TYPO3 13.4.12

Release Notes

Version 13.4.12

Release Notes for TYPO3 CMS 13.4.12

This document contains information about TYPO3 CMS 13.4.12 which was released on 20.05.2025.

Get TYPO3 13.4.12 now

Checksums of TYPO3 13.4.12

SHA256

6d6cbf20c0941592a0c4d85aa540e25564e06de05b33b77f322fee7d42396481 typo3_src-13.4.12.tar.gz
657b36dcf544444ed72eaeed5a2ca439b23cd4faf0b8531ea94c1571d6058b9e typo3_src-13.4.12.zip

SHA1

df8683d668bb17ab75b0fbce4e7de649e96b4d64 typo3_src-13.4.12.tar.gz
80c9a5fe2bf7f040b725ebcac39b82834fdb3328 typo3_src-13.4.12.zip

MD5

44b87706fd96aa0643929c21a6d635ba typo3_src-13.4.12.tar.gz
d81cbe68fe54b32e55931f8dbf0e95f8 typo3_src-13.4.12.zip

Package Signatures

TYPO3 Release Packages (the downloadable tarballs and zip files) as well as Git tags are signed using PGP signatures during the automated release process. Besides that, MD5 and SHA2-256 hashes are being generated for these files. Find more details on verifying signatures and hashes in the infrastructure guide.

Download GPG signed release README.md file

Example of verifying integrity of tar.gz package of current release:

wget --content-disposition https://get.typo3.org/13.4.12/tar.gz
wget --content-disposition https://get.typo3.org/13.4.12/tar.gz.sig
gpg --verify typo3_src-13.4.12.tar.gz.sig typo3_src-13.4.12.tar.gz

Upgrading

The usual upgrading procedure applies. No database updates are necessary. It might be required to clear all caches; the "important actions" section in the TYPO3 Install Tool offers the accordant possibility to do so.

Changes

Here is a list of what was fixed since 13.4.11:

  • 2025-05-20 812e327a748 [RELEASE] Release of TYPO3 13.4.12 (thanks to Oliver Hader)
  • 2025-05-20 d3fe7991704 [SECURITY] Disallow changing system maintainer details (thanks to Oliver Hader)
  • 2025-05-20 befb73ea328 [SECURITY] Prevent MFA bypass for backend login (thanks to Torben Hansen)
  • 2025-05-20 0bb3acf2ef4 [SECURITY] Enforce file extension and MIME-type consistency (thanks to Oliver Hader)
  • 2025-05-20 1d184b2c89c [SECURITY] Require step-up authentication for password change (thanks to Benjamin Franzke)
  • 2025-05-20 1061d67ab9e [SECURITY] Allow filtering request hosts in webhook messages (thanks to Benjamin Franzke)
  • 2025-05-20 88259aae15b [SECURITY] Consider all queried tables in FrontendGroupRestriction (thanks to Elias Häußler)
  • 2025-05-19 ff01ed2cfef [BUGFIX] Re-add missing CKEditor "ListProperties" module import (thanks to Garvin Hicking)
  • 2025-05-19 6ef27d7d9e4 [TASK] Apply CSP sandbox mode to fileadmin's .htaccess configuration (thanks to Oliver Hader)
  • 2025-05-19 4179ae4929a [DOCS] Describe 'versionNumberInFilename' config option more generally (thanks to Garvin Hicking)
  • 2025-05-19 8ca71b977c9 [BUGFIX] Allow zero and blank string as valid type values (thanks to Georg Ringer)
  • 2025-05-16 b16c0248470 [TASK] Use DI for LoadTcaService in UpgradeController (thanks to Oliver Bartsch)
  • 2025-05-16 51971fe0061 [BUGFIX] Set up TCA in install tool's ext_tables.php tester (thanks to Nikita Hovratov)
  • 2025-05-16 efeb7b6156f [BUGFIX] Fix returning records to previous stage in workspaces (thanks to Tobias Seczer)
  • 2025-05-16 416ebedfc29 [BUGFIX] Avoid "-" as first char of filename in mail spooler (thanks to Markus Klein)
  • 2025-05-16 06bfc43d483 [TASK] Add to versionNumberInFilename description (thanks to Oliver Bartsch)
  • 2025-05-16 85364cf1968 [DOCS] Fix wrong option name in Confirmation finisher example (thanks to rteitge)
  • 2025-05-15 962dfc4f7a8 [TASK] Remove obsolete icon from EXT:reports (thanks to Andreas Kienast)
  • 2025-05-15 b8daed99c80 [TASK] Extract filename pre-processing for uploaded files in FAL (thanks to Oliver Hader)
  • 2025-05-15 0eaf4d9daf1 [TASK] Remove unnecessary PHP use statement (thanks to Oliver Hader)
  • 2025-05-15 38831c47b10 [BUGFIX] Update phpstan/phpstan to 2.1.15 (thanks to Andreas Kienast)
  • 2025-05-14 b09608bca82 [TASK] Avoid deserialization of undefined property in LazyObjectStorage (thanks to Oliver Hader)
  • 2025-05-14 1da7d75dccd [TASK] Set TYPO3 version to 13.4.12-dev (thanks to Benni Mack)