusted header in sub-request (@jderusse)
> - security #cve-2021-41270 [Serializer] Use single quote to escape formulas (@jderusse)
> - bug #44230 [Console] Add Suggestion class for more advanced completion suggestion (@wouterj)
> - bug #44232 [Cache] fix connecting to local Redis sockets (@nicolas-grekas)
> - bug #44204 [HttpClient] fix closing curl multi handle when destructing client (@nicolas-grekas)
> - bug #44208 [Process] exclude argv/argc from possible default env vars (@nicolas-grekas)
> - bug #44188 [VarExporter] fix exporting declared but unset properties when \_\_sleep() is implemented (@nicolas-grekas)
> - bug #44176 [Console] Default ansi option to null (@jderusse)
> - bug #44179 [WebProfilerBundle] Fix JS error when toolbar is …

Link: [Release v6.0.0-RC1 · symfony/symfony · GitHub](https://github.com/symfony/symfony/releases/tag/v6.0.0-RC1)

> [@](#):
>
> **Changelog** ([Comparing v5.4.0-BETA3...v5.4.0-RC1 · symfony/symfony · GitHub](https://github.com/symfony/symfony/compare/v5.4.0-BETA3...v5.4.0-RC1))
> 
> - security #cve-2021-41268 [SecurityBundle] Default signature\_properties to the previous behavior (@wouterj)
> - security #cve-2021-41267 [HttpKernel] Fix missing extra trusted header in sub-request (@jderusse)
> - security #cve-2021-41270 [Serializer] Use single quote to escape formulas (@jderusse)
> - bug #44230 [Console] Add Suggestion class for more advanced completion suggestion (@wouterj)
> - bug #44232 [Cache] fix connecting to local Redis sockets (@nicolas-grekas)
> - bug #44204 [HttpClient] fix closing curl multi handle when destructing client (@nicolas-grekas)
> - bug #44208 [Process] exclude argv/argc from possible default env vars (@nicolas-grekas)
> - bug #44188 [VarExporter] fix exporting declared but unset properties when \_\_sleep() is implemented (@nicolas-grekas)
> - bug #44176 [Console] Default ansi option to null (@jderusse)
> - bug #44179 [WebProfilerBundle] Fix JS error when toolbar is …

Link: [Release v5.4.0-RC1 · symfony/symfony · GitHub](https://github.com/symfony/symfony/releases/tag/v5.4.0-RC1)