TYPO3 8.7.23

Release Notes

Version 8.7.23

Stay secure and up-to-date with TYPO3 ELTS!

The TYPO3 CMS community supported from 2017-04-04 until 2020-03-31.
Extend your support now until 2024-03-31 to get access to the latest security and compatibility updates for this version.

Learn more about TYPO3 ELTS Browse the TYPO3 ELTS Portal

Release Notes for TYPO3 CMS 8.7.23

This document contains information about TYPO3 CMS 8.7.23 which was released on 22.01.2019.

Get TYPO3 8.7.23 now

Checksums of TYPO3 8.7.23

SHA256

c06e976bc896270bf0c06e30c0e3827b2ef428466166a92035088a7de380da60 typo3_src-8.7.23.tar.gz
0233d4379221a75775222425ff26dd8e157fa255ec711752922f0e13b3a43e51 typo3_src-8.7.23.zip

SHA1

89df4b9b5ba71d98dfd0759d7b2bb79d371a9dd7 typo3_src-8.7.23.tar.gz
b66601c66887c7388104f57349b6f480fc570792 typo3_src-8.7.23.zip

MD5

2267d611bfcce57e08fa2f0170854dec typo3_src-8.7.23.tar.gz
8fc5b726e8fc2fe599dc587f92ed5a87 typo3_src-8.7.23.zip

Package Signatures

TYPO3 Release Packages (the downloadable tarballs and zip files) as well as Git tags are signed using PGP signatures during the automated release process. Besides that, MD5 and SHA2-256 hashes are being generated for these files. Find more details on verifying signatures and hashes in the infrastructure guide.

Download GPG signed release README.md file

Example of verifying integrity of tar.gz package of current release:

wget --content-disposition https://get.typo3.org/8.7.23/tar.gz
wget --content-disposition https://get.typo3.org/8.7.23/tar.gz.sig
gpg --verify typo3_src-8.7.23.tar.gz.sig typo3_src-8.7.23.tar.gz

Upgrading

The usual upgrading procedure applies. No database updates are necessary. It might be required to clear all caches; the "important actions" section in the TYPO3 Install Tool offers the accordant possibility to do so.

Changes

Here is a list of what was fixed since 8.7.22:

  • 2019-01-22 720faa8339 [RELEASE] Release of TYPO3 8.7.23 (thanks to Oliver Hader)
  • 2019-01-22 23393bf853 [TASK] Recompile install.css (thanks to Oliver Hader)
  • 2019-01-22 095ae4ab68 [SECURITY] Extend file deny pattern (thanks to Oliver Hader)
  • 2019-01-22 79528f75e2 [SECURITY] Use a fluid template for the ConfirmationFinisher message (thanks to Ralf Zimmermann)
  • 2019-01-22 2afe72a43d [SECURITY] Raise bootstrap 3.4.0 to fix XSS in JS components (thanks to Benni Mack)
  • 2019-01-22 732c4acfae [SECURITY] XSS issues in Fluid view helpers (thanks to Andreas Wolf)
  • 2019-01-22 5004201ee7 [SECURITY] Backend user privilege escalation for language limitations (thanks to Oliver Hader)
  • 2019-01-22 e4d0cff40a [SECURITY] Avoid creation of backend users without password (thanks to Benni Mack)
  • 2019-01-22 c81cca9e41 [SECURITY] Avoid disclosing loaded extensions (thanks to Oliver Hader)
  • 2019-01-21 1fae04ecdb [TASK] Raise guzzlehttp/psr7 composer dependency (thanks to Oliver Hader)
  • 2019-01-21 5e7476a6a4 [BUGFIX] Harden CommandUtility invocations (thanks to Oliver Hader)
  • 2019-01-19 4b9ca1a941 [TASK] Add .nvmrc file (thanks to Andreas Fernandez)
  • 2019-01-11 4a8a4a9cf5 [BUGFIX] Streamline creating text files in filelist module (thanks to Anja Leichsenring)
  • 2019-01-10 541eac43f2 [TASK] Update copyright year in documentation to 2019 (thanks to Stefanos Karasavvidis)
  • 2019-01-09 00ad549b91 [BUGFIX] Avoid fatal when flushed directory is a symlink (thanks to Helmut Hummel)
  • 2019-01-05 59ec66ef53 [TASK] Stop dangling containers in bamboo (thanks to Christian Kuhn)
  • 2019-01-04 4bd4c8b8dd [BUGFIX] Sql query export to use search_result_labels setting (thanks to lsascha)
  • 2019-01-04 26e03f55f8 [BUGFIX] Allow to add type=0 to typolink syntax (thanks to Benni Mack)
  • 2018-12-23 f5113db66c [BUGFIX] Streamline tree markup (thanks to Andreas Fernandez)
  • 2018-12-22 3d48e44e8e [TASK] Add filter for be_users and be_groups (thanks to Guido Schmechel)
  • 2018-12-20 148b0ee0f5 [TASK] Do not show error when copying a record was successful (thanks to Christoph Lehmann)
  • 2018-12-19 b6472c9db8 [TASK] Revert test change and disable unit tests completely on Travis CI (thanks to Markus Klein)
  • 2018-12-19 392ceedd34 [BUGFIX] Disable extension updates in Composer mode (thanks to Nicole Cordes)
  • 2018-12-18 9f8b1de09d [BUGFIX] Do not try to delete already remove file (thanks to Helmut Hummel)
  • 2018-12-17 c205c57216 [BUGFIX] Mark form as changed after using the image cropper (thanks to Andreas Fernandez)
  • 2018-12-17 6e20e4327c [TASK] Declare compatible with PHP 7.3 (thanks to Mathias Brodala)
  • 2018-12-17 3854a1f8d3 [TASK] Streamline dependencies in package.json (thanks to Benni Mack)
  • 2018-12-17 754452b1cd [BUGFIX] Fix positioning of arrows in Element Browser (thanks to Andreas Fernandez)
  • 2018-12-16 f57da31c7b [TASK] bamboo sends nightly build messages to intercept (thanks to Christian Kuhn)
  • 2018-12-14 ca4d477dbe [BUGFIX] Support DateTimeInterface in DebuggerUtility (thanks to Andreas Wolf)
  • 2018-12-14 5306843a57 [TASK] Set TYPO3 version to 8.7.23-dev (thanks to Oliver Hader)