Follow-up to #2578805: Upgrade to Symfony 2.7.5

Symfony 2.7.6 is now released. Symfony 2.7.6 Released.

Have a skim of the issue summary on #2454393: Upgrade to Symfony 2.6.5 for a better overview of why upgrading point releases is a good idea :).

This DOES have security fixes, so I have initially labeled it as Critical, but I understand that might be changed.

Changelog changelog.

Reference: https://www.drupal.org/core/beta-changes
Issue category Task because it is an external library upgrade.
Issue priority Critical because it is an external library update which should be completed before final release, and it has security fixes. See #2400407: [meta] Ensure vendor (PHP) libraries are on latest stable release.
Disruption Not disruptive.

Comments

TJacksonVA created an issue. See original summary.

dawehner’s picture

dawehner
Primary language German
commented

This DOES have security fixes, so I have initially labeled it as Critical, but I understand that might be changed.

This is a really strong point to make it critical.

TJacksonVA’s picture

TJacksonVA commented

@dawehner,
Agreed. Their list of bug and security fixes includes the following items labeled "Security" for the 2.7.6 release:

  • bug #16108 [Security] #15764. Use SessionAuthenticationStrategy on RememberMe login
  • bug #16146 [Security] sync translations and add a test for it
  • bug #14842 [Security][bugfix] "Remember me" cookie cleared on logout with custom "secure"/"httponly" config options
  • bug #13627 [Security] InMemoryUserProvider now concerns whether user's password is changed when refreshing
  • bug #15895 [Security] Allow user providers to be defined in many files
dawehner’s picture

dawehner
Primary language German
commented
Priority: Critical » Major

All of those are part of the security component, which we don't use. They aren't security fixes itself.

andypost’s picture

andypost
he/him
Primary language Russian
commented
Status: Active » Closed (duplicate)
Related issues: +#2609268: Upgrade to Symfony 2.7.6

Duplicate of #2609268: Upgrade to Symfony 2.7.6
And there's a patch