TYPO3 13.4.34

Release Notes

Version 13.4.34

Release Notes for TYPO3 CMS 13.4.34

This document contains information about TYPO3 CMS 13.4.34 which was released on 11.08.2026.

Get TYPO3 13.4.34 now

News

This release is a combined bug fix and security release.

Find more details in the security bulletins:

Read TYPO3 13.4.34 Release News

Checksums of TYPO3 13.4.34

SHA256

7bbbac08eb51455b3f6e192826e565acbab1165ba56aea90ce2b541615e5bcf6 typo3_src-13.4.34.tar.gz
ec415711e6abb8bad500729266ddd845374d36a8cc25b72bf4af0e8db944fb03 typo3_src-13.4.34.zip

SHA1

88084994fa191fbe27e5bbb275cbd08ef4f521a4 typo3_src-13.4.34.tar.gz
d7d9c62a2907f648a65c351f3515bd20559cb0b9 typo3_src-13.4.34.zip

MD5

7ba41c78e5ad6f60e3a10afdaa7e77ef typo3_src-13.4.34.tar.gz
ea89d320f5c8da280d29d402a5fbb726 typo3_src-13.4.34.zip

Package Signatures

TYPO3 Release Packages (the downloadable tarballs and zip files) as well as Git tags are signed using PGP signatures during the automated release process. Besides that, MD5 and SHA2-256 hashes are being generated for these files. Find more details on verifying signatures and hashes in the infrastructure guide.

Download GPG signed release README.md file

Example of verifying integrity of tar.gz package of current release:

wget --content-disposition https://get.typo3.org/13.4.34/tar.gz
wget --content-disposition https://get.typo3.org/13.4.34/tar.gz.sig
gpg --verify typo3_src-13.4.34.tar.gz.sig typo3_src-13.4.34.tar.gz

Upgrading

The usual upgrading procedure applies. No database updates are necessary. It might be required to clear all caches; the "important actions" section in the TYPO3 Install Tool offers the accordant possibility to do so.

Changes

Here is a list of what was fixed since 13.4.33:

  • 2026-08-11 8273e2eb49c [RELEASE] Release of TYPO3 13.4.34 (thanks to Oliver Hader)
  • 2026-08-11 4a75e862c58 [SECURITY] Prevent local Fetch/XHR-based request forgery via XSS (thanks to Benjamin Franzke)
  • 2026-08-11 e37ddb93272 [TASK] Raise phpunit/phpunit to ^11.5.56 (thanks to Stefan Bürk)
  • 2026-08-11 3db79500dd0 [BUGFIX] Fix PCRE regex breaking suggest wizard on line breaks (thanks to Oliver Heins)
  • 2026-08-11 71590a51e43 [BUGFIX] Implode nested placeholder arrays (thanks to Benjamin Kott)
  • 2026-08-10 1931de188d7 [TASK] Update npm package dompurify to 3.4.13 (thanks to Oliver Hader)
  • 2026-08-10 30abd5d5b39 [BUGFIX] Round simulated preview time up to full minutes (thanks to Dennis Bork)
  • 2026-08-10 82ec55fcf85 [TASK] Raise render-guides documentation renderer to 0.40.x (thanks to Garvin Hicking)
  • 2026-08-10 a56e0224242 [TASK] Allow execution with PHP 8.6 in runTests.sh (thanks to Stefan Bürk)
  • 2026-08-07 1469919e618 [BUGFIX] Defer BE_USER check in DataHandler::hasPageContextPermission (thanks to Oliver Hader)
  • 2026-08-06 defbaf0a8d3 [BUGFIX] Do not split paragraphs at inner linebreaks (thanks to Benjamin Kott)
  • 2026-08-06 4a787e49d74 [TASK] Raise guzzlehttp/* dependencies (thanks to Andreas Kienast)
  • 2026-08-06 d3d5be98408 [BUGFIX] Fix exception on initial TYPO3 setup with empty database (thanks to Garvin Hicking)
  • 2026-08-05 35b2ce9f4db [TASK] Remove unused variable in ext:install AuthenticationService (thanks to Oliver Hader)
  • 2026-08-04 9e9baf8e4f8 [TASK] Update christian-riesen/base32 to v2 (thanks to Wouter Wolters)
  • 2026-08-03 d60582cec94 [BUGFIX] Avoid TypeError for IMAGE cObject with missing file (thanks to Stig Nørgaard Færch)
  • 2026-08-02 cd2664c5c46 [TASK] Use Doctrine introspection API for table and database names (thanks to Stefan Bürk)
  • 2026-08-01 1d104f3b95e [BUGFIX] Find translations with empty l10n_source (thanks to Stefan Bürk)
  • 2026-08-01 c688f34c0c7 [TASK] Add JUnit logging to unit and functional CI jobs (thanks to Benni Mack)
  • 2026-08-01 dd182d4217e [BUGFIX] Isolate update check from download queue (thanks to Stefan Bürk)
  • 2026-08-01 034e06704ed [DOCS] Document purpose and use-cases of PlainDataResolver (thanks to Benni Mack)
  • 2026-07-30 7229244cb0d [TASK] Raise property-info, adapt ClassSchema tests (thanks to Stefan Bürk)
  • 2026-07-30 366b2fb4908 [TASK] Document meta tag precedence of page properties over TypoScript (thanks to Benni Mack)
  • 2026-07-30 4f094661a28 [BUGFIX] Prevent "danger" class for empty redirect integrity (thanks to Christian Bülter)
  • 2026-07-30 3d6243ec38a [TASK] Split tableDef explicitly in cache lifetime (thanks to Stefan Bürk)
  • 2026-07-29 ef15b95de21 [BUGFIX] Render nothing in f:image for unavailable files (thanks to Benni Mack)
  • 2026-07-29 3225a262fc6 [BUGFIX] Adjust blinded database connection options (thanks to Stefan Bürk)
  • 2026-07-29 552e63d2838 [TASK] Add workspace language synchronization DataScenario tests (thanks to Benni Mack)
  • 2026-07-29 d686115dcdb [BUGFIX] Autowire LoggerInterface for inject*() methods (thanks to Stefan Bürk)
  • 2026-07-27 8b91df91a5f [TASK] Update PHPStan to v2.2.6 (thanks to Garvin Hicking)
  • 2026-07-24 41f06d10837 [TASK] Clean up unit test mock platforms for Doctrine DBAL (thanks to Stefan Bürk)
  • 2026-07-23 1d1ee345cef [BUGFIX] Keep all PSR-4 paths of shared prefixes (thanks to Stefan Bürk)
  • 2026-07-23 c94ca2b459c [BUGFIX] Allow non-scheme protocol URI as CSP site base (thanks to Benjamin Serfhos)
  • 2026-07-23 0672f83032d [TASK] Do not rely on Doctrine schema object array keys (thanks to Stefan Bürk)
  • 2026-07-23 2c703f5aaec [BUGFIX] Evaluate sortDesc parameter correctly in indexed_search (thanks to Tobias Wojtylak)
  • 2026-07-23 2daccc76946 [TASK] Streamline file upload handling in ext:impexp (thanks to Oliver Hader)
  • 2026-07-23 c5367e281e9 [BUGFIX] Fix broken TableDiff::getDroppedForeignKeyConstraintNames() (thanks to Stefan Bürk)
  • 2026-07-22 6ca32543393 [TASK] Avoid deprecated Doctrine DBAL identifier quoting (thanks to Stefan Bürk)
  • 2026-07-21 f00d7f343f5 [BUGFIX] Resolve subpages of translated mount points (thanks to André Buchmann)
  • 2026-07-21 96e9f425e48 [BUGFIX] Ensure that failed attempts to send via MemorySpool are logged (thanks to Stephan Großberndt)
  • 2026-07-21 c9a08cf8e8d [BUGFIX] Blind "DB/Connections/Default/url" in TYPO3 BE (thanks to Mathias Brodala)
  • 2026-07-21 3b3b5ee7acc [BUGFIX] Elevate new MariaDB and Postgres platforms (thanks to Stefan Bürk)
  • 2026-07-21 eeb3c459748 [TASK] Extend runTests.sh database version matrix (thanks to Stefan Bürk)
  • 2026-07-20 2e48fcd4e27 [BUGFIX] Fix table option lookup on MariaDB 11.4+ (thanks to Stefan Bürk)
  • 2026-07-17 6491b8e1396 [BUGFIX] DateTime fields for slugs (thanks to Markus Klein)
  • 2026-07-17 ce8b7765662 [BUGFIX] Make LogRecord writeable ArrayAccess / offsetSet (thanks to Benni Mack)
  • 2026-07-17 a1190b354aa [BUGFIX] Extbase must ignore enable fields in Backend (thanks to Markus Klein)
  • 2026-07-17 526c4fb127d [TASK] Avoid unset() on protected class properties (thanks to Benni Mack)
  • 2026-07-14 129b021a1a8 [TASK] Set TYPO3 version to 13.4.34-dev (thanks to Oliver Hader)