Skip to content

Commit 4bc3033

Browse files
Update v4.6.17 (#2650)
* Update v4.6.17 * Fix * Link added
1 parent 2172305 commit 4bc3033

File tree

2 files changed

+25
-1
lines changed

2 files changed

+25
-1
lines changed

docs/update_and_migration/from_4.6/update_from_4.6.md

Lines changed: 24 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -249,3 +249,27 @@ Then, verify that Symfony Flex installed the versions you were using before.
249249
## v4.6.16
250250

251251
No additional steps needed.
252+
253+
## v4.6.17
254+
255+
### Security
256+
257+
This release contains security fixes.
258+
For more information, see [the published security advisory](https://developers.ibexa.co/security-advisories/ibexa-sa-2025-001-vulnerabilities-in-shopping-cart-and-publish-unscheduling).
259+
For each of the following fixes, evaluate the vulnerability to determine whether you might have been affected.
260+
If so, take appropriate action.
261+
262+
#### CartOwner permission limitation exposes carts
263+
264+
This fixes a critical vulnerability in the REST API regarding shopping carts.
265+
There are no additional update steps to execute.
266+
267+
#### Unauthorized user can cancel scheduled publish events
268+
269+
It fixes vulnerability in publish scheduling, ensures that `edit/create` policies are correctly checked.
270+
There are no additional update steps to execute.
271+
272+
#### Dependency upgrades
273+
274+
This release upgrades the requirements for [Twig to v3.19](https://github.com/twigphp/Twig/security/advisories/GHSA-3xg3-cgvq-2xwr) and [PHPSpreadsheet to v1.29.9](https://github.com/PHPOffice/PhpSpreadsheet/security), resolving several vulnerabilities of varying severity in those dependencies.
275+
There are no additional update steps to execute.

mkdocs.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -932,7 +932,7 @@ extra:
932932
latest_tag_4_3: '4.3.5'
933933
latest_tag_4_4: '4.4.4'
934934
latest_tag_4_5: '4.5.7'
935-
latest_tag_4_6: '4.6.16'
935+
latest_tag_4_6: '4.6.17'
936936

937937
symfony_doc: 'https://symfony.com/doc/5.x'
938938
user_doc: 'https://doc.ibexa.co/projects/userguide/en/master'

0 commit comments

Comments
 (0)