OXID eShop 7.5.1

Release date: October 20, 2026

The patch release OXID eShop 7.5.1 is a maintenance release that updates three Symfony components, fixing the related Symfony security advisories, and contains no functional changes.

For a short and more technical overview of the changes, see the Release Notes.

Updated Symfony Components

The 7.5.1 compilation updates three Symfony components to version v6.4.48 each. The updates contain the fixes for the following Symfony security advisories:

symfony/expression-language from v6.4.32 to v6.4.48: CVE-2026-109449
symfony/http-foundation from v6.4.41 to v6.4.48: CVE-2026-108082
symfony/yaml from v6.4.40 to v6.4.48: CVE-2026-109413

Since the compilation version is exposed via the eShop core component, the CE package was newly tagged as v7.5.2 to provide the 7.5.1 compilation. The PE and EE packages were tagged v7.5.2 as well, so that all three editions stay in sync. These components contain no functional changes; the update of the Symfony components is part of this release.

Impact on existing projects

Update recommendation: The patch release is compatible with OXID eShop 7.5.0 and can be installed without functional changes to the shop.
Packages: Compared to Compilation 7.5.0, the package versions are unchanged, except for the eShop core (CE/PE/EE), newly tagged as v7.5.2, and the updated Symfony components (expression-language, http-foundation, yaml) to v6.4.48.
PHP version: No change; the PHP versions supported for 7.5.0 remain valid.
Compatible OXID extensions: Identical to 7.5.0.

Update

For more information about updating from OXID eShop 7.5.0 to 7.5.1, see the Release Notes.