Two vulnerabilities have been reported in Symfony, which can be exploited by malicious people to compromise a vulnerable system.

1) An input validation error exists within the "Yaml::parse()" method of the YAML component when decoding YAML input containing arbitrary PHP files.

2) An input validation error exists within the "Yaml::parse()" method of the YAML component when decoding YAML input containing PHP serialized objects.

Successful exploitation may allow execution of arbitrary code.

The vulnerabilities are reported in versions prior to 2.0.22 and 2.1.7.

Solution
Update to version 2.0.22 or 2.1.7.

Provided and/or discovered by
The vendor credits:
1) Pádraic Brady
2) Johannes Schmitt

Original Advisory
http://symfony.com/blog/security-release-symfony-2-0-22-and-2-1-7-released

Deep Links
Links available to Secunia VIM customers