Symfony updates
Atelier 0.23.1 updates the Symfony components Drupal runs on to 7.4.23 and 8.1.11, fixing newly published Symfony advisories.
- Severity
- Moderate
- Affected
- Atelier < 0.23.1
- Fixed in
- Atelier 0.23.1
Symfony published security fixes for several components that Drupal, and so Atelier, runs on. Atelier 0.23.1 ships them. 0.23.0 and earlier are affected.
What is fixed
- Symfony 7.4.23 (was 7.4.21) for http-foundation, http-kernel, routing, serializer, validator, filesystem and yaml, and 8.1.11 (was 8.1.7) for the HTTP client. These components handle every request your site serves, so we treat the advisories as reachable.
- The update stays within Drupal core's supported versions; nothing else changes.
What to do
- Update to 0.23.1. With the Atelier Manager, run
atelier app update. Installed with the install script, re-run the installer as described in Upgrade.