Symfony v7.2.0-BETA2, v7.1.7 and v6.4.14 released!

[NewsBot]

Symfony v7.2.0-BETA2, v7.1.7 and v6.4.14 has been released.

Changelog (Comparing v7.2.0-BETA1...v7.2.0-BETA2 · symfony/symfony · GitHub)

• bug #58776 [DependencyInjection][HttpClient][Routing] Reject URIs that contain invalid characters (@nicolas-grekas)
• bug #58772 [DoctrineBridge] Backport detection fix of Xml/Yaml driver in DoctrineExtension (@MatTheCat)
• bug #58706 [TwigBridge] use reproducible variable names in the default domain node visitor (@xabbuh)
• security #cve-2024-51736 [Process] Use PATH before CD to load the shell on Windows (@nicolas-grekas)
• security #cve-2024-50342 [HttpClient] Filter private IPs before connecting when Host == IP (@nicolas-grekas)
• security #cve-2024-50345 [HttpFoundation] Reject URIs that contain invalid characters (@nicolas-grekas)
• security #cve-2024-50340 [Runtime] Do not read from argv on non-CLI SAPIs (@wouterj)
• bug #58765 [VarDumper] fix detecting anonymous exception classes on Windows and PHP 7 (@xabbuh)
• bug #58757 [RateLimiter] Fix DateInterval normalization (@danydev)…

Link: Release v7.2.0-BETA2 · symfony/symfony · GitHub

Changelog (Comparing v7.1.6...v7.1.7 · symfony/symfony · GitHub)

• bug #58772 [DoctrineBridge] Backport detection fix of Xml/Yaml driver in DoctrineExtension (@MatTheCat)
• security #cve-2024-51736 [Process] Use PATH before CD to load the shell on Windows (@nicolas-grekas)
• security #cve-2024-50342 [HttpClient] Filter private IPs before connecting when Host == IP (@nicolas-grekas)
• security #cve-2024-50345 [HttpFoundation] Reject URIs that contain invalid characters (@nicolas-grekas)
• security #cve-2024-50340 [Runtime] Do not read from argv on non-CLI SAPIs (@wouterj)
• bug #58765 [VarDumper] fix detecting anonymous exception classes on Windows and PHP 7 (@xabbuh)
• bug #58757 [RateLimiter] Fix DateInterval normalization (@danydev)
• bug #58712 [HttpFoundation] Fix support for \SplTempFileObject in BinaryFileResponse (@elementaire)
• bug #58762 [WebProfilerBundle] re-add missing profiler shortcuts on profiler homepage (@xabbuh)
• bug #58754 [Security] Sto…

Link: Release v7.1.7 · symfony/symfony · GitHub

Changelog (Comparing v6.4.13...v6.4.14 · symfony/symfony · GitHub)

• bug #58772 [DoctrineBridge] Backport detection fix of Xml/Yaml driver in DoctrineExtension (@MatTheCat)
• security #cve-2024-51736 [Process] Use PATH before CD to load the shell on Windows (@nicolas-grekas)
• security #cve-2024-50342 [HttpClient] Filter private IPs before connecting when Host == IP (@nicolas-grekas)
• security #cve-2024-50345 [HttpFoundation] Reject URIs that contain invalid characters (@nicolas-grekas)
• security #cve-2024-50340 [Runtime] Do not read from argv on non-CLI SAPIs (@wouterj)
• bug #58765 [VarDumper] fix detecting anonymous exception classes on Windows and PHP 7 (@xabbuh)
• bug #58757 [RateLimiter] Fix DateInterval normalization (@danydev)
• bug #58754 [Security] Store original token in token storage when implicitly exiting impersonation (@wouterj)
• bug #58753 [Cache] Fix clear() when using Predis (@nicolas-grekas)
• bug #58713 [Config] Handle Phar absolute path i…

Link: Release v6.4.14 · symfony/symfony · GitHub