TYPO3 13.4.25

Release Notes

Version 13.4.25

Release Notes for TYPO3 CMS 13.4.25

This document contains information about TYPO3 CMS 13.4.25 which was released on 10.02.2026.

Get TYPO3 13.4.25 now

News

This version is a bugfix and maintenance release.

Read TYPO3 13.4.25 Release News

Checksums of TYPO3 13.4.25

SHA256

de99fdb1e885bb6eb1ba6e3ea846f6fc47d10cd41f100792b3478d39d240ca2e typo3_src-13.4.25.tar.gz
c3afbd1aa1968a7af49db45635d5dc3c634dad11ff90789235f01870f5ac992a typo3_src-13.4.25.zip

SHA1

593adbb035f0313273aac71ad998494c1b79f1d0 typo3_src-13.4.25.tar.gz
5841703c1d98c51a3be707644980ab028560b1c5 typo3_src-13.4.25.zip

MD5

9a7cce22c4ce415d9218dd5077b9bd77 typo3_src-13.4.25.tar.gz
76bcddd7fc82c776e17cc4504b3e7a78 typo3_src-13.4.25.zip

Package Signatures

TYPO3 Release Packages (the downloadable tarballs and zip files) as well as Git tags are signed using PGP signatures during the automated release process. Besides that, MD5 and SHA2-256 hashes are being generated for these files. Find more details on verifying signatures and hashes in the infrastructure guide.

Download GPG signed release README.md file

Example of verifying integrity of tar.gz package of current release:

wget --content-disposition https://get.typo3.org/13.4.25/tar.gz
wget --content-disposition https://get.typo3.org/13.4.25/tar.gz.sig
gpg --verify typo3_src-13.4.25.tar.gz.sig typo3_src-13.4.25.tar.gz

Upgrading

The usual upgrading procedure applies. No database updates are necessary. It might be required to clear all caches; the "important actions" section in the TYPO3 Install Tool offers the accordant possibility to do so.

Changes

Here is a list of what was fixed since 13.4.24:

  • 2026-02-10 a4087b8fc13 [RELEASE] Release of TYPO3 13.4.25 (thanks to Oliver Hader)
  • 2026-02-10 6a8353cef17 [BUGFIX] Restrict copied record translations to target site languages (thanks to Eric Harrer)
  • 2026-02-10 6da77762553 [BUGFIX] Use correct form editor return URL after editing content element (thanks to Josua Vogel)
  • 2026-02-10 fc6bef2630f [BUGFIX] Handle invalid UTF-8 in sudo mode session data (thanks to Oliver Hader)
  • 2026-02-10 c31247ac1f3 [TASK] Update psy/psysh with known vulnerability (thanks to Oliver Hader)
  • 2026-02-09 f8994e3c844 [BUGFIX] Prevent evaluating hidden TypoScript in backend modules (thanks to Garvin Hicking)
  • 2026-02-09 6a16c5ac313 [BUGFIX] Use DataHandler for auto redirect creation (thanks to Oliver Bartsch)
  • 2026-02-07 cbaa94d8962 [TASK] Improve test coverage for extbase BooleanValidator (thanks to Torben Hansen)
  • 2026-02-06 475a90c257c [BUGFIX] Add title from image properties only when not set via argument (thanks to Richard Krikler)
  • 2026-02-06 409827bf24f [BUGFIX] Re-add "(un)select all" buttons to Workspace send-to-stage form (thanks to Andreas Nedbal)
  • 2026-02-06 b16e06af3b6 [TASK] Improve wording of ajax.error.message.resourceNameNotDifferent (thanks to Georg Ringer)
  • 2026-02-06 209be920f14 [TASK] Throw exception when JavaScript module cannot be resolved (thanks to Himanshu Ramavat)
  • 2026-02-06 d26f37dc9d0 [BUGFIX] Fix group assignment in Permissions module (thanks to Oliver Bartsch)
  • 2026-02-05 30ba70b3039 [BUGFIX] Handle root-level permissions correctly for record deletion (thanks to Bastien Lutz)
  • 2026-02-04 2047899316c [TASK] Update Fluid Standalone to 4.5.1 (thanks to Simon Praetorius)
  • 2026-02-04 5e8325d0349 [BUGFIX] Prevent TypeError with invalid language (thanks to Benni Mack)
  • 2026-02-03 c878f1efee2 [BUGFIX] Enhance message handler registration to support multiple types (thanks to Sascha Nowak)
  • 2026-02-03 c0a3f83f0ec [BUGFIX] Order template, partial and layout paths correctly in Extbase context (thanks to Dmitry Dulepov)
  • 2026-02-01 4a696f8ebd1 [TASK] Increase test coverage for template path overrides (thanks to Simon Praetorius)
  • 2026-02-01 145de97bd88 [TASK] Update PHPStan to 2.1.38 (thanks to Garvin Hicking)
  • 2026-01-31 fa10c332e3a [BUGFIX] Fix --exclude option in impexp:export command (thanks to Dan Kleine)
  • 2026-01-31 3f6e8a9a4ca [BUGFIX] Prevent call to undefined ProcessedFile::setMissing (thanks to Garvin Hicking)
  • 2026-01-30 3fc040b2661 [BUGFIX] Resolve broken hotkey handler binding (thanks to Andreas Kienast)
  • 2026-01-28 954104a8ec9 [TASK] Update 3rd party packages with known vulnerabilities (thanks to Oliver Hader)
  • 2026-01-28 9f943cfa338 [BUGFIX] Skip transient properties in Extbase validation (thanks to Benni Mack)
  • 2026-01-28 bcac6345cb8 [BUGFIX] Show semantic labels in color picker and merge value picker (thanks to Benjamin Franzke)
  • 2026-01-28 b97ce0ace1c [TASK] Disable shared memory usage for chrome testing images (thanks to Benjamin Franzke)
  • 2026-01-28 214fad11748 [TASK] Raise phpunit/phpunit:^11.5.50 with its dependencies (thanks to Simon Schaufelberger)
  • 2026-01-28 9bec32983e6 [BUGFIX] Use localized country names in forms (thanks to Josua Vogel)
  • 2026-01-27 2667fe60303 [TASK] Use PolymorphicDeserializer in form-request test (thanks to Oliver Hader)
  • 2026-01-27 4f9f22e29a7 [BUGFIX] Include offline workspace records in live search (thanks to Oliver Bartsch)
  • 2026-01-26 15960362cad [BUGFIX] Fix sorting of file list (thanks to Georg Ringer)
  • 2026-01-24 9416f81f9b6 [BUGFIX] Consider xclassed domain model in extbase file upload (thanks to Torben Hansen)
  • 2026-01-24 27ddee4a762 [TASK] Raise used core-testing-phpXY image versions (thanks to Stefan Bürk)
  • 2026-01-24 c0b5f0b513c [BUGFIX] Preserve site config linking to disabled site roots (thanks to Oliver Bartsch)
  • 2026-01-23 2e0bb154e8b [BUGFIX] Render record icons inline to improve dark mode (thanks to Georg Ringer)
  • 2026-01-23 a44223bef58 [DOCS] Adjust attention block formatting in ext:redirects (thanks to Franz Holzinger)
  • 2026-01-23 fcd44809605 [BUGFIX] Avoid live-search shortcut from opening in all opened tabs (thanks to Benjamin Franzke)
  • 2026-01-23 a0621d85390 [BUGFIX] Locale with Dependencies (thanks to Achim Fritz)
  • 2026-01-22 875c57424c3 [TASK] Prepare for TypeScript v6 and v7 (thanks to Benjamin Franzke)
  • 2026-01-22 131d952d468 Revert "[BUGFIX] Consider starttime/endtime for versioned records" (thanks to Garvin Hicking)
  • 2026-01-22 1928ca11558 [BUGFIX] Fix undefined array key warning in language menu processing (thanks to Himanshu Ramavat)
  • 2026-01-21 e2f9e9950d8 [BUGFIX] Use sprite references in SvgSpriteIconProvider inline output (thanks to Eric Harrer)
  • 2026-01-21 7a5f8cde3af [BUGFIX] Use correct tests for checking sorting (thanks to Georg Ringer)
  • 2026-01-20 65a6d4cb663 [TASK] Update to composer/composer v2.9.3 (thanks to Oliver Hader)
  • 2026-01-20 80d73f14962 [TASK] Update PHPStan to 2.1.34 (thanks to Garvin Hicking)
  • 2026-01-20 1e9f2ffdd03 [BUGFIX] Use modified cache lifetime for row (thanks to Sebastian Michaelsen)
  • 2026-01-20 ed605628a64 [BUGFIX] Avoid infinite loading spinner on error in live search (thanks to Oliver Bartsch)
  • 2026-01-20 425df51f1be [TASK] Set TYPO3 version to 13.4.25-dev (thanks to Oliver Hader)