TYPO3 11.5.30
Release Notes
Stay secure and up-to-date with TYPO3 ELTS!
The TYPO3 CMS community supported from 2020-12-22
until 2024-10-31.
Extend your support now until 2027-10-31 to
get access to the latest security and compatibility updates for this version.
Release Notes for TYPO3 CMS 11.5.30
This document contains information about TYPO3 CMS 11.5.30 which was released on 25.07.2023.
Get TYPO3 11.5.30 nowNews
This release is a combined bug fix and security release.
Find more details in the security bulletins:
- https://typo3.org/security/advisory/typo3-core-sa-2023-002
- https://typo3.org/security/advisory/typo3-core-sa-2023-003
- https://typo3.org/security/advisory/typo3-core-sa-2023-004
Checksums of TYPO3 11.5.30
SHA256
eef8c4af2e179747dd9e19fd4f5bf4283474035be07a9b05a995c71cde22c639 typo3_src-11.5.30.tar.gz cce2ae2993299d6a27ef0820fd7a6bd001b8e6f7570f1c27e1d6cb0cddb8c2e5 typo3_src-11.5.30.zip
SHA1
9a384cfa9c38370f76e0d52376624761a877bd0f typo3_src-11.5.30.tar.gz 2a9935742b8c635e53768ee5a709992f5cad3867 typo3_src-11.5.30.zip
MD5
0cf34cb4924963b234703f7a84cdf40d typo3_src-11.5.30.tar.gz 45cd19bb8db3bb4769ecede413b58149 typo3_src-11.5.30.zip
Package Signatures
TYPO3 Release Packages (the downloadable tarballs and zip files) as well as Git tags are signed using PGP signatures during the automated release process. Besides that, MD5 and SHA2-256 hashes are being generated for these files. Find more details on verifying signatures and hashes in the infrastructure guide.
Download GPG signed release README.md file
Example of verifying integrity of tar.gz package of current release:
wget --content-disposition https://get.typo3.org/11.5.30/tar.gz wget --content-disposition https://get.typo3.org/11.5.30/tar.gz.sig gpg --verify typo3_src-11.5.30.tar.gz.sig typo3_src-11.5.30.tar.gz
Upgrading
The usual upgrading procedure applies. No database updates are necessary. It might be required to clear all caches; the "important actions" section in the TYPO3 Install Tool offers the accordant possibility to do so.
Changes
Here is a list of what was fixed since 11.5.29:
- 2023-07-25 9eaf8f2987 [RELEASE] Release of TYPO3 11.5.30 (thanks to Oliver Hader)
- 2023-07-25 7ec18d54cc [SECURITY] Mitigate XSS in CKEditor4 plugin wordcount (thanks to Oliver Hader)
- 2023-07-25 71e2d04ee8 [SECURITY] Avoid out-of-scope page access for non-matching site (thanks to Oliver Hader)
- 2023-07-25 6658221b85 [SECURITY] Upgrade to typo3/html-sanitizer v2.1.2 (thanks to Oliver Hader)
- 2023-07-24 41d49a31fb [BUGFIX] Handle https in url for felogin redirect mode 'refererDomains' (thanks to Ayke Halder)
- 2023-07-24 1cf815ad5d [TASK] Use silence operator
@
for test setup (thanks to Stefan Bürk) - 2023-07-21 bba788259c [BUGFIX] Ensure
uid
is not updated when updating resources (thanks to Tizian Schmidlin) - 2023-07-19 2e014945ae [TASK] Align formatting details in runTests.sh (thanks to Christian Kuhn)
- 2023-07-19 fd409a4145 [BUGFIX] Avoid PHP error in PHP 8 context in GifBuilder (thanks to Benni Mack)
- 2023-07-19 93a3de11f7 [TASK] Drop redundant condition from TransportFactory (thanks to Oliver Klee)
- 2023-07-19 cbb9360b12 [BUGFIX] Remove correct indexed_search entries on cache clearing (thanks to Georg Ringer)
- 2023-07-18 ea45fb4530 [BUGFIX] Fix fallback icons for custom page types (thanks to Nikita Hovratov)
- 2023-07-18 7743394664 [BUGFIX] Prevent reaching the placeholder limit in
indexed_search
(thanks to Stefan Bürk) - 2023-07-18 1f1082b900 [BUGFIX] Enhance matching order for regex based redirects (thanks to Stefan Bürk)
- 2023-07-18 2bc1c01d4a [BUGFIX] Make icon cache in localStorage version-aware (thanks to Andreas Fernandez)
- 2023-07-17 b0838689f5 [BUGFIX] Include pid in field list of BU::getCommonSelectFields (thanks to Georg Ringer)
- 2023-07-15 2e24b663d7 [BUGFIX] Avoid exception in presets of Install Tool (thanks to Georg Ringer)
- 2023-07-14 207864d786 [BUGFIX] Cast replacement values to strings (thanks to Georg Ringer)
- 2023-07-13 61602bc2fd [BUGFIX] Do not store bollocks markup in icon cache (thanks to Andreas Fernandez)
- 2023-07-13 f0548332f3 [BUGFIX] Only pass strings to string functions in EXT:backend (thanks to Oliver Klee)
- 2023-07-12 15128a1fac [TASK] Replace deprecated egrep in commit-msg hook (thanks to Benjamin Franzke)
- 2023-07-11 5980d2a915 [TASK] Set TYPO3 version to 11.5.30-dev (thanks to Benni Mack)