TYPO3 13.4.39

Release Notes

Version 13.4.39

Release Notes for TYPO3 CMS 13.4.39

This document contains information about TYPO3 CMS 13.4.39 which was released on 10.11.2026.

Get TYPO3 13.4.39 now

News

This version is a bugfix and maintenance release.

Read TYPO3 13.4.39 Release News

Checksums of TYPO3 13.4.39

SHA256

a1404c4e315e874f28c4b6aac08239fa57376d5229409d28748e793fda5535bc typo3_src-13.4.39.tar.gz
e57eee9c398d90c6a1c48a4474c12336d1ba3c3001bdc14b846f210c2588621a typo3_src-13.4.39.zip

SHA1

66e809280d6a99fb5d09ae8afeb22cec3f56cafe typo3_src-13.4.39.tar.gz
82f1eb4f72f16bf55d84e4e63fd8486ccf9f21cf typo3_src-13.4.39.zip

MD5

d471e7bf99bc3714fd22896bb078b1b7 typo3_src-13.4.39.tar.gz
b1c2fd5607228252346d4e421bb9f008 typo3_src-13.4.39.zip

Package Signatures

TYPO3 Release Packages (the downloadable tarballs and zip files) as well as Git tags are signed using PGP signatures during the automated release process. Besides that, MD5 and SHA2-256 hashes are being generated for these files. Find more details on verifying signatures and hashes in the infrastructure guide.

Download GPG signed release README.md file

Example of verifying integrity of tar.gz package of current release:

wget --content-disposition https://get.typo3.org/13.4.39/tar.gz
wget --content-disposition https://get.typo3.org/13.4.39/tar.gz.sig
gpg --verify typo3_src-13.4.39.tar.gz.sig typo3_src-13.4.39.tar.gz

Upgrading

The usual upgrading procedure applies. No database updates are necessary. It might be required to clear all caches; the "important actions" section in the TYPO3 Install Tool offers the accordant possibility to do so.

Changes

Here is a list of what was fixed since 13.4.37:

  • 2026-11-10 080493d0a2a [RELEASE] Release of TYPO3 13.4.39 (thanks to Benni Mack)
  • 2026-11-10 27fd09f5347 [TASK] Set TYPO3 version to 13.4.39-dev (thanks to Benni Mack)
  • 2026-11-10 202d886d872 [RELEASE] Release of TYPO3 13.4.38 (thanks to Benni Mack)
  • 2026-11-10 68cebef4ec4 [BUGFIX] Ship flag icon for United States Minor Outlying Islands (thanks to Niklas Grieger)
  • 2026-11-10 796594b5ab9 [BUGFIX] Only resolve version ids for workspace-aware MM relations (thanks to Benni Mack)
  • 2026-11-09 68141ffa112 [TASK] Update composer/composer to 2.11.1 (thanks to Benjamin Franzke)
  • 2026-11-09 ec8e3f7b899 [TASK] Update insecure npm dependencies (thanks to Benjamin Franzke)
  • 2026-11-09 e121819e7b6 [TASK] Update to CKEditor5 v49 (thanks to Benjamin Franzke)
  • 2026-11-09 1d6ee3e897d [BUGFIX] Properly recognize Ctrl+Drag and Drop on Windows Chrome (thanks to Garvin Hicking)
  • 2026-11-09 6497898d47f [TASK] Raise symfony/* packages (thanks to Benjamin Franzke)
  • 2026-11-06 038865ad024 [DOCS] Point changelog class references at the right extension (thanks to Lina Wolf)
  • 2026-11-06 6328b17ba86 [BUGFIX] Skip foreign table query for transOrigPointerField on default language (thanks to Benni Mack)
  • 2026-11-05 128c60daf16 [TASK] Update PHP 8.6 testing image to 1.2 (thanks to Wouter Wolters)
  • 2026-11-05 90ecb6585d7 [TASK] Raise dependencies for PHP 8.6 compatibility (thanks to Wouter Wolters)
  • 2026-11-05 c9a89023495 [TASK] Replace deprecated SORT_LOCALE_STRING flag (thanks to Stefan Bürk)
  • 2026-11-05 16e0b5f5fcb [TASK] Raise symfony/property-info to 7.4.23 (thanks to Oli Bartsch)
  • 2026-11-05 863febb5158 [TASK] Avoid empty unserialize input on PHP 8.6 (thanks to Wouter Wolters)
  • 2026-11-05 f05e0168a50 [TASK] Complete Install Tool session handlers for PHP 8.6 (thanks to Wouter Wolters)
  • 2026-11-04 9890db99925 [TASK] Update ISO Database (thanks to Benni Mack)
  • 2026-11-03 6dd3cf95cd7 [BUGFIX] Keep flushing caches when a queued record is invalid (thanks to Benni Mack)
  • 2026-11-02 984eea0d5ed [TASK] Avoid PHP 8.6 deprecation in callUserFunction() (thanks to Wouter Wolters)
  • 2026-11-02 083851b2676 [BUGFIX] Synchronize only XLIFF files from site sets to Crowdin (thanks to Peter Kraume)
  • 2026-11-02 1eee39fb382 [TASK] Use spl_object_id() for ObjectStorage keys (thanks to Stefan Bürk)
  • 2026-11-01 f6fc9f95c46 [TASK] Replace deprecated spl_object_hash() calls (thanks to Stefan Bürk)
  • 2026-10-30 b10f79e250c [BUGFIX] Let editors publish new root-level records (thanks to Garvin Hicking)
  • 2026-10-28 ce5958fb3f7 [TASK] Clarify Signed-off-by and AI attribution in AGENTS.md (thanks to Benni Mack)
  • 2026-10-28 4d5a5fa4276 [TASK] Declare CRLF constant for PHPStan (thanks to Oli Bartsch)
  • 2026-10-25 28639c53263 [TASK] Raise phpstan/phpstan to 2.3.2 (thanks to Oli Bartsch)
  • 2026-10-23 e1c84440249 [BUGFIX] Allow site set labels to be translated via Crowdin (thanks to Chris Müller)
  • 2026-10-23 de82b7ceb61 [BUGFIX] Disable synced select fields in translations (thanks to Maike Kiebele)
  • 2026-10-23 53c53aa2466 [TASK] Update Redis and Memcached images for functional tests (thanks to Wouter Wolters)
  • 2026-10-23 1687d7dde08 [DOCS] Name PHP classes by their full name in the changelog (thanks to Lina Wolf)
  • 2026-10-22 3276ab85f1c [BUGFIX] Use current site language for CSP reporting URL (thanks to Georg Ringer)
  • 2026-10-22 9498adac240 [TASK] Set TYPO3 version to 13.4.38-dev (thanks to Benni Mack)