# Symfony v7.3.4 and v6.4.26 released!

**URL:** <https://forum.devtalk.com/t/symfony-v7-3-4-and-v6-4-26-released/216417>\
**Category:** Backend Official News\
**Tags:** newsbot, symfony, official-news\
**Created:** [27 September 2025 15:21 UTC](https://forum.devtalk.com/t/symfony-v7-3-4-and-v6-4-26-released/216417 "2025-09-27T15:21:03Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![NewsBot](https://forum.devtalk.com/user_avatar/forum.devtalk.com/newsbot/32/1114_2.png) [@NewsBot](https://forum.devtalk.com/u/NewsBot)\
**Post date:** [27 September 2025 15:21 UTC](https://forum.devtalk.com/t/symfony-v7-3-4-and-v6-4-26-released/216417/1 "2025-09-27T15:21:04Z")

</div>

[Symfony](https://devtalk.com/symfony) v7.3.4 and v6.4.26 has been released.

> [@](#):
>
> **Changelog** ([Comparing v7.3.3...v7.3.4 · symfony/symfony · GitHub](https://github.com/symfony/symfony/compare/v7.3.3...v7.3.4))
> 
> - bug #61830 [Security] Fix preload warning in `AuthorizationChecker` (@MatTheCat)
> - bug #61825 [DoctrineBridge] Make `EntityUserProvider`s pass attributes to their loader (@MatTheCat)
> - bug #61818 [Notifier] Rename LOX24RequestParser to Lox24RequestParser (@nicolas-grekas)
> - bug #61808 [Config] Fix incorrect serialized data mangling (@aboks)
> - bug #61793 [AssetMapper] Prevent duplicate entries in module preloads (@xDeSwa)
> - bug #61785 [ObjectMapper] Preserve non-promoted constructor parameters (@rvanlaak)
> - bug #60515 [Mailer] Fix memory leak with `mailer.message_logger_listener` (@andrew-demb)
> - bug #61757 [FrameworkBundle] Perform-no-deep-merging on workflow transitions’ from/to configs (@nicolas-grekas)
> - bug #61766 Fix ord()-related PHP 8.5 deprecations (@nicolas-grekas)
> - bug #61368 [HttpKernel] Refine Vary header check to skip special handling of ‘Accept-Language’ when it’s the only entry and ‘\_vary\_by\_language’ is `true` in `CacheAttributeListener` (@santysisi)
> - bug #61752 [PropertyInfo] Fix getting type from constructor of parent class in `PhpStanExtractor` (@wuchen90)
> - bug #61746 [Serializer] Fix unknown type in denormalization errors when union type used in constructor (@d-mitrofanov-v)
> - bug #61724 [Console] Fix handling of `\E` in Bash completion (@HypeMC)
> - bug #61518 [HttpKernel] Handle an array vary header in the http cache store for write (@philpichet)
> - bug #61736 [PhpUnitBridge] do not try to modify the result of a PhptTestCase (@xabbuh)
> - bug #61728 [TypeInfo] Fix issue with merging union type with a nullable union type (@matijn-made)
> - bug #61731 [PhpUnitBridge] Fix gathering deprecation in phpt (@nicolas-grekas)
> - bug #61729 [PhpUnitBridge] Silence deprecation of \_\_sleep/wakeup() (@nicolas-grekas)
> - bug #61727 Replace \_\_sleep/wakeup() by \_\_(un)serialize() for throwing and internal usages (@nicolas-grekas)
> - bug #61714 [SecurityBundle] Fix se…

Link: [Release v7.3.4 · symfony/symfony · GitHub](https://github.com/symfony/symfony/releases/tag/v7.3.4)

> [@](#):
>
> **Changelog** ([Comparing v6.4.25...v6.4.26 · symfony/symfony · GitHub](https://github.com/symfony/symfony/compare/v6.4.25...v6.4.26))
> 
> - bug #61856 [Console] do not pass the empty string to ord() (@xabbuh)
> - bug #61855 [DoctrineBridge][Yaml] don’t cast strings exceeding the min/max int ranges (@xabbuh)
> - bug #61844 do not coerce NAN to other types (@xabbuh)
> - bug #61825 [DoctrineBridge] Make `EntityUserProvider`s pass attributes to their loader (@MatTheCat)
> - bug #61793 [AssetMapper] Prevent duplicate entries in module preloads (@xDeSwa)
> - bug #61757 [FrameworkBundle] Perform-no-deep-merging on workflow transitions’ from/to configs (@nicolas-grekas)
> - bug #61766 Fix ord()-related PHP 8.5 deprecations (@nicolas-grekas)
> - bug #61368 [HttpKernel] Refine Vary header check to skip special handling of ‘Accept-Language’ when it’s the only entry and ‘\_vary\_by\_language’ is `true` in `CacheAttributeListener` (@santysisi)
> - bug #61746 [Serializer] Fix unknown type in denormalization errors when union type used in constructor (@d-mitrofanov-v)
> - bug #61724 [Console] Fix handling of `\E` in Bash completion (@HypeMC)
> - bug #61518 [HttpKernel] Handle an array vary header in the http cache store for write (@philpichet)
> - bug #61736 [PhpUnitBridge] do not try to modify the result of a PhptTestCase (@xabbuh)
> - bug #61731 [PhpUnitBridge] Fix gathering deprecation in phpt (@nicolas-grekas)
> - bug #61729 [PhpUnitBridge] Silence deprecation of \_\_sleep/wakeup() (@nicolas-grekas)
> - bug #61727 Replace \_\_sleep/wakeup() by \_\_(un)serialize() for throwing and internal usages (@nicolas-grekas)
> - bug #61693 [Console] Don’t append a new line to test inputs ending with an EOT (@MatTheCat)
> - bug #61596 [FrameworkBundle] Normalize workflow places separately (@KevinVanSonsbeek)
> - bug #61690 [Console] Don’t automatically append EOT to multiline test inputs (@MatTheCat)
> - bug #61667 [Config] Fix `GlobResource` pattern with trailing slash (@HypeMC)
> - bug #61659 [Security] Fix `HttpUtils::createRequest()` when the base request is forw…

Link: [Release v6.4.26 · symfony/symfony · GitHub](https://github.com/symfony/symfony/releases/tag/v6.4.26)