From a4987c61058ce9465e82855f2dfa8572269799cd Mon Sep 17 00:00:00 2001 From: Fabien Potencier Date: Wed, 1 Aug 2018 16:04:07 +0200 Subject: [PATCH 1/2] updated CHANGELOG for 3.3.18 --- CHANGELOG-3.3.md | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/CHANGELOG-3.3.md b/CHANGELOG-3.3.md index 3d1d379f594c6..6c8b4a0e22af3 100644 --- a/CHANGELOG-3.3.md +++ b/CHANGELOG-3.3.md @@ -7,6 +7,11 @@ in 3.3 minor versions. To get the diff for a specific change, go to https://github.com/symfony/symfony/commit/XXX where XXX is the change hash To get the diff between two versions, go to https://github.com/symfony/symfony/compare/v3.3.0...v3.3.1 +* 3.3.18 (2018-08-01) + + * security #cve-2018-14774 [HttpKernel] fix trusted headers management in HttpCache and InlineFragmentRenderer (nicolas-grekas) + * security #cve-2018-14773 [HttpFoundation] Remove support for legacy and risky HTTP headers (nicolas-grekas) + * 3.3.17 (2018-05-25) * security #cve-2018-11407 [Ldap] cast to string when checking empty passwords From 5484ff9b43eeda1227d5c95cbfb62cb2ce32817d Mon Sep 17 00:00:00 2001 From: Fabien Potencier Date: Wed, 1 Aug 2018 16:04:30 +0200 Subject: [PATCH 2/2] updated VERSION for 3.3.18 --- src/Symfony/Component/HttpKernel/Kernel.php | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/src/Symfony/Component/HttpKernel/Kernel.php b/src/Symfony/Component/HttpKernel/Kernel.php index 6f993711fca1f..51d79fd061a07 100644 --- a/src/Symfony/Component/HttpKernel/Kernel.php +++ b/src/Symfony/Component/HttpKernel/Kernel.php @@ -61,11 +61,11 @@ abstract class Kernel implements KernelInterface, TerminableInterface private $projectDir; - const VERSION = '3.3.17'; - const VERSION_ID = 30317; + const VERSION = '3.3.18'; + const VERSION_ID = 30318; const MAJOR_VERSION = 3; const MINOR_VERSION = 3; - const RELEASE_VERSION = 17; + const RELEASE_VERSION = 18; const EXTRA_VERSION = ''; const END_OF_MAINTENANCE = '01/2018';