New Drupal Version Available

There has been released a new version of open-source content management framework Drupal. The new version includes fixed version of Symfony library (details about Symfony vulnerability here in Symfony blog).

Affected versions:
Drupal core 8.x versions prior to 8.5.6

More information in Drupal security advisory.

Vulnerability In Symfony PHP Library

There has been found a severe vulnerability in widely used Symfony PHP library. The vulnerability may lead to authentication bypass vulnerabilities.

Affected versions:
2.7.x earlier than 2.7.49
2.8.x earlier than 2.8.44
3.3.x earlier than 3.3.18
3.4.x earlier than 3.4.14
4.0.x earlier than 4.0.14
4.1.x earlier than 4.1.3

Symfony 3.0, 3.1, and 3.2 are not maintained anymore and won't get a fix. Users of these versions should move to more recent versions.

More information in Symfony blog.