Changelog (v6.4.48...v6.4.49)
- bug #67504 Ignore malformed and multiple ranges in BinaryFileResponse (@jack-worman)
- bug #67501 Don't reject suffix ranges longer than the file in BinaryFileResponse (@jack-worman)
- bug #67296 Handle filter failures in array values (@nicolas-grekas)
- bug #67345 Fix cookie names and header parsing (@nicolas-grekas)
- bug #67126 Fix MigratingSessionHandler sending needless cookies to delete empty sessions (@nicolas-grekas)
- bug #67123 Destroy empty sessions in updateTimestamp() of the Redis, Memcached, MongoDb and Pdo session handlers (@PhilETaylor)
- bug #67125 Don't marshall empty session data in MarshallingSessionHandler (@nicolas-grekas)
- bug #67059 Don't announce a Content-Length on non-successful BinaryFileResponse (@lazerg)
- bug #67060 Register the session shutdown function only once in NativeSessionStorage (@lazerg)
[SECURITY] Security release