Symfony v6.2.6, v6.1.12 and v6.0.20 released!

[NewsBot]

Symfony v6.2.6, v6.1.12 and v6.0.20 has been released.

Changelog (https://github.com/symfony/symfony/compare/v6.2.5...v6.2.6)

• bug #49141 [HttpFoundation] Fix bad return type in IpUtils::checkIp4() (@tristankretzer)
• bug #49126 [DependencyInjection] Fix order of arguments when mixing positional and named ones (@nicolas-grekas)
• bug #49104 [HttpClient] Fix collecting data non-late for the profiler (@nicolas-grekas)
• bug #49103 [Security/Http] Fix compat of persistent remember-me with legacy tokens (@nicolas-grekas)
• security #cve-2022-24895 [Security/Http] Remove CSRF tokens from storage on successful login (@nicolas-grekas)
• security #cve-2022-24894 [HttpKernel] Remove private headers before storing responses with HttpCache (@nicolas-grekas)

[PR] Release v6.2.6 by fabpot · Pull Request #49182 · symfony/symfony · GitHub
[SECURITY] Security release

Link: https://github.com/symfony/symfony/releases/tag/v6.2.6

Changelog (Comparing v6.1.11...v6.1.12 · symfony/symfony · GitHub)

• bug #49141 [HttpFoundation] Fix bad return type in IpUtils::checkIp4() (@tristankretzer)
• bug #49126 [DependencyInjection] Fix order of arguments when mixing positional and named ones (@nicolas-grekas)
• bug #49104 [HttpClient] Fix collecting data non-late for the profiler (@nicolas-grekas)
• bug #49103 [Security/Http] Fix compat of persistent remember-me with legacy tokens (@nicolas-grekas)
• security #cve-2022-24895 [Security/Http] Remove CSRF tokens from storage on successful login (@nicolas-grekas)
• security #cve-2022-24894 [HttpKernel] Remove private headers before storing responses with HttpCache (@nicolas-grekas)

[PR] Release v6.1.12 by fabpot · Pull Request #49181 · symfony/symfony · GitHub
[EOM] End of maintenance release for branch 6.1
[SECURITY] Security release

Link: Release v6.1.12 · symfony/symfony · GitHub

Changelog (Comparing v6.0.19...v6.0.20 · symfony/symfony · GitHub)

• bug #49141 [HttpFoundation] Fix bad return type in IpUtils::checkIp4() (@tristankretzer)
• bug #49126 [DependencyInjection] Fix order of arguments when mixing positional and named ones (@nicolas-grekas)
• bug #49104 [HttpClient] Fix collecting data non-late for the profiler (@nicolas-grekas)
• bug #49103 [Security/Http] Fix compat of persistent remember-me with legacy tokens (@nicolas-grekas)
• security #cve-2022-24895 [Security/Http] Remove CSRF tokens from storage on successful login (@nicolas-grekas)
• security #cve-2022-24894 [HttpKernel] Remove private headers before storing responses with HttpCache (@nicolas-grekas)

[PR] Release v6.0.20 by fabpot · Pull Request #49180 · symfony/symfony · GitHub
[EOM] End of maintenance release for branch 6.0
[SECURITY] Security release

Link: Release v6.0.20 · symfony/symfony · GitHub

[bot]

Corresponding tweet for this thread:

Devtalk

Share link for this tweet.