OXID eShop 7.4.5

Release date: November 5, 2026

The patch release OXID eShop 7.4.5 is a maintenance release that updates Symfony components, fixing the related Symfony security advisories, and contains no functional changes.

For a short and more technical overview of the changes, see the Release Notes.

Updated Symfony Components

The 7.4.5 compilation updates Symfony components. The updates contain the fixes for the following Symfony security advisories:

• symfony/config from v6.4.26 to v6.4.50: GHSA-5jff-8h8q-r5qx

• symfony/filesystem from v6.4.24 to v6.4.50: GHSA-6prc-h956-hxjq

• symfony/http-foundation from v6.4.48 to v6.4.50: CVE-2026-118514, GHSA-3h27-hjv7-fqjx, GHSA-5mx8-mwrp-5693

• symfony/mime from v6.4.40 to v6.4.49: CVE-2026-45070

• symfony/yaml from v6.4.48 to v6.4.50: GHSA-hwfg-qwvh-2wfx

Since the compilation version is exposed via the eShop core component, the CE package was newly tagged as v7.4.7 to provide the 7.4.5 compilation. The PE and EE packages were tagged v7.4.7 as well, so that all three editions stay in sync. These components contain no functional changes; the update of the Symfony components is part of this release.

Impact on existing projects

• Update recommendation: The patch release is compatible with OXID eShop 7.4.0, 7.4.1, 7.4.2, 7.4.3, and 7.4.4 and can be installed without functional changes to the shop.

• Packages: Compared to Compilation 7.4.4, the package versions are unchanged, except for the eShop core (CE/PE/EE), newly tagged as v7.4.7, and the updated Symfony components (config, filesystem, http-foundation, yaml to v6.4.50, mime to v6.4.49).

• PHP version: No change; the PHP versions supported for 7.4.0 remain valid.

• Compatible OXID extensions: Identical to 7.4.0, 7.4.1, 7.4.2, 7.4.3, and 7.4.4.

Update

For more information about updating from OXID eShop 7.4.4 to 7.4.5, see the Release Notes.