TYPO3 10.4.43 ELTS
Release Notes
Stay secure and up-to-date with TYPO3 ELTS!
The TYPO3 CMS community supported from 2020-04-21
until 2023-04-30.
Extend your support now until 2026-04-30 to
get access to the latest security and compatibility updates for this version.
Release Notes for TYPO3 CMS 10.4.43
This document contains information about TYPO3 CMS 10.4.43 which was released on 13.02.2024.
Get TYPO3 10.4.43 nowNews
This release is a combined bug fix and security release.
Find more details in the security bulletins:
- https://typo3.org/security/advisory/typo3-core-sa-2024-001
- https://typo3.org/security/advisory/typo3-core-sa-2024-002
- https://typo3.org/security/advisory/typo3-core-sa-2024-003
- https://typo3.org/security/advisory/typo3-core-sa-2024-004
- https://typo3.org/security/advisory/typo3-core-sa-2024-005
- https://typo3.org/security/advisory/typo3-core-sa-2024-006
Checksums of TYPO3 10.4.43
SHA256
c9bd6845fdd50ed8d72201e6514b5471bb020d5e1560d418310ffd10d9e725bf typo3_src-10.4.43.tar.gz 661cc5a967cd8115461d71d2a4e1f28024f2fa9f3394e732cca0d72da6b9de1c typo3_src-10.4.43.zip
SHA1
8faeaddbe115464a200bd0fc619bf97a0252f104 typo3_src-10.4.43.tar.gz 009d9b0ade07e55c0d49c889be3d2727c645c604 typo3_src-10.4.43.zip
MD5
d41d8cd98f00b204e9800998ecf8427e typo3_src-10.4.43.tar.gz d41d8cd98f00b204e9800998ecf8427e typo3_src-10.4.43.zip
Package Signatures
TYPO3 Release Packages (the downloadable tarballs and zip files) as well as Git tags are signed using PGP signatures during the automated release process. Besides that, MD5 and SHA2-256 hashes are being generated for these files. Find more details on verifying signatures and hashes in the infrastructure guide.
Upgrading
The usual upgrading procedure applies. No database updates are necessary. It might be required to clear all caches; the "important actions" section in the TYPO3 Install Tool offers the accordant possibility to do so.
Changes
Here is a list of what was fixed since 10.4.42:
- 2024-02-13 ebde7092ca [RELEASE] Release of TYPO3 10.4.43 (thanks to Andreas Kienast)
- 2024-02-13 22264a0518 [SECURITY] Prevent RCE via install tool settings (thanks to Benjamin Franzke)
- 2024-02-13 65b1689e44 [SECURITY] Prevent arbitrary access to privileged resources via t3:// (thanks to Benjamin Franzke)
- 2024-02-13 9ac43986aa [SECURITY] Do not disclose encryptionKey via InstallTool (thanks to Benjamin Franzke)
- 2024-02-13 bd4767e960 [SECURITY] Avoid showing password hashes in backend edit forms (thanks to Oliver Hader)
- 2024-02-13 3c23d68923 [!!!][SECURITY] Enforce absolute path checks in FAL local driver (thanks to Oliver Hader)
- 2024-02-13 a387b98a76 [SECURITY] Deny directly modifying file abstraction layer entities (thanks to Oliver Hader)
- 2024-02-12 c831cc1deb [TASK] Update container image versions (thanks to Stefan Bürk)
- 2024-02-09 cdf33d0646 [TASK] Replace former extension packages using self.version (thanks to Thomas Hohn)
- 2024-01-22 fe1687871c [TASK] Update container image versions (thanks to Stefan Bürk)
- 2024-01-16 f1b6e64cd9 [TASK] Refer to minor versions for our images in runTests (thanks to Benjamin Franzke)
- 2024-01-08 a64752da21 [BUGFIX] Add missing import of
FormElementInterfacein tests (thanks to Andreas Kienast) - 2023-11-21 0f543f5510 [TASK] Set TYPO3 version to 10.4.43-dev (thanks to Andreas Kienast)