TYPO3 12.4.41

Release Notes

Version 12.4.41

Release Notes for TYPO3 CMS 12.4.41

This document contains information about TYPO3 CMS 12.4.41 which was released on 13.01.2026.

Get TYPO3 12.4.41 now

Checksums of TYPO3 12.4.41

SHA256

73219817d1731599fc2182343e09b20c7e87e100abe766267bdbd536cb989891 typo3_src-12.4.41.tar.gz
48c376076dbd21448feafbe24843e2c4f56e255bb773492753aca862208de323 typo3_src-12.4.41.zip

SHA1

2d908d1291e2d5a28cfe136ec865c57934afe0f5 typo3_src-12.4.41.tar.gz
e5999fa33cac7bb660217d4b95386a219a221983 typo3_src-12.4.41.zip

MD5

b8ec35a9174763f9eeafaef929043128 typo3_src-12.4.41.tar.gz
1a0d6c499fd882ce33541eada077c524 typo3_src-12.4.41.zip

Package Signatures

TYPO3 Release Packages (the downloadable tarballs and zip files) as well as Git tags are signed using PGP signatures during the automated release process. Besides that, MD5 and SHA2-256 hashes are being generated for these files. Find more details on verifying signatures and hashes in the infrastructure guide.

Download GPG signed release README.md file

Example of verifying integrity of tar.gz package of current release:

wget --content-disposition https://get.typo3.org/12.4.41/tar.gz
wget --content-disposition https://get.typo3.org/12.4.41/tar.gz.sig
gpg --verify typo3_src-12.4.41.tar.gz.sig typo3_src-12.4.41.tar.gz

Upgrading

The usual upgrading procedure applies. No database updates are necessary. It might be required to clear all caches; the "important actions" section in the TYPO3 Install Tool offers the accordant possibility to do so.

Changes

Here is a list of what was fixed since 12.4.40:

  • 2026-01-13 29ccb6fc488 [RELEASE] Release of TYPO3 12.4.41 (thanks to Oliver Hader)
  • 2026-01-13 722bf71c118 [SECURITY] Harden message deserialization in FileSpool transport (thanks to Elias Häußler)
  • 2026-01-13 a6604db6649 [SECURITY] Avoid record deletion without permissions in recycler module (thanks to Elias Häußler)
  • 2026-01-13 fbbae3b9a40 [SECURITY] Prevent unauthorized access to resources in redirects module (thanks to Elias Häußler)
  • 2026-01-13 cd11a19958d [SECURITY] Ensure defVals adhere to permissions checks (thanks to Benjamin Franzke)
  • 2026-01-02 9b8c6d7999b [TASK] Update copyright year in README.md and INSTALL.md (thanks to Torben Hansen)
  • 2025-12-30 9e612dd3087 [TASK] Mask database credentials in stacktrace (thanks to Simon Praetorius)
  • 2025-12-24 fb70d704920 [TASK] Update ISO Database (thanks to Anja Leichsenring)
  • 2025-12-13 0f01b784122 [TASK] Extend DataHandler hard delete test cases (thanks to Oliver Hader)
  • 2025-12-12 a8af3ab13ef [TASK] Extend DataHandler hard delete test cases (thanks to Oliver Hader)
  • 2025-12-11 0d2950fad8f [TASK] Adjust and relocate runTests watchRst templates (thanks to Garvin Hicking)
  • 2025-12-09 46a34853459 [TASK] Live documentation for changelog and manuals (thanks to Garvin Hicking)
  • 2025-12-02 51b8484b4eb [TASK] Set TYPO3 version to 12.4.41-dev (thanks to Benni Mack)