Release Notes for TYPO3 CMS 7.0.2

This document contains information about TYPO3 CMS 7.0.2 which was released on December 10th, 2014.

News

This release is a combined bug fix and security release.

Notes

Due to security issues found in the TYPO3 CMS Core, there was a combined release of TYPO3 CMS 4.5.39, 6.2.9 and 7.0.2.\ Find more details in the security bulletin: <https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2014-003/&gt;

Download

<https://typo3.org/download/&gt;

MD5 checksums

a42d3292df8761b59ff64e8719a18520  typo3_src-7.0.2.tar.gz
89a17926865ddbc2d087fcf0c2ec9757  typo3_src-7.0.2.zip

Upgrading

The usual upgrading procedure applies. No database updates are necessary.\ It might be required to clear all caches; the “important actions” section in the TYPO3 Install Tool offers the accordant possibility to do so.

Changes

Here is a list of what was fixed since [7.0.0](TYPO3_CMS_7.0.0 "wikilink"):

2014-12-10  a0ee566                  [RELEASE] Release of TYPO3 7.0.2 (TYPO3 Release Team)
2014-12-10  c407bee  #62723          [!!!][SECURITY] Fix link spoofing in prefixLocalAnchors (Helmut Hummel)
2014-12-10  3b85e49                  [TASK] Set TYPO3 version to 7.0.2-dev (TYPO3 Release Team)

2014-12-10  e8cd85e                  [RELEASE] Release of TYPO3 7.0.1 (TYPO3 Release Team)
2014-12-02  97d2ee0                  [TASK] Set TYPO3 version to 7.0.1-dev (TYPO3 Release Team)

Package Signatures

TYPO3 Release Packages (the downloadable tarballs and zip files) as well as Git tags are signed using PGP signatures during the automated release process. Besides that, MD5 and SHA2-256 hashes are being generated for these files. Find more details on verifying signatures and hashes in the infrastructure guide.

Download GPG signed release README.md file

Example of verifying integrity of tar.gz package of current release:

wget --content-disposition https://get.typo3.org/7.0.2/tar.gz
wget --content-disposition https://get.typo3.org/7.0.2/tar.gz.sig
gpg --verify typo3_src-7.0.2.tar.gz.sig typo3_src-7.0.2.tar.gz