Releases: symfony/security-bundle
Releases · symfony/security-bundle
Release list
v8.0.12
Changelog (v8.0.11...v8.0.12)
- security #cve-2026-45074 Require configuring trusted hosts when using CAS authentication (@nicolas-grekas)
Contributors
nicolas-grekas
Assets 2
v7.4.12
Changelog (v7.4.11...v7.4.12)
- security #cve-2026-45074 Require configuring trusted hosts when using CAS authentication (@nicolas-grekas)
Contributors
nicolas-grekas
Assets 2
v8.1.0-BETA2
v8.1.0-BETA2
fabpot
Fabien Potencier
This tag was signed with the committer’s verified signature.
fabpot
Fabien Potencier
Changelog (v8.1.0-BETA1...v8.1.0-BETA2)
- bug #64198 Allow defining security provider factories without config (@hockdudu)
Contributors
hockdudu
Assets 2
v8.0.11
Changelog (v8.0.8...v8.0.11)
- bug #64198 Allow defining security provider factories without config (@hockdudu)
Contributors
hockdudu
Assets 2
v7.4.11
Changelog (v7.4.8...v7.4.11)
- bug #64198 Allow defining security provider factories without config (@hockdudu)
Contributors
hockdudu
Assets 2
v6.4.39
Changelog (v6.4.36...v6.4.39)
- bug #64198 Allow defining security provider factories without config (@hockdudu)
Contributors
hockdudu
Assets 2
v8.1.0-BETA1
Immutable
release. Only release title and notes can be modified.
v8.1.0-BETA1
fabpot
Fabien Potencier
This tag was signed with the committer’s verified signature.
fabpot
Fabien Potencier
Changelog (v8.0.13...v8.1.0-BETA1)
- bug #64338 Fix Security::login() across firewalls (@ousamabenyounes)
- security #cve-2026-45074 Require configuring trusted hosts when using CAS authentication (@nicolas-grekas)
- bug #64198 Allow defining security provider factories without config (@hockdudu)
- feature #64118 Revert "Add per-username login rate-limit to prevent brute-force attacks" (@wouterj)
- feature #64104 Add per-username login rate-limit to prevent brute-force attacks (@ayyoub-afwallah)
- feature #63880 Add #, ServicesBundle and ConsoleBundle (@nicolas-grekas)
- feature #63771 Add
enforce_key_usage_verificationoption to OIDC discovery (@ruudk) - feature #63585 Deprecate erase_credentials config, container parameter and AuthenticatorManager constructor argument (@guillaumeVDP)
- feature #58273 Allow usage of expressions for defining validation groups in
#(@Brajk19) - feature #63157 Add support for enums in
SignatureHasher::computeSignatureHash()(@nicolas-grekas) - feature #62434 deprecate the
Extensionclass (@xabbuh) - feature #62824 Leverage
#for voters (@ayyoub-afwallah) - feature #62322 add missing
Clear-Site-Datadirectives (@xabbuh)
Contributors
ruudk, nicolas-grekas, and 7 other contributors
Assets 3
v8.0.8
Changelog (v8.0.7...v8.0.8)
- bug #63806 Make the Adapter resettable (@kira0269, @nicolas-grekas)
- bug #63722 Fix profiler showing ERROR instead of DENIED (@audain-dg)
Contributors
nicolas-grekas, kira0269, and audain-dg
Assets 2
v7.4.8
Changelog (v7.4.7...v7.4.8)
- bug #63806 Make the Adapter resettable (@kira0269, @nicolas-grekas)
- bug #63722 Fix profiler showing ERROR instead of DENIED (@audain-dg)
Contributors
nicolas-grekas, kira0269, and audain-dg
Assets 2
v6.4.36
Changelog (v6.4.35...v6.4.36)
- bug #63806 Make the Adapter resettable (@kira0269, @nicolas-grekas)
Contributors
nicolas-grekas and kira0269