Symfony has released a new maintenance version, 6.4.43, for the actively supported 6.4 branch. The release was tagged by Fabien Potencier and contains exclusively bug fixes and minor improvements.

The 6.4.43 changelog alone lists several dozen fixes. In HttpClient, cross-authority redirects no longer leak the original Host header or the Proxy-Authorization header, an error is now raised when an HTTPS proxy is configured that libcurl cannot use, the escaping of generated curl commands was corrected, and the native "dechunk" stream filter was replaced with a pure PHP implementation. SecurityBundle now always constrains redirect targets to the current host, even without sessions, and allows LDAP and non-LDAP variants of an authenticator to share a firewall. HttpFoundation validates characters allowed in cookie paths and domains, UriSigner no longer crashes on non-string signatures, and IpUtils::isPrivateIp() throws on non-canonical IP addresses; the private subnet list was extended with RFC5737, RFC3849, RFC2544 and RFC5180 ranges.

Other notable fixes cover the Mailer (fatal TypeError when sending a RawMessage via API transports, AsyncAws exceptions wrapped into TransportException in the AmazonSqs and SES transports, rejection of control characters in SmtpTransport::setLocalDomain()), the Serializer (Mime part checks in MimeMessageNormalizer, serialized name preferred over raw property keys, discriminator attribute handling), the Cache component (support for relay 0.40, fixes for RedisCluster/RedisArray with tcp_keepalive), Messenger (ack/reject failures on deleted Redis stream entries, trace stripping in ErrorDetailsStamp), Console, Routing, AssetMapper, Yaml, String, Dotenv, Validator and more. PHP 8.6 compatibility was improved by handling removed function arguments in error messages, and Twig 4 is now allowed.

A large share of the release consists of reviewed or corrected validator and form translations, covering German, French, Italian, Turkish, Danish, Russian, Arabic, Croatian, Albanian, Brazilian Portuguese, Uzbek, Bosnian, Urdu, Tagalog, Chinese (zh-TW) and others. In total 43 contributors participated in the 6.4.43 release.