TYPO3 10.4.54 ELTS
Release Notes
Stay secure and up-to-date with TYPO3 ELTS!
The TYPO3 CMS community supported from 2020-04-21
until 2023-04-30.
Extend your support now until 2026-04-30 to
get access to the latest security and compatibility updates for this version.
Release Notes for TYPO3 CMS 10.4.54
This document contains information about TYPO3 CMS 10.4.54 which was released on 09.09.2025.
Get TYPO3 10.4.54 nowNews
This release is a combined bug fix and security release.
Find more details in the security bulletins:
- https://typo3.org/security/advisory/typo3-core-sa-2025-017
- https://typo3.org/security/advisory/typo3-core-sa-2025-020
- https://typo3.org/security/advisory/typo3-core-sa-2025-021
- https://typo3.org/security/advisory/typo3-core-sa-2025-022
Checksums of TYPO3 10.4.54
SHA256
bea3a2de8572e8aae7f030c2299cc24065d548b008e99207daa85ef9a338130e typo3_src-10.4.54.tar.gz 0fce3e4ba650b680ac03c4e21786503589a398b332b9a0758de9117472eca671 typo3_src-10.4.54.zip
SHA1
2b888ad1b346c7ca0c45b10cb542e510f956268e typo3_src-10.4.54.tar.gz e7496e65997fc47a4a61a7bbdb96b8a67b822acf typo3_src-10.4.54.zip
MD5
d41d8cd98f00b204e9800998ecf8427e typo3_src-10.4.54.tar.gz d41d8cd98f00b204e9800998ecf8427e typo3_src-10.4.54.zip
Package Signatures
TYPO3 Release Packages (the downloadable tarballs and zip files) as well as Git tags are signed using PGP signatures during the automated release process. Besides that, MD5 and SHA2-256 hashes are being generated for these files. Find more details on verifying signatures and hashes in the infrastructure guide.
Upgrading
The usual upgrading procedure applies. No database updates are necessary. It might be required to clear all caches; the "important actions" section in the TYPO3 Install Tool offers the accordant possibility to do so.
Changes
Here is a list of what was fixed since 10.4.53:
- 2025-09-09 3abf7e521c [RELEASE] Release of TYPO3 10.4.54 (thanks to Andreas Kienast)
- 2025-09-09 8c25a39368 [SECURITY] Avoid displaying version details to unauthorized users (thanks to Oliver Hader)
- 2025-09-09 daa36d9da0 [SECURITY] Inherit access to module-related AJAX routes from modules (thanks to Elias Häußler)
- 2025-09-09 2f1b3c1527 [SECURITY] Prevent information disclosure via filesystem E_WARNING errors (thanks to Andreas Kienast)
- 2025-09-09 47cd9138e7 [SECURITY] Fix open redirection via GeneralUtility::sanitizeLocalUrl (thanks to Benjamin Franzke)
- 2025-08-14 cbb65d33a6 [TASK] Set TYPO3 version to 10.4.54-dev (thanks to Andreas Kienast)