Symfony 5.4 LTS Will Receive Security Fixes Until February 2029, Thanks to Ibexa
October 24, 2024
•
Published by
Nicolas Grekas
Symfony’s release process is time-based: each month, we release a bug-fix update; every six months, we release a feature update; and every two years, we publish a major release together with a "Long Term Support" (LTS) feature update.
Each feature release is maintained for eight months, except for LTS versions, which receive three years of bug fixes and one more year of security fixes.
Check out Symfony’s release calendar for more details.
Symfony 5.4 LTS: The Clock is Ticking
Symfony 5.4, released in November 2021, is currently the oldest maintained version. If your project still relies on Symfony 5.4, it's crucial to act soon: regular bug fixes for this version will end in November 2024.
Per the Symfony release policy, Symfony 5.4 LTS was planned to receive security updates until November 2025.
Ibexa and Symfony 5.4 LTS: An Extended Security Lifeline
Ibexa, a long-standing player in the open-source ecosystem, recently released Ibexa DXP v4.6 LTS, which is built on Symfony 5.4 LTS. Ibexa has announced that security updates for its platform will continue until February 2029. But this raises a key question: How can Ibexa offer security support until 2029, when Symfony 5.4 LTS is scheduled to lose its security updates in November 2025?
To address this, Ibexa approached us at Symfony. Over the years, Ibexa has contributed significantly to Symfony, so when they sought a solution, we were eager to cooperate.
The Solution: Ibexa as a Special Sponsor
As a result of this collaboration, Ibexa became a late and special sponsor for Symfony 5.4 LTS. Thanks to their sponsorship, Symfony—the company— will extend the security support for Symfony 5.4 LTS until February 2029. This ensures that Ibexa DXP v4.6 LTS, and any other projects relying on Symfony 5.4, will remain secure for an extended period.
In the spirit of open source, these security updates will be publicly available via Packagist, so everyone can benefit from the extended maintenance period.
However, we urge developers: don’t use this as an excuse to delay upgrading to newer Symfony versions! It’s always best to stay up-to-date for the latest features, performance improvements, and community support. In case you're wondering, Ibexa is working on DXP v5 LTS, which is set to arrive in 2025 and will be based on Symfony 7.
What Does This Mean for Future Symfony Releases?
For other versions of Symfony, nothing changes. Symfony 6.4 LTS will still receive security updates until November 2027. Going forward, we hope that Ibexa’s future LTS versions will align more closely with Symfony’s release cycles.
We’re grateful to Ibexa for helping to fund this extended support. If your company relies on Symfony for your projects, we encourage you to consider joining our backing program and help sustain the Symfony ecosystem.
Help the Symfony project!
As with any Open-Source project, contributing code or documentation is the most common way to help, but we also have a wide range of sponsoring opportunities.