TYPO3 14.3.9

Release Notes

Version 14.3.9

Release Notes for TYPO3 CMS 14.3.9

This document contains information about TYPO3 CMS 14.3.9 which was released on 13.10.2026.

Get TYPO3 14.3.9 now

News

This release is a combined bug fix and security release.

Find more details in the security bulletin:

Read TYPO3 14.3.9 Release News

Checksums of TYPO3 14.3.9

SHA256

4e06a884a8ec04ecb1b371cb06f7eae256c9740ff25c0a93bc13786d3ef6a7ee typo3_src-14.3.9.tar.gz
6e41a8f15ee40dd34d096a60a1819a1d065b8f1a5609d11a9d7245a7f9eec604 typo3_src-14.3.9.zip

SHA1

88b30cf08cf1261fc4c00d43251a8afe2a48f0a3 typo3_src-14.3.9.tar.gz
7344f86f0f230a93ed19d9e1a67f62bbe3519cb4 typo3_src-14.3.9.zip

MD5

ba9626a2246fa12e5397dc88e2b9cc1f typo3_src-14.3.9.tar.gz
f35102588d846ab84632e7dd699068e6 typo3_src-14.3.9.zip

Package Signatures

TYPO3 Release Packages (the downloadable tarballs and zip files) as well as Git tags are signed using PGP signatures during the automated release process. Besides that, MD5 and SHA2-256 hashes are being generated for these files. Find more details on verifying signatures and hashes in the infrastructure guide.

Download GPG signed release README.md file

Example of verifying integrity of tar.gz package of current release:

wget --content-disposition https://get.typo3.org/14.3.9/tar.gz
wget --content-disposition https://get.typo3.org/14.3.9/tar.gz.sig
gpg --verify typo3_src-14.3.9.tar.gz.sig typo3_src-14.3.9.tar.gz

Upgrading

The usual upgrading procedure applies. No database updates are necessary. It might be required to clear all caches; the "important actions" section in the TYPO3 Install Tool offers the accordant possibility to do so.

Changes

Here is a list of what was fixed since 14.3.8:

  • 2026-10-13 5a024c24c80 [RELEASE] Release of TYPO3 14.3.9 (thanks to Benni Mack)
  • 2026-10-13 f536f75c6bd [SECURITY] Respect saveToFileMount of form uploads (thanks to Josua Vogel)
  • 2026-10-13 6c861ca8b2a [BUGFIX] Allow longer titles in the TER extension list (thanks to Georg Ringer)
  • 2026-10-13 150e2fbf48f [BUGFIX] Pass route requirements through to Symfony router (thanks to Benjamin Franzke)
  • 2026-10-13 70345426e27 [BUGFIX] Transform number fields to float|int in RecordFieldTransformer (thanks to Benjamin Franzke)
  • 2026-10-12 26e483730e8 [BUGFIX] Create responses with a text body correctly (thanks to Georg Ringer)
  • 2026-10-12 2d9b89cca9f [TASK] Open element browser in full size modal (thanks to Georg Ringer)
  • 2026-10-12 36b9a27b5e4 [BUGFIX] Keep reports module working on unreadable FAL folders (thanks to Georg Ringer)
  • 2026-10-12 facca6c3dcb [BUGFIX] Keep excluded unique values when moving records (thanks to Benni Mack)
  • 2026-10-12 6b025a85586 [DOCS] Apply style rules to the webhooks manual (thanks to Lina Wolf)
  • 2026-10-12 4ab7071d287 [TASK] Use native "discard" command when deleting a workspace (thanks to Oliver Bartsch)
  • 2026-10-12 1a080c5f181 [BUGFIX] Resolve dependencies of the native "discard" command (thanks to Benni Mack)
  • 2026-10-12 2e56af87e70 [TASK] Cache backend configuration in Extbase ConfigurationManager (thanks to Johannes Kasberger)
  • 2026-10-12 8b8268d484d [BUGFIX] Compare image extensions case-insensitively in resize() (thanks to Alexander Schnitzler)
  • 2026-10-12 003e5503d18 [BUGFIX] Allow 0 as type-specific TCAdefaults value (thanks to Wolfgang Klinger)
  • 2026-10-12 1fc666aa0d3 [BUGFIX] Apply defaults to fields outside the type's showitem (thanks to Wolfgang Klinger)
  • 2026-10-12 74b71941040 [DOCS] Add missing anchors to sysext manuals (thanks to Lina Wolf)
  • 2026-10-11 83e32fd6b95 [TASK] Update @typo3/icons to 5.1.0 (thanks to Benjamin Kott)
  • 2026-10-10 0c3abbe627c [BUGFIX] Fix backend live search crash for users without page mounts (thanks to Torben Hansen)
  • 2026-10-10 372967f08ed [BUGFIX] Keep translated relations on import (thanks to Benjamin Kott)
  • 2026-10-10 e4980b0ead3 [TASK] Remove redundant IN value null check (thanks to Wouter Wolters)
  • 2026-10-10 1abbbb8259c [BUGFIX] Always fix permissions of created files (thanks to Georg Ringer)
  • 2026-10-10 e9a48cdd2e0 [BUGFIX] Keep status with WWW-Authenticate header (thanks to Oliver Bartsch)
  • 2026-10-10 0f46ba45e7c [TASK] Add e2e install scenario for "use existing db" (thanks to Garvin Hicking)
  • 2026-10-10 91f5e94f12b [BUGFIX] Unwrap Extbase request for error page (thanks to Wolfgang Klinger)
  • 2026-10-10 74afe617d23 [BUGFIX] Initialize CKEditor only after the document is parsed (thanks to Georg Ringer)
  • 2026-10-10 abd63d9467d [BUGFIX] Resolve composer-named TER dependencies in classic mode (thanks to Anton Danilov)
  • 2026-10-10 40c3fad463b [BUGFIX] Keep upgrade wizards done if no update is necessary (thanks to Georg Ringer)
  • 2026-10-09 b1f32c9db89 [BUGFIX] Resolve labels of radio fields in FlexForms (thanks to Oliver Bartsch)
  • 2026-10-09 d61325ffac9 [BUGFIX] Keep live uids of non-child relations in workspaces (thanks to Georg Ringer)
  • 2026-10-09 9c978539acb [BUGFIX] Expand filtered file storage roots (thanks to Wouter Wolters)
  • 2026-10-09 f7766cd3378 [BUGFIX] Match redirects with brackets in query parameters (thanks to Georg Ringer)
  • 2026-10-09 bad2b0986f2 [BUGFIX] Check site set paths for potential xlf files (thanks to Georg Ringer)
  • 2026-10-09 a6c71f05d3c [BUGFIX] Reset LanguageMenuProcessor state per call (thanks to Nikita Hovratov)
  • 2026-10-09 46a38fe1b76 [BUGFIX] Try next route on invalid route parameter (thanks to Georg Ringer)
  • 2026-10-09 bfb24f0d57a [TASK] Enable strictFunctionTypes for the TypeScript build (thanks to Benjamin Kott)
  • 2026-10-09 29b0e1a25fe [TASK] Cover combined form overrides with test (thanks to Josua Vogel)
  • 2026-10-09 b3960c3afd0 [BUGFIX] Propagate CSV download response in QuerySearchController (thanks to Benni Mack)
  • 2026-10-09 120397e72ed [TASK] Demonstrate regex slug replacements in styleguide (thanks to Wouter Wolters)
  • 2026-10-09 20813272af6 [TASK] Set TYPO3 version to 14.3.9-dev (thanks to Benni Mack)