TYPO3 7.6.16

Release Notes

Version 7.6.16

This version is not supported anymore.

The TYPO3 CMS community supported from 2015-11-10 until 2018-11-27. Extended security & compatibility support (ELTS) expired on 2022-11-30.

Please consider updating to a newer version.

Release Notes for TYPO3 CMS 7.6.16

This document contains information about TYPO3 CMS 7.6.16 which was released on February 28th, 2017.


This release is a combined bug fix and security release.


Find more details in the security bulletins:



MD5 checksums

7fffa86463ab7e0a84d003afbed0c882  typo3_src-7.6.16.tar.gz
b1c0eb51842deb32184426261e1c778e  typo3_src-7.6.16.zip

SHA256 checksums

acd366fe5914ba442261ba054ded7c0df62a37b466ccf9e617635be203cea94e  typo3_src-7.6.16.tar.gz
e9fee44b3164b2d6534551dc433df9adcb4c6a643debc458736050bb4eb8caf1  typo3_src-7.6.16.zip


The usual upgrading procedure applies.\ There were changes in DB tables index_phash and sys_file_reference compared to 7.6.11. Log into TYPO3 Install Tool, click on “Compare current database with specification” and apply changes.\ It might be required to clear all caches; the “important actions” section in the TYPO3 Install Tool offers the accordant possibility to do so.


Here is a list of what was fixed since [7.6.15](TYPO3_CMS_7.6.15 "wikilink"):

2017-02-28  94224a5                  [RELEASE] Release of TYPO3 7.6.16 (TYPO3 Release Team)
2017-02-28  1a4e18b  #79911          [SECURITY] Prevent possible XSS in Fluid templates (Nicole Cordes)
2017-02-28  414bfca  #77534          [BUGFIX] Multiple InlineCSS overrides each other (Haco)
2017-02-27  bce213e  #80029          [BUGFIX] EM: Add title attribute to showAllVersions links (Josef Glatz)
2017-02-27  2b87d93  #79949          [BUGFIX] Fix parameter type in BackendModuleRequestHandler (Benni Mack)
2017-02-27  ac9baec  #78142          [BUGFIX] Prevent different constants marker in TS parsing (Nicole Cordes)
2017-02-27  0af1c88  #78960          [BUGFIX] TCA: Make ###CURRENT_PID### work in foreign_table_where in IRRE (Nicole Cordes)
2017-02-26  dabee74  #79931          [BUGFIX] Extbase: correct handling of mm relations (Markus Klein)
2017-02-26  94d5070  #60748          [TASK] Add button to reload static database data of an extension (Nicole Cordes)
2017-02-26  83160ce  #79715          [TASK] Update TYPO3 Icons to v1.1.0 (Josef Glatz)
2017-02-26  15fcd2d  #80005          [BUGFIX] Prevent installing incompatible extensions without confirmation (Nicole Cordes)
2017-02-26  1d64545  #79043          [BUGFIX] Fix non-302 redirects for PSR-7 response objects (Benjamin Franzke)
2017-02-26  cf3ac81  #79908          [BUGFIX] InvalidXmlFileException for invalid locallang.xml (Sascha Egerer)
2017-02-25  1d976bb  #79559          [BUGFIX] Correct handling of ObjectStorage objects in PaginateController (Nicole Cordes)
2017-02-25  79e692f  #79776          [BUGFIX] Ignore invalid files in LocalDriver::getDirectoryItemList (Nicole Cordes)
2017-02-24  668f82a  #79937          [BUGFIX] Fix append and prepend function of valuePicker (Mona Muzaffar)
2017-02-23  0a9dadd  #72797          [FOLLOWUP][BUGFIX] Hide language switcher if record has no default translation (Sascha Nowak)
2017-02-22  8c38718  #79947          [TASK] Include table name in TCA deprecation message for feInterface (Xavier Perseguers)
2017-02-20  f2fe922  #79905          [CLEANUP] Remove ignored file from GIT index (Markus Klein)
2017-02-17  b70a52a  #79859          [BUGFIX] Fix localization guard for &quot;pages_language_overlay&quot; (Mathias Brodala)
2017-02-16  4a92123  #79835          [BUGFIX] UriBuilder: Do not skip empty parameters (Markus Klein)
2017-02-15  816e169  #78979          [TASK] Update file list module access in backend groups and users (Nicole Cordes)
2017-02-15  be8e502  #79686          [BUGFIX] FlexFormNoTabsContainer: Fix usage of array_pop() (Andreas Fernandez)
2017-02-14  7bf7f8d  #79301          [BUGFIX] Truncate long GIFBUILDER file names (Thoams Oliver Moll)
2017-02-14  9fb288b  #79793          [BUGFIX] Fix broken svg flag (Josef Glatz)
2017-02-11  33359ce  #79747          [TASK] Allow customData in FormEngine data compiler (Andreas Fernandez)
2017-02-10  861cb24  #78726          [BUGFIX] Show record title for inline element (Nicole Cordes)
2017-02-09  1e85fe4  #79091          [BUGFIX] Fix JS errors in context menu (Tymoteusz Motylewski)
2017-02-07  c2b02f4  #79641          [BUGFIX] Fix CGL script to new return status strategy of php-cs-fixer (Wouter Wolters)
2017-02-06  2ce4d50  #79621          [BUGFIX] Show warning label for linkhandler if no label is defined (Markus Klein)
2017-02-06  19cd33e  #79374          [BUGFIX] Wrong position of init (Stefan Froemken)
2017-02-04  aa12bf3  #79628          [BUGFIX] Limit primary key length on be_session and fe_session table (Christian Kuhn)
2017-02-04  2fd488d  #79620          [TASK] Fix missing variable initialization in AbstractTreeView (Markus Klein)
2017-02-02  04f7397  #79566          [BUGFIX] Allow long cookie names (Marco Huber)
2017-01-31  4714a9b  #79567          [TASK] Clear search field in Install Tool with ESC (Georg Ringer)
2017-01-29  60229e0  #79004          [CLEANUP] Simplify updating of timestamp in writeForeignField (Thomas Hohn)
2017-01-28  09f903d  #79107          [BUGFIX] Change EM composer mode message to info level (Benjamin Franzke)
2017-01-27  4d3ded2  #79294          [BUGFIX] Persist traversable domain objects via identifier (Mathias Brodala)
2017-01-27  35cbc15  #79068          [BUGFIX] Only perform reindex if data has indeed changed (Thomas Hohn)
2017-01-27  85ed5ef  #79510          [TASK] Add .php_cs.cache to .gitignore (Georg Ringer)
2017-01-26  0b8c8fe  #79378          [TASK] Cleanup code of LocalizationController::process (Manuel Selbach)
2017-01-26  5ce457f  #79469          [TASK] Adjust Cs-Fixer 2.0 hits (Anja Leichsenring)
2017-01-26  8699a00  #79361          [TASK] Update php-cs-fixer to version 2.0 (Anja Leichsenring)
2017-01-26  f9c7157  #79398          [BUGFIX] Debugger output: split lines before escaping them (Markus Klein)
2017-01-24  1e03831  #79162          [BUGFIX] Render metatags on uncached pages (Daniel Dorndorf)
2017-01-23  131586a  #79329          [BUGFIX] Fix broken links to permission module (Frank Naegler)
2017-01-23  d7143c1  #79399          [BUGFIX] FormEngine: Do not add &lt;br&gt; to readonly textarea content (Markus Klein)
2017-01-21  710350c  #79404          [TASK] Use official TYPO3.Icon repository (Benjamin Kott)
2017-01-20  dad72d3  #79052          [BUGFIX] Initialize TSFE-&gt;config with correct type in PHP 7.1 (Sascha Egerer)
2017-01-19  2920ac9  #79377          [BUGFIX] Restrict l10n fallback to cms extension (Philipp Gampe)
2017-01-19  7efc092  #78270          [BUGFIX] Use reflection information in getGettablePropertyNames (Nicole Cordes)
2017-01-18  aa17d02  #79376          [BUGFIX] Fix minor typo in DateTimePicker.js (Wouter Wolters)
2017-01-14  11d2122  #79005          [BUGFIX] Make persistent connections available for Redis cache backend (Kasper Ligaard)
2017-01-12  ef44751  #79285          Revert &quot;[BUGFIX] Skip main extension repository check in Composer mode&quot; (Nicole Cordes)
2017-01-12  437d897  #79277          [BUGFIX] Skip main extension repository check in Composer mode (Mathias Brodala)
2017-01-11  60f182f  #65822          [TASK] Filelist: Info dialog shows image dimensions (Michael Oehlhof)
2017-01-11  7e4e867  #79269          [BUGFIX] ResourceCompressor does not persist external resources (Benni Mack)
2017-01-11  4fbd633  #79275          [BUGFIX] CacheHashCalculator does not exclude ADMCMD arguments (Oliver Hader)
2017-01-11  179f160  #79266          [BUGFIX] Use POST for storing uc-related Storage in BE (Benni Mack)
2017-01-11  f323cce  #79001          [BUGFIX] Correct declaration of $rL_uidRegister (Kasper Ligaard)
2017-01-10  3376cab  #78986          [BUGFIX] Remove range from sorting field (Georg Ringer)
2017-01-09  54dd281  #78992          [BUGFIX] IconFactory check arrays for key (Alexander Opitz)
2017-01-09  eb44532  #79220          [BUGFIX] Fix sys_log table on strict database (Wouter Wolters)
2017-01-09  8c900c2  #79170          [TASK] Functional tests for free mode translation (Tymoteusz Motylewski)
2017-01-09  7a7b7e1  #75400          [BUGFIX] Make copy mode of translation modal use localize (Tymoteusz Motylewski)
2017-01-09  1e825b0  #79202          [BUGFIX] Fix typo in ext:backend fluid template (Benni Mack)
2017-01-09  d08da33  #79208          [BUGFIX] Remove leftover info about config.uniqueLinkVars (Josef Glatz)
2017-01-08  9a44f78  #79200          [TAKS] Add missing variables in WorkspaceService doc comments (Tymoteusz Motylewski)
2017-01-07  6b636a4  #79194          [BUGFIX] Get folder’s identifier for exception message (Andreas Fernandez)
2017-01-07  6ff54a5  #79165          [TASK] Update copyright year to 2017 (Wouter Wolters)
2017-01-06  33dbe77  #79085          [BUGFIX] Fix sorting in language list (Markus Sommer)
2017-01-04  6ef63b5  #79146          [TASK] Clean up @see annotation in DataHandler functional tests (Tymoteusz Motylewski)
2017-01-03  a041188  #78822          [BUGFIX] Documentation of sessionTimeout (Alexander Opitz)
2017-01-03  1bc921f                  [TASK] Set TYPO3 version to 7.6.16-dev (TYPO3 Release Team)

Package Signatures

TYPO3 Release Packages (the downloadable tarballs and zip files) as well as Git tags are signed using PGP signatures during the automated release process. Besides that, MD5 and SHA2-256 hashes are being generated for these files. Find more details on verifying signatures and hashes in the infrastructure guide.

Download GPG signed release README.md file

Example of verifying integrity of tar.gz package of current release:

wget --content-disposition https://get.typo3.org/7.6.16/tar.gz
wget --content-disposition https://get.typo3.org/7.6.16/tar.gz.sig
gpg --verify typo3_src-7.6.16.tar.gz.sig typo3_src-7.6.16.tar.gz