TYPO3 12.4.40

Release Notes

Version 12.4.40

Release Notes for TYPO3 CMS 12.4.40

This document contains information about TYPO3 CMS 12.4.40 which was released on 02.12.2025.

Get TYPO3 12.4.40 now

News

This version is a bugfix and maintenance release, which solves an incompatibility with TYPO3's dependency of symfony/dependency-injection in version 7.4.0 (see https://review.typo3.org/c/Packages/TYPO3.CMS/+/91926) which might affect all composer-based installations currently.

Read TYPO3 12.4.40 Release News

Checksums of TYPO3 12.4.40

SHA256

18ec35a586b0febb0e221997c213ec8ef813325faaa740ec949f23e6825e2b84 typo3_src-12.4.40.tar.gz
8d9bccd437205f590071b7ba1d01f0e1ca8196535bd5ed3a0b586c907a74e849 typo3_src-12.4.40.zip

SHA1

441a0ab2a4bbe2efcea7e465038355e0b03b8f7a typo3_src-12.4.40.tar.gz
2f26fb7e021da8023f8fcd18cf33029655144951 typo3_src-12.4.40.zip

MD5

616c65ec4214dfa8ce1d0308c6c2a82f typo3_src-12.4.40.tar.gz
84af04ff2f427129fee41a5701045952 typo3_src-12.4.40.zip

Package Signatures

TYPO3 Release Packages (the downloadable tarballs and zip files) as well as Git tags are signed using PGP signatures during the automated release process. Besides that, MD5 and SHA2-256 hashes are being generated for these files. Find more details on verifying signatures and hashes in the infrastructure guide.

Download GPG signed release README.md file

Example of verifying integrity of tar.gz package of current release:

wget --content-disposition https://get.typo3.org/12.4.40/tar.gz
wget --content-disposition https://get.typo3.org/12.4.40/tar.gz.sig
gpg --verify typo3_src-12.4.40.tar.gz.sig typo3_src-12.4.40.tar.gz

Upgrading

The usual upgrading procedure applies. No database updates are necessary. It might be required to clear all caches; the "important actions" section in the TYPO3 Install Tool offers the accordant possibility to do so.

Changes

Here is a list of what was fixed since 12.4.39:

  • 2025-12-02 62d387e5441 [RELEASE] Release of TYPO3 12.4.40 (thanks to Benni Mack)
  • 2025-12-01 9640bf52c56 [TASK] Enhance \TYPO3\CMS\Core\Http\Uri test cases (thanks to Oliver Hader)
  • 2025-12-01 d0638a6dab3 [BUGFIX] Account for symfony/dependency-injection:7.4 incompatibility (thanks to Benjamin Franzke)
  • 2025-11-28 e65ddf62164 [TASK] Update phpdocumentor/reflection-docblock:^5.6.5 (thanks to Stefan Bürk)
  • 2025-11-27 8213fa80e6e [BUGFIX] Avoid using null as array key in extbase Backend (thanks to Stefan Bürk)
  • 2025-11-26 b6cfbc25846 [TASK] Raise used typo3/core-testing-phpXY image version (thanks to Stefan Bürk)
  • 2025-11-25 e487d01d2e5 [TASK] Reformat TYPO3 login warranty and license information (thanks to Garvin Hicking)
  • 2025-11-24 8c9959c17b7 [TASK] Add information about TYPO3 trademark to about+login (thanks to Garvin Hicking)
  • 2025-11-24 05d1c48b79c [DOCS] Remove unused class import in code example (thanks to Elias Häußler)
  • 2025-11-24 ea70df73d7f [TASK] Upgrade rollup and webpack with known vulnerabilities (thanks to Oliver Hader)
  • 2025-11-24 8509e17e42c [TASK] Upgrade npm dev-dependencies with known vulnerabilities (thanks to Oliver Hader)
  • 2025-11-23 d60d77feb3b [TASK] Apply CSP sandbox mode to fileadmin's .htaccess configuration (thanks to Oliver Hader)
  • 2025-11-20 057ff48aec8 [TASK] Backport AsAllowedCallable attribute for TYPO3 v14 compatibility (thanks to Oliver Hader)
  • 2025-11-13 ed8a13d2e28 [TASK] Update symfony/* composer packages (thanks to Oliver Hader)
  • 2025-11-12 6f815d17a1d [TASK] Update PHPStan to 2.1.32 (thanks to Garvin Hicking)
  • 2025-11-11 6788998138b [BUGFIX] Show localized URL in "Link to external URL" page infobox (thanks to Andreas Nedbal)
  • 2025-11-11 7dac63ff53a [TASK] Update dev dependency typo3/testing-framework (thanks to Stefan Bürk)
  • 2025-11-11 cd077688068 [BUGFIX] Split workspace AJAX routes into different scopes (thanks to Elias Häußler)
  • 2025-11-11 edfac99e3f7 [TASK] Set TYPO3 version to 12.4.40-dev (thanks to Benni Mack)