News for package symfony

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 3.0 (quilt)
Source: symfony
Binary: php-symfony-asset, php-symfony-browser-kit, php-symfony-class-loader, php-symfony-config, php-symfony-console, php-symfony-css-selector, php-symfony-debug, php-symfony-dependency-injection, php-symfony-dom-crawler, php-symfony-event-dispatcher, php-symfony-expression-language, php-symfony-filesystem, php-symfony-finder, php-symfony-form, php-symfony-http-foundation, php-symfony-http-kernel, php-symfony-intl, php-symfony-locale, php-symfony-options-resolver, php-symfony-process, php-symfony-property-access, php-symfony-routing, php-symfony-security, php-symfony-serializer, php-symfony-stopwatch, php-symfony-templating, php-symfony-translation, php-symfony-validator, php-symfony-var-dumper, php-symfony-yaml, php-symfony-doctrine-bridge, php-symfony-monolog-bridge, php-symfony-phpunit-bridge, php-symfony-proxy-manager-bridge, php-symfony-swiftmailer-bridge, php-symfony-twig-bridge, php-symfony-debug-bundle, php-symfony-framework-bundle, php-symfony-security-bundle,
 php-symfony-twig-bundle, php-symfony-web-profiler-bundle,
 php5-symfony-debug
Architecture: any all
Version: 2.7.7+dfsg-1
Maintainer: Debian PHP PEAR Maintainers <pkg-php-pear@lists.alioth.debian.org>
Uploaders: Daniel Beyer <dabe@deb.ymc.ch>, David Prévot <taffit@debian.org>
Homepage: https://symfony.com/
Standards-Version: 3.9.6
Vcs-Browser: http://anonscm.debian.org/gitweb/?p=pkg-php/symfony.git
Vcs-Git: git://anonscm.debian.org/pkg-php/symfony.git
Testsuite: autopkgtest
Build-Depends: debhelper (>= 9), dh-php5, php5-dev, pkg-php-tools (>= 1.14~)
Build-Depends-Indep: dctrl-tools, file, jq, parallel, php-doctrine-bundle (>= 1.4.0-2~), php-doctrine-data-fixtures (>= 1.1.1-2~), php-doctrine-orm (>= 2.4.7-2~), php-email-validator (>= 1.2.8), php-monolog (>= 1.13), php-proxy-manager (>= 1.0.0-2~), php-psr-log (>= 1.0.0-2~), php-twig (>= 1.18), php5-common, php5-intl, php5-memcache, php5-memcached, php5-sqlite, phpab, phpunit (>= 4.2.6-3~)
Build-Conflicts: php5-mongo
Package-List:
 php-symfony-asset deb php optional arch=all
 php-symfony-browser-kit deb php optional arch=all
 php-symfony-class-loader deb php optional arch=all
 php-symfony-config deb php optional arch=all
 php-symfony-console deb php optional arch=all
 php-symfony-css-selector deb php optional arch=all
 php-symfony-debug deb php optional arch=all
 php-symfony-debug-bundle deb php optional arch=all
 php-symfony-dependency-injection deb php optional arch=all
 php-symfony-doctrine-bridge deb php optional arch=all
 php-symfony-dom-crawler deb php optional arch=all
 php-symfony-event-dispatcher deb php optional arch=all
 php-symfony-expression-language deb php optional arch=all
 php-symfony-filesystem deb php optional arch=all
 php-symfony-finder deb php optional arch=all
 php-symfony-form deb php optional arch=all
 php-symfony-framework-bundle deb php optional arch=all
 php-symfony-http-foundation deb php optional arch=all
 php-symfony-http-kernel deb php optional arch=all
 php-symfony-intl deb php optional arch=all
 php-symfony-locale deb oldlibs optional arch=all
 php-symfony-monolog-bridge deb php optional arch=all
 php-symfony-options-resolver deb php optional arch=all
 php-symfony-phpunit-bridge deb php optional arch=all
 php-symfony-process deb php optional arch=all
 php-symfony-property-access deb php optional arch=all
 php-symfony-proxy-manager-bridge deb php optional arch=all
 php-symfony-routing deb php optional arch=all
 php-symfony-security deb php optional arch=all
 php-symfony-security-bundle deb php optional arch=all
 php-symfony-serializer deb php optional arch=all
 php-symfony-stopwatch deb php optional arch=all
 php-symfony-swiftmailer-bridge deb php optional arch=all
 php-symfony-templating deb php optional arch=all
 php-symfony-translation deb php optional arch=all
 php-symfony-twig-bridge deb php optional arch=all
 php-symfony-twig-bundle deb php optional arch=all
 php-symfony-validator deb php optional arch=all
 php-symfony-var-dumper deb php optional arch=all
 php-symfony-web-profiler-bundle deb php optional arch=all
 php-symfony-yaml deb php optional arch=all
 php5-symfony-debug deb php optional arch=any
Checksums-Sha1:
 444d45e566f7a3fbf90de1558f525910e30bb212 3809722 symfony_2.7.7+dfsg.orig.tar.gz
 0def88dfbdd4c42658df06bf45ce4b7f6e14ceb7 37212 symfony_2.7.7+dfsg-1.debian.tar.xz
Checksums-Sha256:
 4998a9ebe383b7efcaf061414014d7afefcc37fc7ff062f74c8cec589efd5cf1 3809722 symfony_2.7.7+dfsg.orig.tar.gz
 f420314d3df957f911ffc7020ac0ac15d3c986cff7354143e7eb084489f9a1da 37212 symfony_2.7.7+dfsg-1.debian.tar.xz
Files:
 617e46d4c9bc79b5316f63af309244bf 3809722 symfony_2.7.7+dfsg.orig.tar.gz
 3bc4c2139acb9091ce2da226373ef401 37212 symfony_2.7.7+dfsg-1.debian.tar.xz

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEcBAEBCAAGBQJWVI1eAAoJEAWMHPlE9r08XagH/1+j5FpN9I6hIl6al2oyPbtG
Z5tKQ62uHySHGbf9ePk2U2Ek/CSLzRO2hMRSPKmMdOZc4cXnQuxihObDvMciqHXZ
rsmC6PbmARos+7SZa49harKi45jhvv93mM0URwiVnuM4nBY3a2uTCClqud2jR9M/
GCB/IEkwtepK/qa2/XMraX6qSrW925RkGAS14M6hY+5buWnKPqPVO07jFGY6KVhy
FXlQ5tWBr50E+m994ViLIGb1Vhjzcgvoim6lhuPxZLp7CAtNeU2Oj2CzUrZraYoz
9XgzjKU1VtwHlAg2B4lZOVbC482DwMDW89dxVe7GeHjYDG/fMNLv6XSU2sP0XVI=
=QtWv
-----END PGP SIGNATURE-----

Changes:
symfony (2.7.7+dfsg-1) unstable; urgency=high

  [ Christian Flothmann ]
  * Vulnerability in Security Remember-Me Service [CVE-2015-8125]
    - fix potential timing attack issue
    - mitigate CSRF timing attack vulnerability
    - prevent timing attacks in digest auth listener
  * Session Fixation in the "Remember Me" Login Feature [CVE-2015-8124]
    - migrate session after remember me authentication

  [ Fabien Potencier ]
  * updated VERSION for 2.7.7

  [ Daniel Beyer ]
  * Pin debian/watch to stable 2.x releases of Symfony

 -- Daniel Beyer <dabe@deb.ymc.ch>  Tue, 24 Nov 2015 08:10:09 +0100