TYPO3 8.7.21

Release Notes

Version 8.7.21

This version is not supported anymore.

The TYPO3 CMS community supported from 2017-04-04 until 2020-03-31. Extended security & compatibility support (ELTS) expired on 2024-03-31.

Please consider updating to a newer version.

Release Notes for TYPO3 CMS 8.7.21

This document contains information about TYPO3 CMS 8.7.21 which was released on 11.12.2018.

Get TYPO3 8.7.21 now

Checksums of TYPO3 8.7.21


919adb27ba9d01c423a13d1e95b4392c34619cae73c4867f5efa743b662c5b8e typo3_src-8.7.21.tar.gz
8f065d8941eb7f0915338b026d67c7b2278315e0e63e024ec825407e1867adf9 typo3_src-8.7.21.zip


6895329792b8757632b56185ed547bcfe6caf9c7 typo3_src-8.7.21.tar.gz
a1977a52a56b95ec11f5a4e3f1b2471ed6cbf73d typo3_src-8.7.21.zip


ec426504ac1096a42cb4b87b0a281a50 typo3_src-8.7.21.tar.gz
30c3b1dadb78606ddd0ea0a041ea5bf1 typo3_src-8.7.21.zip

Package Signatures

TYPO3 Release Packages (the downloadable tarballs and zip files) as well as Git tags are signed using PGP signatures during the automated release process. Besides that, MD5 and SHA2-256 hashes are being generated for these files. Find more details on verifying signatures and hashes in the infrastructure guide.

Download GPG signed release README.md file

Example of verifying integrity of tar.gz package of current release:

wget --content-disposition https://get.typo3.org/8.7.21/tar.gz
wget --content-disposition https://get.typo3.org/8.7.21/tar.gz.sig
gpg --verify typo3_src-8.7.21.tar.gz.sig typo3_src-8.7.21.tar.gz


The usual upgrading procedure applies. No database updates are necessary. It might be required to clear all caches; the "important actions" section in the TYPO3 Install Tool offers the accordant possibility to do so.


Here is a list of what was fixed since 8.7.20:

  • 2018-12-11 cccc7a31e4 [RELEASE] Release of TYPO3 8.7.21 (thanks to Oliver Hader)
  • 2018-12-11 6c5594edaf [BUGFIX] Adjust modal window processing (thanks to Oliver Hader)
  • 2018-12-11 dec3c10f80 [TASK] Skip IPv6 related dns resolution tests (thanks to Markus Klein)
  • 2018-12-11 05011d1248 [SECURITY] Add feature toggle to disable record registration (thanks to Benni Mack)
  • 2018-12-11 054799caf5 [SECURITY] Avoid DoS in Online Media Helper (thanks to Oliver Hader)
  • 2018-12-11 fab0cbc970 [SECURITY] Remove TYPO3 version from installer (thanks to Benni Mack)
  • 2018-12-11 a5359491e3 [SECURITY] Make InstallTool session cookie HTTP-only (thanks to Oliver Hader)
  • 2018-12-11 e4143195e1 [SECURITY] Prevent XSS with fe_users data in felogin/TSFE (thanks to Benni Mack)
  • 2018-12-11 c35646c3f7 [SECURITY] Prevent XSS in modal component (thanks to Frank Naegler)
  • 2018-12-11 c917493780 [SECURITY] Properly escape videoId for YouTube/Vimeo (thanks to Susanne Moog)
  • 2018-12-11 4d6833a617 [SECURITY] Update library CKEditor to 4.11.1 (thanks to Benni Mack)
  • 2018-12-10 f74a1521c6 [BUGFIX] Backport essential features into TypoLinkViewHelper classes (thanks to Andreas Fernandez)
  • 2018-12-08 6630b27de3 [TASK] bamboo 8.7 nightly supports paches on-top (thanks to Christian Kuhn)
  • 2018-12-08 3913cd2751 [TASK] Simplify bamboo variable to label handling (thanks to Christian Kuhn)
  • 2018-12-08 43693bca13 [BUGFIX] Simplify test setup to avoid double exception codes (thanks to Anja Leichsenring)
  • 2018-12-07 9abcbc6d53 [BUGFIX] Prevent double pointer parameter in record list (thanks to Vladimir Falcon Piva)
  • 2018-12-07 539a8be0c7 [BUGFIX] Set FE/loginSecurityLevel to normal for no ext:rsaauth loaded (thanks to Florian Peters)
  • 2018-12-07 3d841b8017 [BUGFIX] Mark changes in selectMultipleSideBySide (thanks to Andreas Fernandez)
  • 2018-12-07 1efebf22f6 [BUGFIX] Send payload of image cropping wizard via POST (thanks to Andreas Fernandez)
  • 2018-12-07 5258529318 [BUGFIX] Add missing translation value for Modals (thanks to Anja Leichsenring)
  • 2018-12-07 97c602e27c [BUGFIX] Fix return type annotation in ResourceStorage::sanitizeFileName() (thanks to Andreas Fernandez)
  • 2018-12-06 f2be991ba6 [BUGFIX] Upgrade linkhandler syntax to new link syntax (thanks to Johannes Kasberger)
  • 2018-12-05 e3a786d6e5 [BUGFIX] Get only valid template records in backend -> Template -> PID 0 (thanks to Ioulia Kondratovitch)
  • 2018-12-04 7e83f87f66 [BUGFIX] Remove expired cache_treelist entries during runtime (thanks to Alexander Schnitzler)
  • 2018-12-04 b612265313 [BUGFIX] Add getter for tsfe->pageCacheTags (thanks to Benni Mack)
  • 2018-12-04 084bb3deb7 [TASK] Log a warning if fluid-based preview template couldn't be rendered (thanks to Josef Glatz)
  • 2018-12-02 0ba6947813 [BUGFIX] Rename invalid file name of RST (thanks to Benni Mack)
  • 2018-11-29 f9c6e31d91 [BUGFIX] Make meta data editable for non-writable storages (thanks to Nicole Cordes)
  • 2018-11-28 9473577235 [TASK] Update bamboo to gerrit notification url (thanks to Christian Kuhn)
  • 2018-11-28 0117f1828f [BUGFIX] Allow <s> tag in RTE processing in CSS styled content too (thanks to Jigal van Hemert)
  • 2018-11-28 9ab6de105a [BUGFIX] Allow <s> tag in RTE processing (thanks to Andreas Fernandez)
  • 2018-11-27 bc84742756 [BUGFIX] Drop GROUP BY clause in Info > PageTS Config (thanks to Andreas Fernandez)
  • 2018-11-26 f64e7aef58 [BUGFIX] Enlarge scheduler object DB field (thanks to Benni Mack)
  • 2018-11-20 3213f85630 [BUGFIX] Fix outdated link in docs (thanks to Philipp Kitzberger)
  • 2018-11-19 009d1ac029 [BUGFIX] Strip tags only from strings in ArrayUtility::stripTagsFromValuesRecursive (thanks to Wolfgang Klinger)
  • 2018-11-19 582ad60f52 [TASK] Check number of file extensions (thanks to Benni Mack)
  • 2018-11-19 38c4a24641 [TASK] Add searchFields in TCA for sys_news, sys_action and sys_note (thanks to Wolfgang Klinger)
  • 2018-11-19 070c50676c [BUGFIX] Cast file resource pointer in UploadFileReferenceConverter (thanks to Georg Ringer)
  • 2018-11-16 d7dc71685b [BUGFIX] Select proper records in DBAL workspace restrictions (thanks to Benni Mack)
  • 2018-11-14 9ff37c4305 [BUGFIX] Check Tsconfig in page module for value of content element (thanks to Georg Ringer)
  • 2018-11-14 0f4b423118 [BUGFIX] Show frontend user image migration wizard again (thanks to Markus Klein)
  • 2018-11-08 885334158b [TASK] Remove leftovers of "options.uploadFieldsInTopOfEB" (thanks to Georg Ringer)
  • 2018-11-08 c22409a1a2 [BUGFIX] Ignore provided pages for sitemap menu (thanks to Georg Ringer)
  • 2018-11-06 0e19f1dec6 [BUGFIX] Hide internal prefix "cat:" in tags of upgrade docs (thanks to Georg Ringer)
  • 2018-11-05 4c108f0f85 [BUGFIX] Fix isMissing called on Null error (thanks to Bernhard Sirlinger)
  • 2018-11-05 5ff51a4778 [TASK] Changed label for page_tree_stop (thanks to Steffen Dietrich)
  • 2018-11-02 1e462fbf8f [BUGFIX] Keep existing validation errors for recursive domain relations (thanks to Markus Klösges)
  • 2018-11-02 61327163d0 [BUGFIX] Fix translated file relation with sql_mode=ONLY_FULL_GROUP_BY (thanks to Mathias Brodala)
  • 2018-11-02 d16606b363 [BUGFIX] Provide effectivePid for flexforms segment (thanks to Patrick Lenk)
  • 2018-10-31 1db130fbf9 [BUGFIX] Adding 3 to "TYPO" (thanks to Mathias Brodala)
  • 2018-10-31 64fb715e56 [TASK] Add PHP 7.3 to bamboo core v8 testing (thanks to Christian Kuhn)
  • 2018-10-30 50a1bf7c43 [BUGFIX] Execute scheduler tasks ordered by next execution time (thanks to Sascha Egerer)
  • 2018-10-30 ec9ee877be [BUGFIX] Make the "Stop preview" link clickable when previewing a page (workspaces) (thanks to Guillaume Germain)
  • 2018-10-30 a1515e51ce [TASK] Run functional tests without xdebug on bamboo (thanks to Christian Kuhn)
  • 2018-10-30 d9927e1107 [BUGFIX] Show correct namespace in example block of CommaSeparatedValueProcessor (thanks to Joerg Boesche)
  • 2018-10-30 08aa2e6a1c [BUGFIX] Update karma (thanks to Andreas Fernandez)
  • 2018-10-30 6df1d324a8 [TASK] Test fully built css in bamboo (thanks to Christian Kuhn)
  • 2018-10-30 67701d9652 [TASK] Set TYPO3 version to 8.7.21-dev (thanks to Oliver Hader)