Affected versions
Symfony versions >=6.2, <6.4.10; >=7.0, <7.0.10; >=7.1, <7.1.3 of the Symfony SecurityBundle component are affected by this security issue.
The issue has been fixed in Symfony 6.4.10, 7.0.10, and 7.1.3.
Description
The custom user_checker defined on a firewall is not called when Login Programmaticaly with the Security::login method, leading to unwanted login.
Resolution
The Security::login method now ensure to call the configured user_checker.
Symfony 7.2 includes some DX (developer experience) improvements to make your
work easier in some tasks related to templates.
Symfony provides the translation:extract command to extract all
translatable content from Twig templates and PHP code (e.g. forms):
Symfony 7.2.0-BETA1 has just been released.
Here is the list of the most important changes since 7.1:
Symfony 7.1.6 has just been released.
Here is the list of the most important changes since 7.1.5:
Symfony 6.4.13 has just been released.
Here is the list of the most important changes since 6.4.12:
Symfony 5.4.45 has just been released.
Here is the list of the most important changes since 5.4.44:
This week, the upcoming Symfony 7.2 version improved the translation extract command with a new option, added a StringNode to the Config component, and fixed ClockMock and DnsMock support with PHPUnit 10+.
Symfony provides many ready-to-use integrations with third-party services to
send emails and notifications. From Google, Microsoft, and Amazon to smaller
services available only in certain countries, Symfony offers a variety of
integrations to enhance your productivity.
In Symfony 7.2 we've introduced some new integrations:
Notifier component: