Merge branch '6.4' into 7.3

* 6.4:
  Replace backtick operator, deprecated in PHP 8.5, with shell_exec()
  [DependencyInjection] Add test case to ensure XML parse exception message includes filename and position
  [Serializer] Fix normalizing objects with accessors having the same name as a property
  [SecurityBundle] Prevent accessing the tracked token storage when collecting data

Author: nicolas-grekas

DataCollector/SecurityDataCollector.php

@@ -101,10 +101,12 @@ public function collect(Request $request, Response $response, ?\Throwable $excep
             }
 
             $logoutUrl = null;
-            try {
-                $logoutUrl = $this->logoutUrlGenerator?->getLogoutPath();
-            } catch (\Exception) {
-                // fail silently when the logout URL cannot be generated
+            if ($this->logoutUrlGenerator && method_exists($token, 'getFirewallName')) {
+                try {
+                    $logoutUrl = $this->logoutUrlGenerator->getLogoutPath($token->getFirewallName());
+                } catch (\Exception) {
+                    // fail silently when the logout URL cannot be generated
+                }
             }
 
             $this->data = [