TYPO3 10.4.14

Release Notes

Version 10.4.14

Release Notes for TYPO3 CMS 10.4.14

This document contains information about TYPO3 CMS 10.4.14 which was released on 16.03.2021.

Get TYPO3 10.4.14 now

Checksums of TYPO3 10.4.14

SHA256

d88108502711d15e3489448479fa080efca9f9e3ac3a0e509acd8f06c955d5d5 typo3_src-10.4.14.tar.gz
06b13abebdb21faf05406ada3b9e8e6b5ba182a5165c8f65ec7f294f7d029291 typo3_src-10.4.14.zip

SHA1

719017b2b0cfbf8c9b5b03791850abe65f972ffa typo3_src-10.4.14.tar.gz
6bb201d2d247ffda630df58d86965fdf3b4f00bf typo3_src-10.4.14.zip

MD5

f56a030733707fb397693e459873385e typo3_src-10.4.14.tar.gz
b94ade037e13c39d7d69b39bbd832ccf typo3_src-10.4.14.zip

Upgrading

The usual upgrading procedure applies. No database updates are necessary. It might be required to clear all caches; the "important actions" section in the TYPO3 Install Tool offers the accordant possibility to do so.

Changes

Here is a list of what was fixed since [10.4.13]:

  • 2021-03-16 9f8b73eb73 [RELEASE] Release of TYPO3 10.4.14 (thanks to Oliver Hader)
  • 2021-03-16 0ce12c5876 [SECURITY] Mitigate XSS in PreviewRenderer for menus (thanks to Oliver Bartsch)
  • 2021-03-16 35a82bb1d2 [SECURITY] XSS in PreviewRenderer with descriptions (thanks to Andreas Fernandez)
  • 2021-03-16 246193c8aa [SECURITY] Avoid storing plain session identifier in $USER->uc (thanks to Oliver Hader)
  • 2021-03-16 94b6e27b71 [SECURITY] Add cache for error page handling (thanks to Frank Naegler)
  • 2021-03-16 1b6d4b7790 [SECURITY] XSS in form creation wizard (thanks to Andreas Fernandez)
  • 2021-03-16 b99a4902ef [SECURITY] Validate allowed values for form element editors (thanks to Ralf Zimmermann)
  • 2021-03-16 8335b0eb3d [SECURITY] Mitigate directly accessible file upload in form framework (thanks to Oliver Hader)
  • 2021-03-16 a43a6d5772 [SECURITY] Prevent urls starting with // to be used for redirects (thanks to Torben Hansen)
  • 2021-03-15 987fb8a7c0 [BUGFIX] Revert "Make ClassSchema PHP 8 compatible" (thanks to Benni Mack)
  • 2021-03-15 a899506162 [BUGFIX] Show cookie warning only for successful authentication (thanks to Markus Klein)
  • 2021-03-15 72cc089c53 [TASK] Replace one wiki link by documentation link (thanks to Alexander Nitsche)
  • 2021-03-14 84ac6c216a [TASK] Stabilize acceptance installer tests (thanks to Christian Kuhn)
  • 2021-03-14 bc1733bdeb [BUGFIX] Fixes search with search type "sentence" (thanks to Tina Westner)
  • 2021-03-14 f6ae73b938 [TASK] Raise typo3/testing-framework ^6.8.0 (thanks to Christian Kuhn)
  • 2021-03-14 d49cf03ef9 [BUGFIX] Add some waiting period to LoginCest after page reload (thanks to Anja Leichsenring)
  • 2021-03-14 614eb0cdc9 [BUGFIX] Correct LLL:EXT language identifiers (thanks to Torben Hansen)
  • 2021-03-14 add5ffc624 [BUGFIX] Correct file path in acceptance tests (thanks to Christian Kuhn)
  • 2021-03-14 4a3981a1b3 [BUGFIX] Remove maxitems constraint from be_groups.pagetypes_select (thanks to Andreas Fernandez)
  • 2021-03-12 ae362aae46 [TASK] Replace wiki links by documentation links (thanks to Alexander Nitsche)
  • 2021-03-12 5a5bbe5351 [BUGFIX] Unknown column 't3ver_oid' in 'field list' (thanks to Benoit Chenu)
  • 2021-03-12 40ba532b0a [BUGFIX] Show proper error when a folder already exists on copy action (thanks to Richard Haeser)
  • 2021-03-12 7d4223084f [TASK] runTests.sh: Allow to execute phpstan sub-set (thanks to Christian Kuhn)
  • 2021-03-12 5ac3c53891 [TASK] Update CKEditor to 4.16.0 (thanks to Georg Ringer)
  • 2021-03-11 4ee4a1393d [BUGFIX] Fix TypeError in InlineControlContainer (thanks to Oliver Bartsch)
  • 2021-03-11 a6dc1cbba7 [BUGFIX] Include IP in authentication logs (thanks to Markus Klein)
  • 2021-03-10 dd80c59574 [BUGFIX] Use correct case for function calls (thanks to Oliver Bartsch)
  • 2021-03-10 673f0fc01c [BUGFIX] Display deleted files stats for temporary processed files (thanks to Česlav Przywara)
  • 2021-03-10 929121d5c7 [BUGFIX] FormEngine: Consider checkboxes representing a value only in selectCheckBox (thanks to Andreas Fernandez)
  • 2021-03-10 aca0346337 [TASK] Add example to SYS|reverseProxyPrefix config (thanks to Markus Klein)
  • 2021-03-10 6f32351e18 [BUGFIX] FormEngine: Validate human-readable selectMultipleSideBySide field (thanks to Andreas Fernandez)
  • 2021-03-09 513c840d8f [BUGFIX] Use Live Page ID in workspace routing (thanks to Benni Mack)
  • 2021-03-09 ce413e7021 [BUGFIX] Trim locallang label references in LanguageService (thanks to Georg Ringer)
  • 2021-03-08 b75cdac8ae [BUGFIX] Let large labels wrap in FormEngine (thanks to Georg Ringer)
  • 2021-03-06 950ba77512 [BUGFIX] Show records in ws preview if live is hidden (thanks to Christian Kuhn)
  • 2021-03-04 bb0abd0ed5 [DOCS] Fix broken cross reference to changelog entry (thanks to Daniel Siepmann)
  • 2021-03-03 fc0f2b891b [BUGFIX] Fix TypeError in workspace module (thanks to Oliver Bartsch)
  • 2021-03-03 ef2c40860f [DOCS] Update outdated information about FlashMessagesViewHelper caching (thanks to Daniel Siepmann)
  • 2021-03-03 7fe2854b45 [BUGFIX] Inject Logger into LanguagePackService (thanks to Martin Kutschker)
  • 2021-03-02 473601ac25 [TASK] Use null coalescing operator for userfunction's configuration (thanks to Georg Ringer)
  • 2021-03-02 a16dd22610 [BUGFIX] Show diff for new and delete placeholder records (thanks to Oliver Bartsch)
  • 2021-03-01 64ad7fe50f [BUGFIX] Add rowSum to runThroughTemplatesPostProcessing hook parameters (thanks to Jigal van Hemert)
  • 2021-03-01 e97eff6370 [TASK] Integrate InstallTool acceptance suite into Backend suite (thanks to Anja Leichsenring)
  • 2021-03-01 1c5e8693e8 [TASK] Do not unserialize stdClass of be_users.uc in extensionmanager (thanks to Stephan Großberndt)
  • 2021-03-01 36ea2b493b [TASK] Make ClassSchema PHP 8 compatible (thanks to Alexander Schnitzler)
  • 2021-03-01 c161f2d631 [BUGFIX] Avoid SQL error when saving be_users.uc on PostgreSQL (thanks to Stephan Großberndt)
  • 2021-03-01 f18a5aa2f8 [TASK] Integrate Pagetree acceptance suite into Backend suite (thanks to Anja Leichsenring)
  • 2021-02-28 8f1c9b9dbf [TASK] Remove systemLogLevel example in Router.ts (thanks to Nikita Hovratov)
  • 2021-02-28 30ef996151 [TASK] Default retry for GitlabCI test jobs (thanks to Anja Leichsenring)
  • 2021-02-27 4afc415104 [TASK] Deal with xdebug 3 (thanks to Christian Kuhn)
  • 2021-02-27 4a918297bf [TASK] Drop an always skipped unit test (thanks to Christian Kuhn)
  • 2021-02-26 b3604284fd [TASK] gitlab-ci nightly slack notification (thanks to Christian Kuhn)
  • 2021-02-25 78923aac0d [TASK] Make PopulatePageSlugs extendable (thanks to Philipp Kitzberger)
  • 2021-02-25 7d21718c2b [TASK] Replace string parsing in Message with unpack (thanks to Claus Due)
  • 2021-02-25 10bd347e22 [BUGFIX] Enforce closing tags in Fluid f:form.button ViewHelper (thanks to Oliver Bartsch)
  • 2021-02-25 e0ec34761a [BUGFIX] Set request object in EXT:form EmailFinisher (thanks to Oliver Bartsch)
  • 2021-02-25 c0994bc0ee [BUGFIX] Recognize removed columns on PostgreSQL (thanks to Stephan Großberndt)
  • 2021-02-24 672cec3ea8 [TASK] Merge test splitter scripts to core (thanks to Christian Kuhn)
  • 2021-02-24 3668220fac [TASK] Do not require sudo mode in development context (thanks to Oliver Bartsch)
  • 2021-02-23 3f889be2a8 [BUGFIX] Import data from yaml imports in declaration order (thanks to Jigal van Hemert)
  • 2021-02-23 7ec120fa08 [BUGFIX] Add PHP8 compatibility to phpdocumentor packages (thanks to Daniel Goerz)
  • 2021-02-23 dd31f363b7 [BUGFIX] Revert "Recognize removed columns on PostgreSQL" (thanks to Benni Mack)
  • 2021-02-22 e23f15f2df [BUGFIX] Recognize removed columns on PostgreSQL (thanks to Stephan Großberndt)
  • 2021-02-22 34d8fc5765 [TASK] Default TS has to be set in ext_typoscript_setup (thanks to Stefan Frömken)
  • 2021-02-22 17839a86cd [BUGFIX] Page module CE's in workspace with defLangBinding=1 (thanks to Christian Kuhn)
  • 2021-02-17 1f46b0c54c [TASK] Build / CI: Get all exception codes of TYPO3 on CLI (thanks to Alexander Nitsche)
  • 2021-02-17 75fe0ee140 [BUGFIX] Use site name rather than pageUid for calling context menu (thanks to Anja Leichsenring)
  • 2021-02-17 aec15deadb [BUGFIX] Do not try to resolve TypoScript [ELSE] condition (thanks to Torben Hansen)
  • 2021-02-16 4e515f88f6 [TASK] Add examples to AjaxRequest code (thanks to Oliver Hader)
  • 2021-02-16 1aa9a73891 [BUGFIX] Correctly create section menu for pages showing content of other pages (thanks to Christoph Lehmann)
  • 2021-02-16 f85413c729 [TASK] Set TYPO3 version to 10.4.14-dev (thanks to Benni Mack)