TYPO3 12.4.31

Release Notes

Version 12.4.31

Release Notes for TYPO3 CMS 12.4.31

This document contains information about TYPO3 CMS 12.4.31 which was released on 20.05.2025.

Get TYPO3 12.4.31 now

Checksums of TYPO3 12.4.31

SHA256

69e71c0be15291eb56db09ab305c942b499da434a9d9042b9e0662b1a9783681 typo3_src-12.4.31.tar.gz
7784b53d9c30b53971ffaaae70a4aa1c51eea77bba9a1da58674f34975c048b4 typo3_src-12.4.31.zip

SHA1

03eba7cda48986ba0d0a12bc1f6f9af9a1d20488 typo3_src-12.4.31.tar.gz
c8910bbc09b9296194d0d3638b4b77f542814048 typo3_src-12.4.31.zip

MD5

6566f7f1298c3771bb19ea145aa96377 typo3_src-12.4.31.tar.gz
2821c7ff8d470dbecd099b879ec8abd2 typo3_src-12.4.31.zip

Package Signatures

TYPO3 Release Packages (the downloadable tarballs and zip files) as well as Git tags are signed using PGP signatures during the automated release process. Besides that, MD5 and SHA2-256 hashes are being generated for these files. Find more details on verifying signatures and hashes in the infrastructure guide.

Download GPG signed release README.md file

Example of verifying integrity of tar.gz package of current release:

wget --content-disposition https://get.typo3.org/12.4.31/tar.gz
wget --content-disposition https://get.typo3.org/12.4.31/tar.gz.sig
gpg --verify typo3_src-12.4.31.tar.gz.sig typo3_src-12.4.31.tar.gz

Upgrading

The usual upgrading procedure applies. No database updates are necessary. It might be required to clear all caches; the "important actions" section in the TYPO3 Install Tool offers the accordant possibility to do so.

Changes

Here is a list of what was fixed since 12.4.30:

  • 2025-05-20 1f80000d7c5 [RELEASE] Release of TYPO3 12.4.31 (thanks to Oliver Hader)
  • 2025-05-20 bdf94301cc1 [SECURITY] Disallow changing system maintainer details (thanks to Oliver Hader)
  • 2025-05-20 898ee1e446e [SECURITY] Prevent MFA bypass for backend login (thanks to Torben Hansen)
  • 2025-05-20 2386989a577 [SECURITY] Enforce file extension and MIME-type consistency (thanks to Oliver Hader)
  • 2025-05-20 e430cc7191c [SECURITY] Require step-up authentication for password change (thanks to Benjamin Franzke)
  • 2025-05-20 3f44db70085 [SECURITY] Allow filtering request hosts in webhook messages (thanks to Benjamin Franzke)
  • 2025-05-20 0cd1f6f36a5 [SECURITY] Consider all queried tables in FrontendGroupRestriction (thanks to Elias Häußler)
  • 2025-05-19 50b37aa4874 [BUGFIX] Re-add missing CKEditor "ListProperties" module import (thanks to Garvin Hicking)
  • 2025-05-16 7e155b94249 [DOCS] Fix wrong option name in Confirmation finisher example (thanks to rteitge)
  • 2025-05-15 023140cd36f [TASK] Extract filename pre-processing for uploaded files in FAL (thanks to Oliver Hader)
  • 2025-05-15 ccac3f187b9 [TASK] Remove unnecessary PHP use statement (thanks to Oliver Hader)
  • 2025-05-15 33069526caa [BUGFIX] Update phpstan/phpstan to 2.1.15 (thanks to Andreas Kienast)
  • 2025-05-14 1706f80368a [TASK] Set TYPO3 version to 12.4.31-dev (thanks to Benni Mack)