TYPO3 10.4.10

Release Notes

Version 10.4.10

Stay secure and up-to-date with TYPO3 ELTS!

The TYPO3 CMS community supported from 2020-04-21 until 2023-04-30.
Extend your support now until 2026-04-30 to get access to the latest security and compatibility updates for this version.

Learn more about TYPO3 ELTS Browse the TYPO3 ELTS Portal

Release Notes for TYPO3 CMS 10.4.10

This document contains information about TYPO3 CMS 10.4.10 which was released on 17.11.2020.

Get TYPO3 10.4.10 now

News

This release is a combined bug fix and security release.

Find more details in the security bulletins:

Read TYPO3 10.4.10 Release News

Checksums of TYPO3 10.4.10

SHA256

402361a51aaaef0339ef49bbc68d1b86b1c46ebe41f763ba6ee8978a720254f5 typo3_src-10.4.10.tar.gz
53ff2624a2e0e4fe9ebfecee701b43f4f3501535694a463b77110777cb1fdca6 typo3_src-10.4.10.zip

SHA1

37a19fe1360fa5978f3ee0fa1ac356aa86cdb92a typo3_src-10.4.10.tar.gz
ef831450588259eeef3455f755a6ddb28b4f33cd typo3_src-10.4.10.zip

MD5

4c50ee19a44c57fe9ffe4c8fa2ff070e typo3_src-10.4.10.tar.gz
8f1a8bdffd4d71bf09494b5bf533a956 typo3_src-10.4.10.zip

Upgrading

The usual upgrading procedure applies. No database updates are necessary. It might be required to clear all caches; the "important actions" section in the TYPO3 Install Tool offers the accordant possibility to do so.

Changes

Here is a list of what was fixed since 10.4.9:

2020-11-17 05dd328bdc [RELEASE] Release of TYPO3 10.4.10 (thanks to Oliver Hader)
2020-11-17 73a7a902eb [SECURITY] Disallow XXE in RSS dashboard widget (thanks to Oliver Hader)
2020-11-17 0b96d4bda2 [SECURITY] Protect persisted session IDs from being used directly (thanks to Oliver Hader)
2020-11-17 a69e1d653b [SECURITY] Encode passed arguments in Fluid view helpers (thanks to Oliver Hader)
2020-11-17 0dd7ba3333 [SECURITY] Upgrade typo3fluid/fluid to v2.6.10 (thanks to Oliver Hader)
2020-11-17 e4e661091f [BUGFIX] Do not try to evaluate fe_groups for page overlays (thanks to Markus Klein)
2020-11-16 f2ff23e513 [BUGFIX] Do not use AdminPanel reference in EXT:frontend code (thanks to Benni Mack)
2020-11-16 444b05e694 [TASK] Introduce resource Content-Security-Policy check (thanks to Oliver Hader)
2020-11-16 9f82910aa7 [TASK] Introduce sudo mode for install tool accessed via backend (thanks to Oliver Hader)
2020-11-16 128aa651b4 [BUGFIX] Update localized records when publishing default translation (thanks to Benni Mack)
2020-11-16 09c9d79aa2 [TASK] Drop deprecated testing-framework method usages (thanks to Christian Kuhn)
2020-11-14 196dc8b341 [BUGFIX] Make login loading text always readable (thanks to Eric Chavaillaz)
2020-11-13 204130014c [BUGFIX] Install tool database row updater works with mssql (thanks to Christian Kuhn)
2020-11-13 16501d77fa [TASK] Streamline server response check (thanks to Oliver Hader)
2020-11-13 eea5662b3d [TASK] Update @typo3/icons to 2.0.4 (thanks to Andreas Fernandez)
2020-11-13 359f416500 [TASK] Fix phpstan checkFunctionArgumentTypes errors in ext:backend (thanks to Alexander Schnitzler)
2020-11-13 5aebabcbd8 [TASK] Streamline usage of contrib packages in TypeScript (thanks to Benjamin Franzke)
2020-11-13 da5741e265 [BUGFIX] Remove upper limits of imagewidth & imageheight of tt_content (thanks to Georg Ringer)
2020-11-12 6d134bda6c [DOCS] Improve documentation for Fluid f:translate viewhelper (thanks to Peter Kraume)
2020-11-12 6d66da90ea Revert "[BUGFIX] Update localized records when publishing default translation" (thanks to Anja Leichsenring)
2020-11-12 a71f5ed73f [BUGFIX] Update localized records when publishing default translation (thanks to Benni Mack)
2020-11-12 2ccd30ed70 [TASK] Use current mime types for fonts (thanks to Guido Schmechel)
2020-11-11 8da21da372 [TASK] Enable EXT:impexp to include presets in export (thanks to Alexander Nitsche)
2020-11-11 19c5ed0e8a [BUGFIX] Disable no_cache functionality for new installations (thanks to Benni Mack)
2020-11-11 4a5768c3e6 [TASK] Remove unneeded BE user context set up from TreeController test (thanks to Tymoteusz Motylewski)
2020-11-11 4a2769793e [BUGFIX] Reintroduce the check on options.saveDocNew (thanks to Xavier Perseguers)
2020-11-11 bee026d6dc [FEATURE] Add options to locally test on composer min and max stages (thanks to Anja Leichsenring)
2020-11-11 389edca5b4 [TASK] Raise typo3/testing-framework to 6.4.7 (thanks to Benni Mack)
2020-11-10 33d6afc156 [TASK] Removed unknown aria attribute from modules menu (thanks to Torben Hansen)
2020-11-10 8f5f8080c2 [BUGFIX] Add focus style to button on login form (thanks to Torben Hansen)
2020-11-10 9737936dd7 [FEATURE] Allow more DBMS-Versions for local testing (thanks to Anja Leichsenring)
2020-11-09 617f9c0580 [BUGFIX] Moving pages in workspaces updates pid correctly (thanks to Christian Kuhn)
2020-11-07 14a0d7cb67 [TASK] Upgrade typo3/phar-stream-wrapper to v3.1.6 (thanks to Oliver Hader)
2020-11-07 1c2b5b8826 [BUGFIX] Fix type error in TCA table wizard for null values (thanks to Daniel Siepmann)
2020-11-07 3d712565e5 [TASK] Enforce Composer 2 usage for TYPO3 development (thanks to Helmut Hummel)
2020-11-07 6dff09314e [TASK] Fix phpstan checkFunctionArgumentTypes errors in ext:extbase (thanks to Alexander Schnitzler)
2020-11-06 ffba5bfe5d [BUGFIX] Avoid database errors when translating sys_file (metadata) records (thanks to Benni Mack)
2020-11-06 1c319b430a [BUGFIX] Fix workspace select / deselect all buttons (thanks to Oliver Bartsch)
2020-11-06 365bc02c80 [BUGFIX] Allow keyboard usage of file upload dropzone (thanks to Olaf Schmidt-Wischhöfer)
2020-11-05 dd5e6892b6 [BUGFIX] Workspace preview uncheck all button (thanks to Christian Kuhn)
2020-11-05 16024b8892 [TASK] Use SVG icon sprites (thanks to Andreas Fernandez)
2020-11-04 e0fc675ebf Revert "[BUGFIX] Fix count for custom queries with group by statement" (thanks to Anja Leichsenring)
2020-11-04 7a0249308c [BUGFIX] Allow slug recreation if postModifiers are defined (thanks to Elias Häußler)
2020-11-04 39663f218d [BUGFIX] Provide colPos for each cell in defLangBinding view (thanks to Oliver Bartsch)
2020-11-03 206cd379dc [BUGFIX] Fix count for custom queries with group by statement (thanks to Stefan Froemken)
2020-11-01 45dcd54669 [BUGFIX] Use requested php version for testing also in web container (thanks to Anja Leichsenring)
2020-10-31 8b93d540e0 [BUGFIX] Fix exclusive values in FormEngine's selectMultipleSideBySide (thanks to Andreas Fernandez)
2020-10-31 44716b7ca1 [BUGFIX] Apply fixes from newer php-cs-fixer (thanks to Andreas Fernandez)
2020-10-30 8b191e5880 [BUGFIX] Use default page id for fetching a site in SlugService (thanks to Oliver Bartsch)
2020-10-30 ffca74d20f [BUGFIX] Use button tag for buttons in IRRE header (thanks to Olaf Schmidt-Wischhöfer)
2020-10-30 637e6fed01 [TASK] Update build plans to support Composer 2 (thanks to Andreas Fernandez)
2020-10-29 c0e03198eb [TASK] Fix phpstan checkFunctionArgumentTypes errors in ext:core Database (thanks to Alexander Schnitzler)
2020-10-29 ee621d92e1 [DOCS] Wrong API example for FluidEmail in changelog (thanks to Daniel Siepmann)
2020-10-28 52b14ce4fc [DOCS] Update linkvalidator documentation: Administration (thanks to Sybille Peters)
2020-10-28 ddcc0fed8e [BUGFIX] Use correct format character in CleanerTaskTest (thanks to Oliver Bartsch)
2020-10-27 4ed80eeff9 [BUGFIX] Do not re-set PreviewAspect when initializing TSFE (thanks to Benni Mack)
2020-10-27 f8d722dadb [DOCS] Update linkvalidator documentation Introduction (thanks to Sybille Peters)
2020-10-26 5131e9244d [DOCS] Fix wrong event class name in AssetRenderer events example (thanks to Jonas Eberle)
2020-10-25 5c501285c4 [BUGFIX] Prevent double escaping for src attribute in ScriptViewHelper (thanks to Frank Naegler)
2020-10-25 e69371038d [BUGFIX] TCA foreign_table_where on some l10n_parent fields (thanks to Christian Kuhn)
2020-10-25 56a21a14c9 [BUGFIX] Fix CSH labels for inverted columns (thanks to Oliver Bartsch)
2020-10-25 d5bab316a7 [BUGFIX] Use type "button" for accessible paste content buttons (thanks to Oliver Bartsch)
2020-10-23 522966d9b7 [TASK] Fix phpstan checkFunctionArgumentTypes errors in ext:backend Tree (thanks to Alexander Schnitzler)
2020-10-22 712176af27 [BUGFIX] Ensure getUniqueId returns unique ids for grid objects (thanks to Oliver Bartsch)
2020-10-22 a7fc32f6bc [BUGFIX] Limit doctrine/dbal to 2.10.x or 2.11.2+ (thanks to Markus Klein)
2020-10-22 1ab8d1c2d4 [BUGFIX] Allow access to a sub-branch of a workspace for a limited user (thanks to Danilo Caccialanza)
2020-10-22 17021e5abf [BUGFIX] Felogin allows redirect to any site (thanks to Markus Klein)
2020-10-22 7cf9eef69f [BUGFIX] Fix PHP type error in f:form.select.optgroup view helper (thanks to Oliver Hader)
2020-10-22 5a16572a85 [BUGFIX] Remove invalid attribute alt from textareas (thanks to Georg Ringer)
2020-10-21 69ebf0c17c [BUGFIX] Make paste content button accessible via keyboard (thanks to Oliver Bartsch)
2020-10-21 ac2282de6e [BUGFIX] Remove invalid attribute href from span element (thanks to Georg Ringer)
2020-10-21 c008f7b9a1 [BUGFIX] Fix label for pages.no_search column (thanks to Oliver Bartsch)
2020-10-21 18f2d26427 [BUGFIX] Remove invalid alt attribute from span elements (thanks to Georg Ringer)
2020-10-21 976b07fb4d [BUGFIX] Replace shorthand ternary operator in CheckboxElement (thanks to Georg Ringer)
2020-10-21 8eca4a08c7 [TASK] Provide title attribute for iframes (thanks to Oliver Bartsch)
2020-10-21 fc4c0a642c [BUGFIX] Remove wrong single quote (thanks to Georg Ringer)
2020-10-20 6f29f9da55 [TASK] Fix phpstan checkFunctionArgumentTypes errors in ext:backend Form (thanks to Alexander Schnitzler)
2020-10-20 e43e2ec220 [TASK] Fix phpstan checkFunctionArgumentTypes errors in ext:backend Controller (thanks to Daniel Goerz)
2020-10-20 20249cac28 [BUGFIX] Restore behavior of LocalDriver->isFolderEmpty() (thanks to Daniel Goerz)
2020-10-20 7ebe143419 [TASK] Ensure composer update installs the highest possible packages (thanks to Andreas Fernandez)
2020-10-19 4e50ed2328 [BUGFIX] Add missing field in MigrateFeloginPlugins upgrade wizard (thanks to Christoph Lehmann)
2020-10-19 8192d56848 [BUGFIX] Mark page for previewing when admin panel is active (thanks to Benni Mack)
2020-10-19 4d42752146 [BUGFIX] Migrate the most accurate RealURL page path to page slugs (thanks to Mathias Brodala)
2020-10-19 e5d438ec0e [BUGFIX] Return empty array when user can't be found (thanks to Tymoteusz Motylewski)
2020-10-19 cd94f3dd37 [BUGFIX] Workspace and reference index fixes (thanks to Christian Kuhn)
2020-10-19 0d5c0826c8 [TASK] Fix phpstan checkFunctionArgumentTypes errors in ext:backend View (thanks to Alexander Schnitzler)
2020-10-19 965534c6c2 [TASK] Fix documentation rendering (thanks to Oliver Hader)
2020-10-18 4878d1fd23 [BUGFIX] Allow empty string in redirects:integritycheck task (thanks to Daniel Siepmann)
2020-10-17 c487f1028f [DOCS] Improve documentation of format.crop (thanks to Sybille Peters)
2020-10-17 ed35edfd28 [BUGFIX] Return alternative group uids when aspect has no user (thanks to Xavier Perseguers)
2020-10-15 b06f879588 [BUGFIX] Do not consider empty files being an image or media file (thanks to Helmut Hummel)
2020-10-15 e23a42612f [BUGFIX] Ensure message send loop breaks in case of success (thanks to Simon Gilli)
2020-10-15 1253fbb1f9 [DOCS] Revise visual output of linkvalidator configuration chapter (thanks to Chris Müller)
2020-10-13 c075e8d745 [BUGFIX] Provide original message and envelope to transport (thanks to Simon Gilli)
2020-10-13 ac2f4dcc9b [BUGFIX] Quote double quotes in CSV integrity fix script (thanks to Christian Kuhn)
2020-10-13 b2e8c4b7b5 [TASK] Raise typo3/testing-framework to 6.4.6 (thanks to Christian Kuhn)
2020-10-13 5f0c1a256b [BUGFIX] Fix SQL error in backend user list on PostgreSQL (thanks to Stephan Großberndt)
2020-10-13 20856e4d87 [TASK] Provide information about mandatory uid field in PHPDoc (thanks to Thomas Löffler)
2020-10-12 3cc0e46add [BUGFIX] Allow more page types for backend usergroups (thanks to Benni Mack)
2020-10-12 7e34b11b59 [BUGFIX] Improve performance of the forgot password action (thanks to Tymoteusz Motylewski)
2020-10-12 57b418a95b [BUGFIX] Fix type error in log upgrade wizard (thanks to Georg Großberger)
2020-10-12 1c4c9cbd7b [BUGFIX] Ensure UserAspect->isLoggedIn() checks for user only (thanks to Benni Mack)
2020-10-10 dfd17624b8 [BUGFIX] Do not read workspace if there is no BE user (thanks to Markus Klein)
2020-10-10 efe48ef4e0 [BUGFIX] Fix data type annotations in WidgetRegistry (thanks to Chris Müller)
2020-10-09 be076b6ac9 [TASK] Remove empty array from site configuration before persisting (thanks to Georg Ringer)
2020-10-08 fc34ec5041 [TASK] Explicitly require PHPUnit 8 (thanks to Helmut Hummel)
2020-10-08 661dd64d2b [BUGFIX] Use correct path in example of ResourceViewHelper (thanks to Sybille Peters)
2020-10-08 d6ab799edd [BUGFIX] Avoid exceptions during link checking (thanks to Georg Ringer)
2020-10-08 d7ba0516e0 [TASK] Force integer for specific fields of site configuration (thanks to Georg Ringer)
2020-10-08 210cdc09fb [BUGFIX] If is_regexp = 1 then source_path must wrap in # (thanks to Mohsin Khan)
2020-10-07 67f3757a52 [BUGFIX] Adjust acceptance test for composer max stages (thanks to Anja Leichsenring)
2020-10-07 a7f97849c6 [TASK] Activate a postgres/mssql skipped test (thanks to Christian Kuhn)
2020-10-07 68e790755d [BUGFIX] Omit exception using localized file metadata with RTE (thanks to Chris Müller)
2020-10-06 e209977f53 [BUGFIX] Revert typo3/testing-framework providing prophecy trait (thanks to Anja Leichsenring)
2020-10-06 a79c665c9a [TASK] Fix phpstan checkFunctionArgumentTypes errors in ext:core Resource (thanks to Alexander Schnitzler)
2020-10-06 2f6f936664 [BUGFIX] Use Package as argument type in ServiceProviderRegistry again (thanks to Daniel Goerz)
2020-10-06 b0712a5a2f [TASK] Fix phpstan checkFunctionArgumentTypes errors in ext:core Utility (thanks to Alexander Schnitzler)
2020-10-06 84dea4f94b [TASK] Fix phpstan checkFunctionArgumentTypes errors in ext:core Imaging (thanks to Alexander Schnitzler)
2020-10-06 aa482c2eb7 [TASK] Fix phpstan checkFunctionArgumentTypes errors in ext:core Crypto (thanks to Alexander Schnitzler)
2020-10-06 fa109a5329 [TASK] Fix phpstan checkFunctionArgumentTypes errors in ext:core Mail (thanks to Alexander Schnitzler)
2020-10-06 f78c9a7b42 [TASK] Fix phpstan checkFunctionArgumentTypes errors in ext:lowlevel (thanks to Alexander Schnitzler)
2020-10-06 0b470abc15 [BUGFIX] Allow LocalDriver baseUri to be set to any value (thanks to Helmut Hummel)
2020-10-06 1c1c888b9b [BUGFIX] Use correct regular expression in FormDefinitionConversionService (thanks to Georg Ringer)
2020-10-05 daf5fc3624 [BUGFIX] Pass defLangBinding to generateLanguageView (thanks to Oliver Bartsch)
2020-10-03 5fd6839673 [BUGFIX] Disable a flaky postgres functional test (thanks to Christian Kuhn)
2020-10-02 7dbf01ebfc [TASK] Raise typo3/testing-framework to 6.4.4 (thanks to Anja Leichsenring)
2020-10-02 cbd1bca68e [BUGFIX] Proper reference index updating on workspace publish (thanks to Christian Kuhn)
2020-10-02 f4f518a6b0 [TASK] Define callable controller actions (thanks to Oliver Hader)
2020-10-02 207da33996 [TASK] Add a remark about changed loading order mechanism (thanks to Moritz Ahl)
2020-10-02 d8ae532aa3 [TASK] Assert clean reference index after DataHandler tests (thanks to Christian Kuhn)
2020-10-02 889dfc16f5 [BUGFIX] Correctly handle workspace overlays (thanks to Nicole Cordes)
2020-10-02 5e5932ab5d [BUGFIX] Use correct page id for permission calculation of inline controls (thanks to Oliver Bartsch)
2020-10-02 408feb9a88 [BUGFIX] Use transOrigPointerField for indentation check in recordlist (thanks to Oliver Bartsch)
2020-10-02 f7f6a44e7d [BUGFIX] Remove sorting from BackendLayoutIcon Updater (thanks to Stefan Froemken)
2020-10-01 bd45596f1c [TASK] Fix phpstan checkFunctionArgumentTypes errors in ext:fluid (thanks to Alexander Schnitzler)
2020-10-01 b1e8acf60c [TASK] Fix phpstan checkFunctionArgumentTypes errors in ext:core TypoScript (thanks to Alexander Schnitzler)
2020-09-30 25ef2dde12 [TASK] Improve mocking in ConnectionTest to prepare for dbal 2.11 (thanks to Anja Leichsenring)
2020-09-30 1b3cf1108c [TASK] Rephrase explanation of sprintf arguments (thanks to Remo Schneider)
2020-09-30 4861c26a2b [DOCS] Fix typoscript example in EXT:form (thanks to mtness)
2020-09-29 fdcf396364 [BUGFIX] Fix event registration for legacy-slot (thanks to Daniel Goerz)
2020-09-29 14557e0b9b [TASK] Move CleanerTask tests to functional tests (thanks to Anja Leichsenring)
2020-09-29 8ec6ca7556 [TASK] Set TYPO3 version to 10.4.10-dev (thanks to Benni Mack)