TYPO3 7.6.42 ELTS

Release Notes

Version 7.6.42 ELTS

This version is not supported anymore.

The TYPO3 CMS community supported from 2015-11-10 until 2018-11-27. Extended security & compatibility support (ELTS) expired on 2022-11-30.

Please consider updating to a newer version.

Release Notes for TYPO3 CMS 7.6.42

This document contains information about TYPO3 CMS 7.6.42 which was released on 12.05.2020.

Get TYPO3 7.6.42 now


This release is a combined bug fix and security release.

Checksums of TYPO3 7.6.42


0bd936e1c79d3b41735898f0b4f59335255926e45c3dc750b31b8e07a355b27a typo3_src-7.6.42.tar.gz
cff0bb3271179432ef2aa193731d6e5f85047d53b4677087d1ed7f454407d207 typo3_src-7.6.42.zip


184f2daf373402a5586c29137b79c4cbfa8b2607 typo3_src-7.6.42.tar.gz
851020a582b17dd2dd02213d4b6f8c10b17d8d6b typo3_src-7.6.42.zip


ad143ac7187f0c4217d7f5ea4c068cad typo3_src-7.6.42.tar.gz
51dc85511f49f2f6250f3551a6e4ad2b typo3_src-7.6.42.zip

Package Signatures

TYPO3 Release Packages (the downloadable tarballs and zip files) as well as Git tags are signed using PGP signatures during the automated release process. Besides that, MD5 and SHA2-256 hashes are being generated for these files. Find more details on verifying signatures and hashes in the infrastructure guide.

Download GPG signed release README.md file

Example of verifying integrity of tar.gz package of current release:

wget --content-disposition https://get.typo3.org/7.6.42/tar.gz
wget --content-disposition https://get.typo3.org/7.6.42/tar.gz.sig
gpg --verify typo3_src-7.6.42.tar.gz.sig typo3_src-7.6.42.tar.gz


The usual upgrading procedure applies. No database updates are necessary. It might be required to clear all caches; the "important actions" section in the TYPO3 Install Tool offers the accordant possibility to do so.


  • 2020-05-12 edf36d143d [RELEASE] Release of TYPO3 7.6.42 (thanks to Andreas Fernandez)
  • 2020-05-12 bfe5df7122 [SECURITY] Mitigate bypassing CSRF token via XSS (thanks to Andreas Fernandez)
  • 2020-05-12 cecf68aae3 [SECURITY] Avoid insecure deserialization of $BE_USER->uc properties (thanks to Andreas Fernandez)
  • 2020-05-12 403e7bee67 [SECURITY] Prevent destructors with side-effects from being unserialized (thanks to Andreas Fernandez)
  • 2020-05-12 0f786c1ad3 [TASK] Incorporate changes of jQuery version 3.5.0 (thanks to Andreas Fernandez)
  • 2020-05-12 81a990ec9b [SECURITY] Escape shortened placeholder text in HTML output (thanks to Andreas Fernandez)
  • 2020-05-12 10c61f1df9 [BUGFIX] Fully check dependencies of dependencies (thanks to Andreas Fernandez)
  • 2020-05-12 a783133b74 [TASK] Update copyright year (thanks to Andreas Fernandez)
  • 2020-03-19 1359c2c3c7 [BUGFIX] Update build plan (thanks to Andreas Fernandez)
  • 2020-01-27 8a3a42736e [TASK] Set TYPO3 version to 7.6.42-dev (thanks to Andreas Fernandez)