[ubuntu/focal-proposed] symfony 4.3.8+dfsg-1ubuntu1 (Accepted)

Gianfranco Costamagna locutusofborg at debian.org
Sun Nov 24 11:23:13 UTC 2019 

symfony (4.3.8+dfsg-1ubuntu1) focal; urgency=low

  * Merge from Debian unstable.  Remaining changes:
    - Do not fail testsuite on s390x

symfony (4.3.8+dfsg-1) unstable; urgency=medium

  [ Christophe Coevoet ]
  * Use constant time comparison in UriSigner [CVE-2019-18887]

  [ Nicolas Grekas ]
  * [Cache] forbid serializing AbstractAdapter and TagAwareAdapter instances
    [CVE-2019-18889]
  * [VarExporter] fix exporting some strings [CVE-2019-11325]
  * [HttpFoundation] fix guessing mime-types of files with leading dash
    [CVE-2019-18888]
  * [Mime] fix guessing mime-types of files with leading dash [CVE-2019-18888]
  * [Security\Core] throw AccessDeniedException when switch user fails
    [CVE-2019-18886]

  [ Fabien Potencier ]
  * updated VERSION for 4.3.8

  [ David Prévot ]
  * Track stable version for now
  * Update homemade overrides
  * Exclude whole directory

symfony (4.3.6+dfsg-1) unstable; urgency=medium

  [ Fabien Potencier ]
  * updated VERSION for 4.3.6

  [ David Prévot ]
  * Update homemade overrides

symfony (4.3.5+dfsg-1) unstable; urgency=medium

  [ Fabien Potencier ]
  * updated VERSION for 4.3.5

  [ David Prévot ]
  * Set upstream metadata fields: Repository.
  * Drop versioned dependency satisfied in (old)stable
  * Update Standards-Version to 4.4.1
  * Don’t fail unit tests on warning
  * Drop test failing with PHPUnit 8.4

Date: Sun, 24 Nov 2019 09:42:12 +0100
Changed-By: Gianfranco Costamagna <locutusofborg at debian.org>
Maintainer: Debian PHP PEAR Maintainers <pkg-php-pear at lists.alioth.debian.org>
https://launchpad.net/ubuntu/+source/symfony/4.3.8+dfsg-1ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Sun, 24 Nov 2019 09:42:12 +0100
Source: symfony
Binary: php-symfony php-symfony-asset php-symfony-browser-kit php-symfony-cache php-symfony-config php-symfony-console php-symfony-css-selector php-symfony-debug php-symfony-dependency-injection php-symfony-dom-crawler php-symfony-dotenv php-symfony-event-dispatcher php-symfony-expression-language php-symfony-filesystem php-symfony-finder php-symfony-form php-symfony-http-client php-symfony-http-foundation php-symfony-http-kernel php-symfony-inflector php-symfony-intl php-symfony-ldap php-symfony-lock php-symfony-mailer php-symfony-messenger php-symfony-mime php-symfony-options-resolver php-symfony-process php-symfony-property-access php-symfony-property-info php-symfony-routing php-symfony-security-core php-symfony-security-csrf php-symfony-security-guard php-symfony-security-http php-symfony-security php-symfony-serializer php-symfony-stopwatch php-symfony-templating php-symfony-translation php-symfony-validator php-symfony-var-dumper php-symfony-var-exporter
 php-symfony-web-link php-symfony-workflow php-symfony-yaml php-symfony-doctrine-bridge php-symfony-monolog-bridge php-symfony-phpunit-bridge php-symfony-proxy-manager-bridge php-symfony-twig-bridge php-symfony-amazon-mailer php-symfony-google-mailer php-symfony-mailchimp-mailer php-symfony-mailgun-mailer php-symfony-postmark-mailer php-symfony-sendgrid-mailer php-symfony-debug-bundle php-symfony-framework-bundle php-symfony-security-bundle php-symfony-twig-bundle php-symfony-web-profiler-bundle
 php-symfony-web-server-bundle
Architecture: source
Version: 4.3.8+dfsg-1ubuntu1
Distribution: focal
Urgency: medium
Maintainer: Debian PHP PEAR Maintainers <pkg-php-pear at lists.alioth.debian.org>
Changed-By: Gianfranco Costamagna <locutusofborg at debian.org>
Description:
 php-symfony - set of reusable components and framework for web projects
 php-symfony-amazon-mailer -
 php-symfony-asset - manage asset URLs
 php-symfony-browser-kit - simulate the behavior of a web browser
 php-symfony-cache -
 php-symfony-config - load configurations from different data sources
 php-symfony-console - run tasks from the command line
 php-symfony-css-selector - convert CSS selectors to XPath expressions
 php-symfony-debug - tools to make debugging of PHP code easier
 php-symfony-debug-bundle - debugging tools for the Symfony framework
 php-symfony-dependency-injection - standardize and centralize construction of objects
 php-symfony-doctrine-bridge - integration for Doctrine with Symfony Components
 php-symfony-dom-crawler - ease DOM navigation for HTML and XML documents
 php-symfony-dotenv - .env files parser to make environment variables accessible
 php-symfony-event-dispatcher - dispatch events and listen to them
 php-symfony-expression-language - compile and evaluate expressions
 php-symfony-filesystem - basic filesystem utilities
 php-symfony-finder - find files and directories
 php-symfony-form - create HTML forms and process request data
 php-symfony-framework-bundle - basic, robust and flexible MVC framework
 php-symfony-google-mailer -
 php-symfony-http-client - methods to fetch HTTP resources synchronously or asynchronously
 php-symfony-http-foundation - object-oriented layer for the HTTP specification
 php-symfony-http-kernel - building blocks for flexible and fast HTTP-based frameworks
 php-symfony-inflector - words conversion between their singular and plural forms
 php-symfony-intl - limited replacement layer for the PHP extension intl
 php-symfony-ldap - abstraction layer for the PHP LDAP module
 php-symfony-lock - create and manage locks
 php-symfony-mailchimp-mailer -
 php-symfony-mailer - help sending emails
 php-symfony-mailgun-mailer -
 php-symfony-messenger - send and receive messages
 php-symfony-mime -
 php-symfony-monolog-bridge - integration for Monolog with Symfony Components
 php-symfony-options-resolver - configure objects with option arrays
 php-symfony-phpunit-bridge - integration for PHPUnit with Symfony Components
 php-symfony-postmark-mailer -
 php-symfony-process - execute commands in sub-processes
 php-symfony-property-access - read from and write to an object or array
 php-symfony-property-info - extract information about properties of PHP classes
 php-symfony-proxy-manager-bridge - integration for ProxyManager with Symfony Components
 php-symfony-routing - associate a request with code that generates a response
 php-symfony-security - infrastructure for sophisticated authorization systems
 php-symfony-security-bundle - configurable security system for the Symfony framework
 php-symfony-security-core - infrastructure for authorization systems - common features
 php-symfony-security-csrf - infrastructure for authorization systems - CSRF protection
 php-symfony-security-guard - infrastructure for authorization systems - Guard features
 php-symfony-security-http - infrastructure for authorization systems - HTTP integration
 php-symfony-sendgrid-mailer -
 php-symfony-serializer - convert PHP objects into specific formats and vice versa
 php-symfony-stopwatch - profile PHP code
 php-symfony-templating - tools needed to build a template system
 php-symfony-translation - tools to internationalize an application
 php-symfony-twig-bridge - integration for Twig with Symfony Components
 php-symfony-twig-bundle - configurable integration of Twig with the Symfony framework
 php-symfony-validator - tools to validate classes
 php-symfony-var-dumper -
 php-symfony-var-exporter - export serializable PHP data structure to plain PHP code
 php-symfony-web-link - manage links between resources
 php-symfony-web-profiler-bundle - collect requests information for analysis and debugging
 php-symfony-web-server-bundle - provide commands for applications using the PHP built-in web serv
 php-symfony-workflow - manage a workflow or finite state machine
 php-symfony-yaml - convert YAML to PHP arrays and the other way around
Changes:
 symfony (4.3.8+dfsg-1ubuntu1) focal; urgency=low
 .
   * Merge from Debian unstable.  Remaining changes:
     - Do not fail testsuite on s390x
 .
 symfony (4.3.8+dfsg-1) unstable; urgency=medium
 .
   [ Christophe Coevoet ]
   * Use constant time comparison in UriSigner [CVE-2019-18887]
 .
   [ Nicolas Grekas ]
   * [Cache] forbid serializing AbstractAdapter and TagAwareAdapter instances
     [CVE-2019-18889]
   * [VarExporter] fix exporting some strings [CVE-2019-11325]
   * [HttpFoundation] fix guessing mime-types of files with leading dash
     [CVE-2019-18888]
   * [Mime] fix guessing mime-types of files with leading dash [CVE-2019-18888]
   * [Security\Core] throw AccessDeniedException when switch user fails
     [CVE-2019-18886]
 .
   [ Fabien Potencier ]
   * updated VERSION for 4.3.8
 .
   [ David Prévot ]
   * Track stable version for now
   * Update homemade overrides
   * Exclude whole directory
 .
 symfony (4.3.6+dfsg-1) unstable; urgency=medium
 .
   [ Fabien Potencier ]
   * updated VERSION for 4.3.6
 .
   [ David Prévot ]
   * Update homemade overrides
 .
 symfony (4.3.5+dfsg-1) unstable; urgency=medium
 .
   [ Fabien Potencier ]
   * updated VERSION for 4.3.5
 .
   [ David Prévot ]
   * Set upstream metadata fields: Repository.
   * Drop versioned dependency satisfied in (old)stable
   * Update Standards-Version to 4.4.1
   * Don’t fail unit tests on warning
   * Drop test failing with PHPUnit 8.4
Checksums-Sha1:
 c11afd8b59c00f8cb32fb2ede32643cd1521a756 7810 symfony_4.3.8+dfsg-1ubuntu1.dsc
 e652eb5e4a2de7b9c42cc01ebec0502d5b66d0a5 44552 symfony_4.3.8+dfsg-1ubuntu1.debian.tar.xz
 700639fbb167b93746e5e9c42d71799895297534 9248 symfony_4.3.8+dfsg-1ubuntu1_source.buildinfo
Checksums-Sha256:
 f7ae6db1885c0fa854ebad7c43c1caee3a6dc4c88e4e297ae1897d1c4dc9df70 7810 symfony_4.3.8+dfsg-1ubuntu1.dsc
 04b8c08ff7c1a533dbf194bb94fad86bce4c538d582ac96edfced1497585b981 44552 symfony_4.3.8+dfsg-1ubuntu1.debian.tar.xz
 5236b21f16918f79b9e64e02dc67e61f2e38a2ece54025630b14730d7246c7b0 9248 symfony_4.3.8+dfsg-1ubuntu1_source.buildinfo
Files:
 ba7c0e40a0bd852ff516d3a4ea9fa7ac 7810 php optional symfony_4.3.8+dfsg-1ubuntu1.dsc
 296f6d669a7ea257780cb4ea9120ea5c 44552 php optional symfony_4.3.8+dfsg-1ubuntu1.debian.tar.xz
 ce620f60e2b07cda59109e2aa3dfd9f3 9248 php optional symfony_4.3.8+dfsg-1ubuntu1_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=6eiH
-----END PGP SIGNATURE-----

More information about the Focal-changes mailing list