TYPO3 8.7.17

Release Notes

Version 8.7.17

This version is not supported anymore.

The TYPO3 CMS community supported from 2017-04-04 until 2020-03-31. Extended security & compatibility support (ELTS) expired on 2024-03-31.

Please consider updating to a newer version.

Release Notes for TYPO3 CMS 8.7.17

This document contains information about TYPO3 CMS 8.7.17 which was released on 12.07.2018.

Get TYPO3 8.7.17 now

Checksums of TYPO3 8.7.17


62d3640f75c52a424abe744c2d8ee73c5a01a2d8e7c383c61ca7207e44e22f76 typo3_src-8.7.17.tar.gz
1f4b2a547850dbf0017356d273cd99670358598d0a51142d6761fa2fe11a42ee typo3_src-8.7.17.zip


7cc657da6a24d58338f442f4fad3bd6d2a1c1482 typo3_src-8.7.17.tar.gz
9394ee8a9894711271af0144865d351a6b016fa4 typo3_src-8.7.17.zip


6446ef851c7a831400702eba4bacf685 typo3_src-8.7.17.tar.gz
5b0702d3a3ae8ea4dfbc6e3667118745 typo3_src-8.7.17.zip

Package Signatures

TYPO3 Release Packages (the downloadable tarballs and zip files) as well as Git tags are signed using PGP signatures during the automated release process. Besides that, MD5 and SHA2-256 hashes are being generated for these files. Find more details on verifying signatures and hashes in the infrastructure guide.

Download GPG signed release README.md file

Example of verifying integrity of tar.gz package of current release:

wget --content-disposition https://get.typo3.org/8.7.17/tar.gz
wget --content-disposition https://get.typo3.org/8.7.17/tar.gz.sig
gpg --verify typo3_src-8.7.17.tar.gz.sig typo3_src-8.7.17.tar.gz


The usual upgrading procedure applies. No database updates are necessary. It might be required to clear all caches; the "important actions" section in the TYPO3 Install Tool offers the accordant possibility to do so.


Here is a list of what was fixed since 8.7.16:

  • 2018-07-12 06256af9f2 [RELEASE] Release of TYPO3 8.7.17 (thanks to Oliver Hader)
  • 2018-07-12 f9dd5ec9b7 [TASK] Remove post-autoload-dump section from composer.json (thanks to Anja)
  • 2018-07-12 81345d5653 [BUGFIX] Fix test isolation and pre-requisites (thanks to Susanne Moog)
  • 2018-07-12 3d68382489 [TASK] Fix CGL issues (thanks to Oliver Hader)
  • 2018-07-12 c76d46f195 [SECURITY][TASK] Remove support for native PHP yaml extension (thanks to Oliver Hader)
  • 2018-07-12 bca913e9d8 [SECURITY] Filter disallowed properties in form editor (thanks to Ralf Zimmermann)
  • 2018-07-12 71ff71477a [!!!][SECURITY] Deny direct FAL commands for form definitions (thanks to Susanne Moog)
  • 2018-07-12 0b0ba0f827 [SECURITY] Explicitly deny object deserialization (thanks to Oliver Hader)
  • 2018-07-12 844c6f49f7 [SECURITY] Mitigate phar stream wrapper (thanks to Christian Kuhn)
  • 2018-07-12 d7d1de4396 [SECURITY] Introduce PHP stream wrapper for phar:// protocol (thanks to Oliver Hader)
  • 2018-07-12 cbaf75ce33 [SECURITY] Deny authentication bypass using blowfish/md5 encryption (thanks to Oliver Hader)
  • 2018-07-11 07d9fe7be3 [BUGFIX] Support fragment/section for record links (thanks to Mathias Brodala)
  • 2018-07-10 7ccb4a5677 [BUGFIX] Repair relative path resolvement in ResourceCompressor (thanks to Pascal Rinker)
  • 2018-07-09 b87432f4dc [BUGFIX] Scheduler: Show correct description for ipAnonymization-task (thanks to Stefan Neufeind)
  • 2018-07-07 a8d51b4ac7 [BUGFIX] Update complete database after extension installation (thanks to Nicole Cordes)
  • 2018-07-06 085662b30d [BUGFIX] Check for exceptions instead of number of affected rows (thanks to Georg Ringer)
  • 2018-07-06 ab410c57fb [BUGFIX] Convert date objects to string in SaveToDatabase finisher (thanks to Ralf Zimmermann)
  • 2018-07-06 770b3a564b [BUGFIX] Use correct HTTP method in GeneralUtility::getUrl (thanks to Markus Klein)
  • 2018-07-06 28fd8ffe58 [BUGFIX] Use unknown OS icon instead of Windows as fallback (thanks to Jan Stockfisch)
  • 2018-07-06 e04913ff21 [TASK] Add various Composer scripts (thanks to Mathias Brodala)
  • 2018-07-06 09856b40f1 [TASK] Use secure deserialization in extension manager (thanks to Oliver Hader)
  • 2018-07-05 e742348250 [BUGFIX] Fix "orderBy" in DatabaseQueryProcessor example (thanks to Daniel Siepmann)
  • 2018-07-05 73033ece15 [BUGFIX] Fixing login logo height in IE (thanks to Roberto Presedo)
  • 2018-07-04 e14effc3f2 [TASK] Improve custom CE explanation in FSC (thanks to Mathias Brodala)
  • 2018-07-03 1a587eb150 [BUGFIX] Ensure extension icon exists before calling ImageInfo (thanks to Nicole Cordes)
  • 2018-07-02 95ec21cbc8 [TASK] Synchronize .rst files between core versions (thanks to Christian Kuhn)
  • 2018-07-02 5ec9772e85 [BUGFIX] Display documentation changelog files with same issue number (thanks to Anja)
  • 2018-07-02 e9f40a7630 [BUGFIX] Handle missing repository mirrors in Languages module (thanks to Mathias Brodala)
  • 2018-07-02 0135224f15 [BUGFIX] Make ckeditor link browser not drop CSS-Classes if editing again (thanks to Frédéric Lebel)
  • 2018-07-02 bb8a606737 [BUGFIX] Remove unused Doctrine restriction (thanks to Benni Mack)
  • 2018-06-30 c2bd081993 [BUGFIX] Try to translate given help text of select items (thanks to Mathias Brodala)
  • 2018-06-30 485f289159 [TASK] Streamline FAL pre-emit signals for createFile and setContent (thanks to Oliver Hader)
  • 2018-06-30 8d214f3b74 [TASK] Reduce logic in render methods of YouTube and Vimeo Renderer (thanks to Daniel Goerz)
  • 2018-06-29 c06a12c44b [BUGFIX] Add allow="autoplay; fullscreen" to YouTube/Vimeo iframes (thanks to Frans Saris)
  • 2018-06-29 229652358b [BUGFIX] Adjust Headline of documentation file (thanks to Anja)
  • 2018-06-28 6a79129b9c [BUGFIX] Separate icon and text in inline record control buttons (thanks to Mathias Brodala)
  • 2018-06-28 4e8c3f6829 [TASK] Do not cache results of LiveSearch (thanks to Andreas Fernandez)
  • 2018-06-27 5d0fdb37c2 [TASK] Drop unused code in SilentConfigurationUpgradeService (thanks to Mathias Brodala)
  • 2018-06-27 ad66e36a4a [BUGFIX] Re-Init CKEditor after re-sorting of inline records (thanks to Frank Naegler)
  • 2018-06-27 a3395ece18 [TASK] CKEditor RTE: Add button to insert soft hyphen (thanks to Josef Glatz)
  • 2018-06-26 1f2e251aa2 [BUGFIX] Add index to pid column in sys_file_metadata (thanks to Frédéric Lebel)
  • 2018-06-26 3686e566bd [BUGFIX] Fix override handling for element specific field values (thanks to Frank Naegler)
  • 2018-06-26 142863cdb3 [BUGFIX] RTE: Disable autolink functionality in source-mode (thanks to Josef Glatz)
  • 2018-06-25 791f62bc99 [BUGFIX] CKEditor: show selectAll button in preset "full" (thanks to Josef Glatz)
  • 2018-06-25 8833bf90cd [BUGFIX] Better handling of requests in ExternalLinktype (thanks to Sybille Peters)
  • 2018-06-25 c78e9b42b4 [BUGFIX] Use unique keys for includeJSLibs and addJsFooterLibrary (thanks to Georg Ringer)
  • 2018-06-24 c2d1150c96 [BUGFIX] Do not link l18n_cfg restricted pages (thanks to Nicole Cordes)
  • 2018-06-24 c7f493079f [TASK] Avoid thousands of removeDotsFromTs in TemplatePaths (thanks to Claus Due)
  • 2018-06-23 2c2a695d04 [BUGFIX] Fetch Vimeo preview in higher quality (thanks to Frans Saris)
  • 2018-06-23 255cc86ddf [BUGFIX] Fix collection of allowed pages in suggest receiver (thanks to Alexander Stehlik)
  • 2018-06-23 7b0f18eb20 [BUGFIX] Remove reset of GFX/processor_effects to -1 (thanks to Marc Willmann)
  • 2018-06-23 e8cb266782 [BUGFIX] Remove mediace extraction update (thanks to Alexander Stehlik)
  • 2018-06-23 92ee4e4f4e [BUGFIX] Remove Byte Order Mark from TypoScript includes (thanks to Andreas Fernandez)
  • 2018-06-22 6f0ba6f0a2 [BUGFIX] Fix exception for folder move/copy between storages (thanks to Mathias Brodala)
  • 2018-06-22 f2899f6a15 [TASK] Add .ddev to ignore (thanks to Harry)
  • 2018-06-22 d82c549df5 [TASK] Show infobox for records which are set to readOnly (thanks to Mathias Brodala)
  • 2018-06-22 5e97e5d3cc [TASK] Allow preload Tag in VideoTagRenderer (thanks to Guido Schmechel)
  • 2018-06-22 32575ea2bd [TASK] Add modestbranding to YouTubeRenderer (thanks to Guido Schmechel)
  • 2018-06-21 733eaace7c [TASK] Improve wording of upgrade wizards in Install Tool (thanks to Nicole Cordes)
  • 2018-06-21 40a5ff476d [BUGFIX] Avoid prev/next arrows if only 1 system news is shown (thanks to Georg Ringer)
  • 2018-06-18 eb79317167 [BUGFIX] Fix wrong strlen check in DoubleMetaPhoneUtility (thanks to Wouter Wolters)
  • 2018-06-15 e2e07114e5 [BUGFIX] Do not use named parameter for list of orphan records ids (thanks to Sascha Egerer)
  • 2018-06-13 ce6766a3f1 [BUGFIX] Fix namespace of validation error in form (thanks to Justus Moroni)
  • 2018-06-12 7fb2443f94 [TASK] Repair failing acceptance test (thanks to Anja Leichsenring)
  • 2018-06-12 b9dabe2f70 [BUGFIX] Fix comments in various places (thanks to Benni Mack)
  • 2018-06-11 9c3fa08b7f [TASK] Set TYPO3 version to 8.7.17-dev (thanks to Oliver Hader)