TYPO3 12.4.4

Release Notes

Version 12.4.4

Release Notes for TYPO3 CMS 12.4.4

This document contains information about TYPO3 CMS 12.4.4 which was released on 25.07.2023.

Get TYPO3 12.4.4 now


This release is a combined bug fix and security release.

Find more details in the security bulletins:

Read TYPO3 12.4.4 Release News

Checksums of TYPO3 12.4.4


fdf35c136dfeaacb27dd18e322505cf23baa3ccca4a276ba988444f0eee8228e typo3_src-12.4.4.tar.gz
33c0b09e41b9864c4ce853314fb797b34f3cb5ff3da74157fb55ac398a50fa65 typo3_src-12.4.4.zip


ece278da6bcaf0ea63686424915c082ac7df74ab typo3_src-12.4.4.tar.gz
a2934b74d6880509f9504791bcddaf3377d92b4f typo3_src-12.4.4.zip


c628e4a7cfb360702c948a0e4d5f86e9 typo3_src-12.4.4.tar.gz
12c3edcb178e4b9b2cda82932dcc8af8 typo3_src-12.4.4.zip


The usual upgrading procedure applies. No database updates are necessary. It might be required to clear all caches; the "important actions" section in the TYPO3 Install Tool offers the accordant possibility to do so.


Here is a list of what was fixed since 12.4.3:

  • 2023-07-25 2312505703 [RELEASE] Release of TYPO3 12.4.4 (thanks to Oliver Hader)
  • 2023-07-25 702e2debd4 [SECURITY] Avoid out-of-scope page access for non-matching site (thanks to Oliver Hader)
  • 2023-07-25 f82faf6621 [SECURITY] Upgrade to typo3/html-sanitizer v2.1.2 (thanks to Oliver Hader)
  • 2023-07-25 8354fbd262 [BUGFIX] Harden Extbase LazyLoadingProxy (thanks to Torben Hansen)
  • 2023-07-24 925e4193e4 [BUGFIX] Allow attributes for anchors in ckeditor (thanks to Sybille Peters)
  • 2023-07-24 eb73791999 [BUGFIX] Handle https in url for felogin redirect mode 'refererDomains' (thanks to Ayke Halder)
  • 2023-07-24 f6ef1ffb30 [TASK] Use silence operator @ for test setup (thanks to Stefan Bürk)
  • 2023-07-21 3b6c84e306 [BUGFIX] Ensure uid is not updated when updating resources (thanks to Tizian Schmidlin)
  • 2023-07-21 b00c75af9f [BUGFIX] Use spinner-circle in DeferredAction (thanks to Andreas Fernandez)
  • 2023-07-21 a5b70639ca [BUGFIX] Fix incorrect array PHPDoc in IncludeTreeSyntaxScannerVisitor (thanks to Oliver Klee)
  • 2023-07-20 8991fcbb0d [TASK] Use later DataHandler hook in DataHandlerSlugUpdateHook (thanks to Stefan Bürk)
  • 2023-07-20 2e29b322be [BUGFIX] Ensure placeholders are replaced when loading settings.yaml (thanks to Gerrit Mohrmann)
  • 2023-07-19 fec1ab54b8 [TASK] Align formatting details in runTests.sh (thanks to Christian Kuhn)
  • 2023-07-19 fd0cf4bd4a [BUGFIX] Avoid PHP error in PHP 8 context in GifBuilder (thanks to Benni Mack)
  • 2023-07-19 6327abd815 [TASK] Drop redundant condition from TransportFactory (thanks to Oliver Klee)
  • 2023-07-19 ec16c8bb5d [BUGFIX] Remove correct indexed_search entries on cache clearing (thanks to Georg Ringer)
  • 2023-07-18 7162c7cd88 [BUGFIX] Fix incorrect type in RouteDispatcherTest (thanks to Oliver Klee)
  • 2023-07-18 90d99b6fe2 [TASK] Add tests for IconFactoryTest fallback page icons (thanks to Nikita Hovratov)
  • 2023-07-18 740d199d9c [BUGFIX] Fix fallback icons for custom page types (thanks to Nikita Hovratov)
  • 2023-07-18 776e1da41d [BUGFIX] Prevent reaching the placeholder limit in indexed_search (thanks to Stefan Bürk)
  • 2023-07-18 fa4167a2fe [BUGFIX] Enhance matching order for regex based redirects (thanks to Stefan Bürk)
  • 2023-07-18 50ed7d1482 [BUGFIX] Pass current rendarable context to condition evaluation (thanks to Helmut Hummel)
  • 2023-07-18 05b1b68dc8 [BUGFIX] Make icon cache in localStorage version-aware (thanks to Andreas Fernandez)
  • 2023-07-17 3e72ea6345 [BUGFIX] Avoid exception in redirects module (thanks to Torben Hansen)
  • 2023-07-17 b5ad052536 [TASK] Provide meaningful error messages for misconfigured SelectViewHelper (thanks to Nikita Hovratov)
  • 2023-07-17 951b4339f5 [TASK] Ensure TypoScript traversers are stateless (thanks to Christian Kuhn)
  • 2023-07-17 1f76a75194 [BUGFIX] Include pid in field list of BU::getCommonSelectFields (thanks to Georg Ringer)
  • 2023-07-17 b12c8b7e4a [TASK] Remove TYPO3-related items from localStorage when resetting config (thanks to Andreas Fernandez)
  • 2023-07-17 6cdf2bd9b7 [BUGFIX] Use 12/24 hour format in date picker depending on client (thanks to Andreas Fernandez)
  • 2023-07-15 7b92501a3e [BUGFIX] Do not consider done UpgradeWizard as not found (thanks to Stefan Bürk)
  • 2023-07-14 827f388f7a [BUGFIX] Avoid exception in presets of Install Tool (thanks to Georg Ringer)
  • 2023-07-14 5183c84970 [BUGFIX] Cast replacement values to strings (thanks to Georg Ringer)
  • 2023-07-14 d4c0c2cdbc [BUGFIX] Handle unavailability of (dis)allowed extensions in FileBrowser (thanks to Andreas Fernandez)
  • 2023-07-14 75f3eabaa8 [BUGFIX] Ensure deprecated settings in config.yaml are not changed (thanks to Georg Ringer)
  • 2023-07-13 3f2e8650a0 [BUGFIX] Fetch pages in different language when in free mode (thanks to Benni Mack)
  • 2023-07-13 2a3e57cda0 [BUGFIX] Do not store bollocks markup in icon cache (thanks to Andreas Fernandez)
  • 2023-07-13 15950a5436 [BUGFIX] Only pass strings to string functions in EXT:backend (thanks to Oliver Klee)
  • 2023-07-12 7dc0969c80 [BUGFIX] Mark current page in indexed_search via aria-current (thanks to Andreas Fernandez)
  • 2023-07-12 49515391d0 [BUGFIX] Fix show/hide thumbnails and clipboard in filelist module (thanks to markup)
  • 2023-07-12 9058fc76af [BUGFIX] Use Symfony filesystem in InstallerScripts (thanks to Andreas Fernandez)
  • 2023-07-12 c4d79f5c56 [BUGFIX] Prevent default behavior only for page selector links (thanks to Andreas Fernandez)
  • 2023-07-12 a4fe9e9393 [TASK] Replace deprecated egrep in commit-msg hook (thanks to Benjamin Franzke)
  • 2023-07-11 275eada2ce [TASK] Set TYPO3 version to 12.4.4-dev (thanks to Benni Mack)