TYPO3 14.0.2

Release Notes

Version 14.0.2

Release Notes for TYPO3 CMS 14.0.2

This document contains information about TYPO3 CMS 14.0.2 which was released on 13.01.2026.

Get TYPO3 14.0.2 now

Checksums of TYPO3 14.0.2

SHA256

6f3567916c7ec915bd424e91f0c2cc7f65970539354290c6f1ad923da1cc1d89 typo3_src-14.0.2.tar.gz
9cb8062a154a91361e4b94fb57827c9afb27cf8052bd0e0586e92f4c6d14d862 typo3_src-14.0.2.zip

SHA1

cacdddf6794293ca3201e6b39fd9e0564cafb5cb typo3_src-14.0.2.tar.gz
7a8e1201d5c8c438dacc262c62990ce3a5450815 typo3_src-14.0.2.zip

MD5

2bf581f92cc41792e2f0af52a57ffff7 typo3_src-14.0.2.tar.gz
f1cd15555b1c582bc27777895900cb88 typo3_src-14.0.2.zip

Package Signatures

TYPO3 Release Packages (the downloadable tarballs and zip files) as well as Git tags are signed using PGP signatures during the automated release process. Besides that, MD5 and SHA2-256 hashes are being generated for these files. Find more details on verifying signatures and hashes in the infrastructure guide.

Download GPG signed release README.md file

Example of verifying integrity of tar.gz package of current release:

wget --content-disposition https://get.typo3.org/14.0.2/tar.gz
wget --content-disposition https://get.typo3.org/14.0.2/tar.gz.sig
gpg --verify typo3_src-14.0.2.tar.gz.sig typo3_src-14.0.2.tar.gz

Upgrading

The usual upgrading procedure applies. No database updates are necessary. It might be required to clear all caches; the "important actions" section in the TYPO3 Install Tool offers the accordant possibility to do so.

Changes

Here is a list of what was fixed since 14.0.1:

  • 2026-01-13 62e93122ec7 [RELEASE] Release of TYPO3 14.0.2 (thanks to Oliver Hader)
  • 2026-01-13 60bcdd94d59 [SECURITY] Harden message deserialization in FileSpool transport (thanks to Elias Häußler)
  • 2026-01-13 77b21341019 [SECURITY] Avoid record deletion without permissions in recycler module (thanks to Elias Häußler)
  • 2026-01-13 d480b27e206 [SECURITY] Prevent unauthorized access to resources in redirects module (thanks to Elias Häußler)
  • 2026-01-13 a6e08eb75da [SECURITY] Ensure defVals adhere to permissions checks (thanks to Benjamin Franzke)
  • 2025-12-08 ccd67014898 [BUGFIX] Ensure EXT:scheduler records show interval frequency (thanks to Garvin Hicking)
  • 2025-12-07 3493cf5ed3e [DOCS] Fix code snippets for migration wizards (thanks to Simon Schaufelberger)
  • 2025-12-07 cee772c8023 [BUGFIX] RTE: Allow partial selection when clicking into links (thanks to Philipp Kitzberger)
  • 2025-12-05 2c07d9f3d58 [TASK] Lint XLIFF using XliffUtils::validateSchema() (thanks to Lina Wolf)
  • 2025-12-05 04c5f6973cb [TASK] Adjust workflow for branch 14.0 (thanks to Stefan Bürk)
  • 2025-12-02 7082cc09348 [TASK] Set TYPO3 version to 14.0.2-dev (thanks to Benni Mack)