security update for symfony