TYPO3 7.6.5

Release Notes

Version 7.6.5

This version is not supported anymore.

The TYPO3 CMS community supported from 2015-11-10 until 2018-11-27. Extended security & compatibility support (ELTS) expired on 2022-11-30.

Please consider updating to a newer version.

Release Notes for TYPO3 CMS 7.6.5

This document contains information about TYPO3 CMS 7.6.5 which was released on April 12th, 2016.


This release is a combined bug fix and security release.


Find more details in the security bulletins:



MD5 checksums

c0f022868700b0978734bc6f9b97eca5  typo3_src-7.6.5.tar.gz
2af8f8b7725e7236775370c9d54f3e88  typo3_src-7.6.5.zip

SHA256 checksums

1ca76565aaac74e28ee0ffd3d8f52cf29c2b2edd883e54c296cd9966e9c36e35  typo3_src-7.6.5.tar.gz
1c5eb642cdbd320f6936ef23c185a5ea684acf43db98e2c72267212ce24da894  typo3_src-7.6.5.zip


The usual upgrading procedure applies. No database updates are necessary.\ It might be required to clear all caches; the “important actions” section in the TYPO3 Install Tool offers the accordant possibility to do so.


Here is a list of what was fixed since [7.6.4](TYPO3_CMS_7.6.4 "wikilink"):

2016-04-12  b042184                  [RELEASE] Release of TYPO3 7.6.5 (TYPO3 Release Team)
2016-04-12  a445c9c  #75055          [SECURITY] Disallow login with empty password (Helmut Hummel)
2016-04-12  819c1f9  #28175          [SECURITY] Limit user access in workspace previews (Nicole Cordes)
2016-04-12  ea14aaa  #75164          [SECURITY] Prevent XSS in SelectMultipleSideBySideElement (Nicole Cordes)
2016-04-12  d0daeb5  #73460          [SECURITY] XSS in TCA type inline (Frank Naegler)
2016-04-12  558f618  #75022          [BUGFIX] Load XML files of Extension Manager properly (Andreas Fernandez)
2016-04-12  b60f39c  #75495          [BUGFIX] Set correct width for textarea in file list (Georg Ringer)
2016-04-11  937d15a  #74324          [BUGFIX] Align docheader and pagetree toppanel correctly (Benjamin Kott)
2016-04-11  266bcb4  #75476          [BUGFIX] &quot;Visibility settings&quot; is broken in language view (Gianluigi Martino)
2016-04-10  e80e475  #75483          [TASK] Optimize CSS clearfix usage (Benjamin Kott)
2016-04-10  0c32c1a  #56640          [BUGFIX] Add button to lock install tool (Frank Naegler)
2016-04-08  42bb62e  #75353          [BUGFIX] Load RequireJs in PageRenderer:: addRequireJsConfiguration() (Andreas Fernandez)
2016-04-08  4dd3370  #67699          [BUGFIX] Don&#039;t remove spaces from passwords of fe_users (Daniel Goerz)
2016-04-08  adfc832  #75447          [TASK] Update adodb to v5.20.3 (Christian Kuhn)
2016-04-07  23b6a23  #75421          [BUGFIX] Modification date comparison fixed in FAL indexer (Wouter Wolters)
2016-04-07  299c70a  #75406          [BUGFIX] Raise index_rel.first to int(11) (Benni Mack)
2016-04-07  ff62eb9  #74131          [BUGFIX] WinCache 2.0 and newer have no opcode cache (Alexander Opitz)
2016-04-07  cabbfa1  #75288          [TASK] Remove references to non existing convertArgumentValue (Wouter Wolters)
2016-04-07  0edfb7d  #75315          [BUGFIX] Fix inline array notation in ContainerViewHelper docs (Wouter Wolters)
2016-04-05  cb18a53  #75360          [BUGFIX] Allow running only EXT:form subset of unit tests (Morton Jonuschat)
2016-04-04  d81e40d  #73567          [BUGFIX] Ignore cURL proxy header block (Albrecht Köhnlein)
2016-04-01  56d13ab  #75367          [TASK] Add bootstrap styling to simulate backend user (Markus Sommer)
2016-04-01  76d0ff9  #66106          [BUGFIX] Make ImageService Exception more descriptive (Benni Mack)
2016-04-01  5a84aae  #70567          [BUGFIX] Repair System Information Panel extendibility (Patrick Schriner)
2016-04-01  e3e5209  #75352          [BUGFIX] Fix display bug in chrome 50+ (Markus Sommer)
2016-04-01  7610794  #69355          [TASK] EXT:form - Optimize validation in InArrayValidator (Florian Mast)
2016-04-01  8eca1bd  #30852          [BUGFIX] Indexed Search: Always add L parameter to links (Tymoteusz Motylewski)
2016-03-31  4f1ce41  #75038          [TASK] Respect ssl_verify_peer and ssl_verify_host in curl requests (Daniel Maier)
2016-03-31  c8f1721  #75329          [TASK] Indexed Search: Improve labels in backend module (Tymoteusz Motylewski)
2016-03-31  4979327  #75326          [BUGFIX] Preserve parameters for email links in RTE (Markus Klein)
2016-03-31  608631a  #75141          [BUGFIX] config.locale_all should format floating point values (Benni Mack)
2016-03-31  cfc5e19  #73146          [BUGFIX] Only show inline field if allowed (Stefan Froemken)
2016-03-31  a4dabc5  #75245          [BUGFIX] target to page object must set type parameter (Jigal van Hemert)
2016-03-30  56d4860                  [BUGFIX] PageTree cannot select/expand hidden nodes (Oliver Hader)
2016-03-30  5ea9537  #75280          [BUGFIX] Fail with exit code for fatal errors during boot (Helmut Hummel)
2016-03-30  d04862e  #74180          [BUGFIX] Stay on edited page after using &quot;Save &amp; Close&quot; (Martin Vennemann)
2016-03-30  e1570f5  #75183          [BUGFIX] Re-allow t3d export from ID 0 (Benni Mack)
2016-03-30  db336a3  #75316          [BUGFIX] Allow passing null for $methods in getAccessibleMock (Oliver Klee)
2016-03-30  c6d1230  #75307          [BUGFIX] Treat numbers for comparison in FormEngineValidation as integer (Andreas Fernandez)
2016-03-30  71db2aa  #70012          [TASK] ResourceStorage-&gt;addFile() should not delete orig file if requested (Christian Kuhn)
2016-03-30  c326bb1  #72931          [!!!][BUGFIX] Make indexed search plugin PHP7 compatible (Tymoteusz Motylewski)
2016-03-30  01505d7  #75129          [BUGFIX] Show language flags in page module again (Gianluigi Martino)
2016-03-29  09cbdc5  #75283          [BUGFIX] Use proper quotation in phpdoc of ExtensionManagementUtility::addService() (Andreas Fernandez)
2016-03-29  34cb9ce  #75287          [BUGFIX] Fix typo in BooleanNode exception message (Sascha Egerer)
2016-03-24  dc630ad  #75156          [BUGFIX] Add reference count to delete message (Gianluigi Martino)
2016-03-24  27ac159  #73125          [BUGFIX] FormEngine: Exception on inline/section in flex container (Christian Kuhn)
2016-03-23  72eb2fe  #75242          [BUGFIX] Use `modTSconfig` for default language label, if set (Andreas Fernandez)
2016-03-23  f189337  #68378          [TASK] Use DocHeader buttons in PermissionController (Andreas Fernandez)
2016-03-23  56adf9d  #75234          [BUGFIX] Break word without spaces in SystemInformation toolbar item (Wouter Wolters)
2016-03-23  97be0d0  #75235          [BUGFIX] BackendUtility::dateTimeAge must return correct values (Georg Ringer)
2016-03-21  82cd746  #70542          [BUGFIX] Set correct record information for SaveAndNew (Nicole Cordes)
2016-03-21  51c7003  #72379          [BUGFIX] Show button &#039;add image&#039; after delete inline fails (Frank Naegler)
2016-03-21  1ebf988  #63291          [BUGFIX] Use APCu instead of APC for Caching (Benni Mack)
2016-03-21  681d29d  #55690          [BUGFIX] Ensure correct order of @-rules in CSS (Andreas Fernandez)
2016-03-18  1e6753a  #74536          [BUGFIX] Remove competing injects from WidgetRequestHandler (Alexander Jahn)
2016-03-18  59bbb67  #75179          [TASK] Stop animation if click again (Markus Sommer)
2016-03-18  336b939  #73501          [BUGFIX] Highlight changes of translation diff in FormEngine again (Frank Naegler)
2016-03-18  18583be  #73675          [BUGFIX] Enable URLs with spaces in the RTE (Marco Huber)
2016-03-18  82ea50b  #75116          [BUGFIX] Make preview of translated pages possible (Heiko Hardt)
2016-03-18  9f51f85  #75147          [BUGFIX] Ignore root level restriction on new record (Benjamin Serfhos)
2016-03-18  2eb4d9c  #72981          [BUGFIX] Set page title for record list (Christian Weiske)
2016-03-17  fd4aac9  #73617          [BUGFIX] Ensure correct sorting when using the localization wizard (Andreas Fernandez)
2016-03-17  5d38829  #75126          [BUGFIX] Correctly determine previously used language in localization wizard (Andreas Fernandez)
2016-03-16  a327af8  #73712          [BUGFIX] Add missing parameters to getFiles (Susanne Moog)
2016-03-16  cdf99f5  #75137          [BUGFIX] Correct output of &quot;Rollback-Preview&quot; (Gianluigi Martino)
2016-03-14  1876b50  #71509          [BUGFIX] Add reserved area for loading indicator within modules (Michael Oehlhof)
2016-03-14  9af9606  #75020          [BUGFIX] Don&#039;t redirect when you click on &quot;save and view&quot; (Marco Huber)
2016-03-13  50bccbe  #73864          [BUGFIX] Suggest wizard in FlexForms for new records (Nicole Cordes)
2016-03-13  982dc6c  #75035          [BUGFIX] Fix invalid placeholder in exception message (Markus Klein)
2016-03-11  e6b1817  #75024          [BUGFIX] Store rtehtmlarea_spellchecker in correct route configuration (Andreas Fernandez)
2016-03-11  b46c85a  #64708          [BUGFIX] Make SingleTasks toggleable from scheduler list view (Andreas Fernandez)
2016-03-11  0ac0263  #74815          [TASK] Add unit tests for TYPO3SEARCH markers (Tymoteusz Motylewski)
2016-03-11  94e822f  #73425          [BUGFIX] Initialize T3editor properly (Andreas Fernandez)
2016-03-11  e264147  #74813          [BUGFIX] Add button styling to clipInsert button (Andreas Fernandez)
2016-03-10  af2a323  #73013          [BUGFIX] Check access to cshmanual module (Marco Huber)
2016-03-10  bcee743  #74586          [BUGFIX] Unset default link if set with values from other link handler (Tim Jungebluth)
2016-03-10  ae5a2e6  #74508          [BUGFIX] Load XML files of t3editor properly (Andreas Fernandez)
2016-03-08  253139a  #72973          [FOLLOWUP][BUGFIX] Do not scroll on top using actions on multipleSideBySide (Markus Klein)
2016-03-06  7686ceb  #73060          [BUGFIX] Add urldecode for the forgotHash in FrontendLoginController (Zsolt Molnar)
2016-03-06  3cf5d05  #72225          [BUGFIX] Workspace page previews collide with generated preview links (Oliver Hader)
2016-03-06  3312d1f  #74337          [TASK] EXT:form - add unitTests for class TypoScriptToJsonConverter (Sebastian Wagner)
2016-03-06  a37f616  #73871          [BUGFIX] Fix date conversion of neg timestamps (Daniel Maier)
2016-03-06  8fb1179  #72898          [BUGFIX] DataHandler: Use the updated field to determine record type (Hannes Lau)
2016-03-06  9d71c19  #67126          [BUGFIX] LocalImageProcessor cannot reuse remote files (Andreas Wolf)
2016-03-06  91e515e  #72798          [BUGFIX] Apply image cropping to click-enlarged images (Oliver Hader)
2016-03-05  2a51859  #74336          [BUGFIX] Set correct max-height for RTE (Marius David Wieschollek)
2016-03-05  bbc5f6c  #72846          [BUGFIX] Absolute URIs get prefixed with absRefPrefix in typolink (Oliver Hader)
2016-03-05  dd6c446  #73470          [TASK] Copy is missing in pagetree context menu without edit permissions (Gianluigi Martino)
2016-03-05  4068261  #69941          [BUGFIX] Fix slide function of cObject (Jo Hasenau)
2016-03-05  0aa34cb  #66449          [BUGFIX] Check if selected page is available before loading BE module (Michael Oehlhof)
2016-03-05  ee7fafd  #74127          [BUGFIX] Ensure t3d compatibility for supported TYPO3 version (Nicole Cordes)
2016-03-05  7147de0  #33147          [BUGFIX] Show the copy option in the page browser contextual menu (Anja Leichsenring)
2016-03-05  d079bae  #70242          [BUGFIX] Reinsert ommitted vars for ternary operators (Jo Hasenau)
2016-03-05  2bf2ab4  #72803          [BUGFIX] Denied file extensions still shown in upload forms (Marco Huber)
2016-03-05  77829d6  #74314          [BUGFIX] Allow images for HtmlArea in demo mode (Benni Mack)
2016-03-04  f9b7b92  #73481          [BUGFIX] Only show preview of non-hidden images (Gianluigi Martino)
2016-03-04  c783d0b  #73866          [BUGFIX] Incompatible declaration of PreviewController::initializeView (Andreas Fernandez)
2016-03-04  a5e70de  #28403          [TASK] EXT:form - Optimize preview in page module (Björn Jacob)
2016-03-04  8a433a9  #73032          [BUGFIX] Avoid memory leak during file searches (Alexander Schnitzler)
2016-03-04  96073c1  #54534          [BUGFIX] EXT:form Validation of email (Florian Mast)
2016-03-04  b4f5b61  #72617          [TASK] Use new confirmation dialog for ClickMenu (Frank Naegler)
2016-03-04  7b4e5ce  #70373          [BUGFIX] Adjust UserAgent checks in RTE to detect Edge correctly (Benjamin Kott)
2016-03-04  e76e0d2                  [BUGFIX] Keep selected page active after save &amp; close (Gianluigi Martino)
2016-03-04  51a0325  #72890,#73618   [BUGFIX] Solves PHP warning in FileAllowedTypesValidator (Florian Mast)
2016-03-04  9a76d43  #74177          [TASK] Remove fileinfo as dependency in SystemEnvironment/Check (Timo Schmidt)
2016-03-04  5e41949  #74178          [TASK] Replace confirm in FileList-&gt;linkClipboardHeaderIcon (Frank Naegler)
2016-03-04  63cd513  #72316          [BUGFIX] EXT:form - Fix CHECKBOXGROUP and RADIOGROUP in form wizard (Andreas Häfner)
2016-03-04  0d6b33e  #68392          [BUGFIX] Declare ``items`` for each RTE instance (Florian Busch)
2016-03-04  3a3f01a  #73214          [BUGFIX] Avoid error message on unlimited upload_max_filesize (Andreas Bouche)
2016-03-04  35a32c5  #74005          [TASK] Add json as composer dependency (Tymoteusz Motylewski)
2016-03-04  2289b54  #69346          [FOLLOWUP][TASK] EXT:form - Update and optimize documentation (Björn Jacob)
2016-03-04  bc0b42a  #74164          [TASK] Add backend routes to configuration module (Frank Naegler)
2016-03-04  5c0fcac  #74004          [BUGFIX] Allow overriding of Backend Routes (Benni Mack)
2016-03-04  c370a84  #73743          [TASK] Remove usage of Clipboard-&gt;confirmMsg() (Frank Naegler)
2016-03-04  772ce9d  #71802          [TASK] Change APC cache preset condition (Thorsten Bringewatt)
2016-03-04  a234b89  #73670          [BUGFIX] Check whether contentElementCache for language and colPos is valid (Andreas Fernandez)
2016-03-04  6e855aa  #69346          [TASK] EXT:form - Update and optimize documentation (Björn Jacob)
2016-03-04  c69e2b3  #74122          [BUGFIX] Fix &#039;Transfer selection to clipboard&#039; button (Jan Helke)
2016-03-04  2360c7c  #73004          [BUGFIX] Inline record in Flexform can attach new record (Nicole Cordes)
2016-03-03  1ee866c  #72886          [TASK] Add info about Apache version when using mod_filter (Eric Chavaillaz)
2016-03-03  d403ab5  #72973          [BUGFIX] Do not scroll on top using actions on multipleSideBySide (Andreas Fernandez)
2016-03-02  887111f  #73539          [BUGFIX] Drag&amp;Drop sorting respects AuthMode (ajahn)
2016-03-01  fe40461  #73797          [BUGFIX] Disable &#039;SwitchUser&#039; link if user is already in su mode (Markus Hoelzle)
2016-02-29  9a1fb58  #73484          [BUGFIX] Allow OnlineMedia Renderers to override via Fluid (Benni Mack)
2016-02-29  5967cf2  #73737          [TASK] Replace confirm on delete icon in list module table (Frank Naegler)
2016-02-26  76c1ac8  #73493          [BUGFIX] Improve accessibiity-check of index page in  HMENU &#039;browse&#039; (Markus Hoelzle)
2016-02-26  9ac9ec0  71580           [FOLLOWUP][BUGFIX] Switch-User feature uses wrong user id for logging (Christian Kuhn)
2016-02-26  adf6074  #73703          [BUGFIX] Remove deprecated call in InlineRecordContainer (Frank Naegler)
2016-02-26  5933775  #73587          [BUGFIX] Sys actions: Removed call to deprecated method render() (Michael Oehlhof)
2016-02-26  b48922a  #72508          [BUGFIX] Removed call to render() after getFlashMessageForMissingFile (Michael Oehlhof)
2016-02-26  90f44c5  #71580          [BUGFIX] Switch-User feature uses wrong user id for logging (Oliver Hader)
2016-02-26  423549f  #73685          [BUGFIX] Scheduler: Removed call to deprecated method render() (Michael Oehlhof)
2016-02-26  a7b557d  #73661          [BUGFIX] Module recordlist: Removed call to deprecated method render() (Michael Oehlhof)
2016-02-26  e8cdde3  #73615          [TASK] Use button instead of question mark for CSH in QuickEdit (Daniel Goerz)
2016-02-26  e5c1509  #73090          [BUGFIX] Field pageIdSelector in RTE link popup is visible when enabled (Franz Kugelmann)
2016-02-25  370f6ce  #73657          [BUGFIX] Set selected CSS class on image in RTE (Markus Klein)
2016-02-25  f2be871  #73243          [BUGFIX] Stage buttons shown in frontend without user being repsonsible (Oliver Hader)
2016-02-25  6c509ff  #73662          [BUGFIX] PageLinkHandler: Fix wrong function casing of sL() call (Markus Klein)
2016-02-24  786d6ac  #73558          [BUGFIX] Remove css_styled_content as part of the factory default (Wouter Wolters)
2016-02-24  07faca2  #73564,#73472   [TASK] Check if user have permission to cut records (Gianluigi Martino)
2016-02-24  bcc7344  #73506          [BUGFIX] Use proper URL for file list of returnUrl in file_upload (Benni Mack)
2016-02-24  392c9b2  #73638          [BUGFIX] PageLayoutView: Removed call to deprecated method render() (Michael Oehlhof)
2016-02-23  5236fe1  #72350          [TASK] Clipboard: Use new modal confirmation dialog for &quot;Delete Elements&quot; (Michael Oehlhof)
2016-02-23  0b3c8f6  #73427          [BUGFIX] Scheduler: Removed call to deprecated method render() (Michael Oehlhof)
2016-02-23  39b0d9d  #73464          [BUGFIX] Translate permission labels in DragUploader (Wouter Wolters)
2016-02-23  0578e56  #73636          [TASK] Fix old classnames in extensionmanager (Stephan Großberndt)
2016-02-23  e5c776d  #73624          [BUGFIX] Set correct variable type in Extension model (Wouter Wolters)
2016-02-23  b64b310  #73529          [BUGFIX] Check correctly if showitem key exists in TcaMigration (Wouter Wolters)
2016-02-23  d7efa48                  [TASK] Set TYPO3 version to 7.6.5-dev (TYPO3 Release Team)

Package Signatures

TYPO3 Release Packages (the downloadable tarballs and zip files) as well as Git tags are signed using PGP signatures during the automated release process. Besides that, MD5 and SHA2-256 hashes are being generated for these files. Find more details on verifying signatures and hashes in the infrastructure guide.

Download GPG signed release README.md file

Example of verifying integrity of tar.gz package of current release:

wget --content-disposition https://get.typo3.org/7.6.5/tar.gz
wget --content-disposition https://get.typo3.org/7.6.5/tar.gz.sig
gpg --verify typo3_src-7.6.5.tar.gz.sig typo3_src-7.6.5.tar.gz