Please upgrade to Yii 2.0.52

We have fixed a security issue in 2.0.50 but there were additional issues so complete fix was done in 2.0.52. We have not properly assigned a new CVE for it and considered additional fix as:

Bug #20232: Fix regression introduced in GHSA-cjcc-p67m-7qxm while attaching behavior defined by __class array key (erickskrauch)

That was not correct and now there is a separate advisory: CVE-2024-58136.

Thanks goes to Nicolas Bourras & Thomas Reynolds from Orange Cyberdefense.

Yii 2.0.52

We are pleased to announce the release of Yii Framework version 2.0.52.

Please refer to the instructions at https://www.yiiframework.com/download/ to install or upgrade to this version.

This release fixes PHP 8.4 compatibility, resolves a number of bugs, and adds some minor enhancements:

Read more

Yii 2.0.51

We are pleased to announce the release of Yii Framework version 2.0.51.

Please refer to the instructions at https://www.yiiframework.com/download/ to install or upgrade to this version.

This release fixes regressions in 2.0.50, compatibility of error handler with PHP 8.3 and a number of bugs.

Read more

Auth Client extension 2.2.16 released

We are very pleased to announce the release of Auth Client extension version 2.2.16.

  • Use appropriate exception if client does not exist
  • Add support to configure the OAuth2 access token location in requests and added a generic OAuth2 client
  • Add ability to configure OpenIdConnect cache duration, default is 1 week

See the CHANGELOG for details.

Twig extension 2.5.0 released

Version 2.5.0 of Twig extension for Yii 2 was released.

This version adds support for Twig 3.9. Note that there were many internal changes that might affect and break codebases using twig:

Internal functions (including twig_get_attribute) has been moved and renamed.
The internal working of twig does not store template state in the output buffer anymore.
This means if a custom twig function reads and modifies the output buffer, it might not work as expected.

See the CHANGELOG for details.

Auth Client extension 2.2.15 released

We are very pleased to announce the release of Auth Client extension version 2.2.15.

This version fixes a bug not using issuer claim from OpenID configuration, enhances security, and introduces more specific ClientErrorResponseException when the response code in BaseOAuth::sendRequest() is a 4xx.

See the CHANGELOG for details.

Thanks to rhertogh for contributing security enhancements.

Queue extension 2.3.6 released

Queue extension version 2.3.6 was released.

This release:

  • Added ability to configure keepalive and heartbeat for AMQP and AMQP interop
  • Added ability to push message with headers for AMQP interop driver
  • SignalLoop::$exitSignals now includes SIGQUIT
  • Fixed error with empty Redis payload

See the CHANGELOG for details.

Yii 2.0.49

We are pleased to announce the release of Yii Framework version 2.0.49.

Please refer to the instructions at https://www.yiiframework.com/download/ to install or upgrade to this version.

This release has a number of bugfixes and some small enhancements:

Read more

Debug extension 2.1.24 released

Debug extension version 2.1.24 was released.

This release:

  • Fixes issues with DB panel additions made in previous release.
  • Fixes issues with Mail panel when using Symfony mailer.
  • DB panel's excessive called threshold is now null by default so feature is disabled.

See the CHANGELOG for details.

Debug extension 2.1.23 released

Debug extension version 2.1.23 was released.

This release adds two very useful enhancements:

  1. yii2-symfonymailer support in src/panels/MailPanel.php
  2. New display of DB query call location in DB panel

See the CHANGELOG for details.

Get notified of news as soon as they are available using our RSS Feed.

Years

Popular Tags