Symfony v6.3.8, v5.4.31 and v4.4.51 released!

[NewsBot]

Symfony v6.3.8, v5.4.31 and v4.4.51 has been released.

Changelog (Comparing v6.3.7...v6.3.8 · symfony/symfony · GitHub)

• bug #51666 [RateLimiter] CompoundLimiter was accepting requests even when some limiters already consumed all tokens (@10n)
• security #cve-2023-46734 [TwigBridge] Ensure CodeExtension’s filters properly escape their input (@nicolas-grekas, @GromNaN)
• security #cve-2023-46735 [Webhook] Remove user-submitted type from HTTP response (@nicolas-grekas)
• security #cve-2023-46733 [Security] Fix possible session fixation when only the token changes (@RobertMe)
• bug #52514 [FrameworkBundle] Don’t reference SYMFONY_IDE env var in non-debug mode (@nicolas-grekas)
• bug #52506 [SecurityBundle] wire the secret for Symfony 6.4 compatibility (@xabbuh)
• bug #52496 [VarDumper] Accept mixed key on DsPairStub (@marc-mabe)
• bug #52502 [Config] Prefixing FileExistenceResource::__toString() to avoid conflict with FileResource (@weaverryan)
• bug #52491 [String] Method toByteString conversion using iconv is…

Link: Release v6.3.8 · symfony/symfony · GitHub

Changelog (Comparing v5.4.30...v5.4.31 · symfony/symfony · GitHub)

• security #cve-2023-46734 [TwigBridge] Ensure CodeExtension’s filters properly escape their input (@nicolas-grekas, @GromNaN)
• security #cve-2023-46733 [Security] Fix possible session fixation when only the token changes (@RobertMe)
• bug #52506 [SecurityBundle] wire the secret for Symfony 6.4 compatibility (@xabbuh)
• bug #52502 [Config] Prefixing FileExistenceResource::__toString() to avoid conflict with FileResource (@weaverryan)
• bug #52491 [String] Method toByteString conversion using iconv is unreachable (@Vincentv92)
• bug #52488 [HttpKernel] Fix PHP deprecation (@nicolas-grekas)
• bug #52476 [Messenger] fix compatibility with Doctrine DBAL 4 (@xabbuh)
• bug #52474 [HttpFoundation] ensure string type with mbstring func overloading enabled (@xabbuh)
• bug #52457 [Cache][HttpFoundation][Lock] Fix empty username/password for PDO PostgreSQL (@HypeMC)
• bug #52443 [Yaml] Fix uid binary…

Link: Release v5.4.31 · symfony/symfony · GitHub

Changelog (Comparing v4.4.50...v4.4.51 · symfony/symfony · GitHub)

• security #cve-2023-46734 [TwigBridge] Ensure CodeExtension’s filters properly escape their input (@nicolas-grekas, @GromNaN)

[PR] Release v4.4.51 by fabpot · Pull Request #52534 · symfony/symfony · GitHub
[SECURITY] Security release

Link: Release v4.4.51 · symfony/symfony · GitHub