TYPO3 8.7.38 ELTS

Release Notes

Version 8.7.38 ELTS

This version is not supported anymore.

The TYPO3 CMS community supported from 2017-04-04 until 2020-03-31. Extended security & compatibility support (ELTS) expired on 2024-03-31.

Please consider updating to a newer version.

Release Notes for TYPO3 CMS 8.7.38

This document contains information about TYPO3 CMS 8.7.38 which was released on 17.11.2020.

Get TYPO3 8.7.38 now


This release is a combined bug fix and security release.

Find more details in the security bulletins

Many thanks to Marketing Factory Consulting GmbH for their generous sponsorship allowing a bugfix in the Reference Index in this release.

Checksums of TYPO3 8.7.38


e0b4cf9e7e76e19028caa3a814e55c82625740d3d56c28db6ab5440d7e156ae6 typo3_src-8.7.38.tar.gz
00473875910046f16068a3b948b7749e1adab814e38e2357016a2d8dbe73df71 typo3_src-8.7.38.zip


4393f1e64b1ae19f067905d115ade608b1565509 typo3_src-8.7.38.tar.gz
f76d55b7e7ee83b8295cd99d7ee7c2fa0e962b72 typo3_src-8.7.38.zip


cb648040b2fda6ec28da1d2985da0655 typo3_src-8.7.38.tar.gz
83fade0a74b8eaafe4d2643b565e46e0 typo3_src-8.7.38.zip

Package Signatures

TYPO3 Release Packages (the downloadable tarballs and zip files) as well as Git tags are signed using PGP signatures during the automated release process. Besides that, MD5 and SHA2-256 hashes are being generated for these files. Find more details on verifying signatures and hashes in the infrastructure guide.

Download GPG signed release README.md file

Example of verifying integrity of tar.gz package of current release:

wget --content-disposition https://get.typo3.org/8.7.38/tar.gz
wget --content-disposition https://get.typo3.org/8.7.38/tar.gz.sig
gpg --verify typo3_src-8.7.38.tar.gz.sig typo3_src-8.7.38.tar.gz


The usual upgrading procedure applies. No database updates are necessary. It might be required to clear all caches; the "important actions" section in the TYPO3 Install Tool offers the accordant possibility to do so.


  • 2020-11-17 4883e8ebe6 [RELEASE] Release of TYPO3 8.7.38 (thanks to Andreas Fernandez)
  • 2020-11-17 19ebe20c2f [SECURITY] Protect persisted session IDs from being used directly (thanks to Oliver Hader)
  • 2020-11-17 4c1082ac18 [SECURITY] Encode passed arguments in Fluid view helpers (thanks to Andreas Fernandez)
  • 2020-11-17 9596680d53 [BUGFIX] Update typo3fluid/fluid to v2.6.10 (thanks to Andreas Fernandez)
  • 2020-11-17 757c1a2ad2 [TASK] Update friendsofphp/php-cs-fixer to 2.16.4 (thanks to Andreas Fernandez)
  • 2020-11-12 9832f602ea [TASK] Upgrade typo3/phar-stream-wrapper to v3.1.6 (thanks to Alexander Schnitzler)
  • 2020-11-12 18dff72ace [TASK] Support installation via Composer 2 (thanks to Andreas Fernandez)
  • 2020-11-09 1cb18f58d8 [BUGFIX] Do not use named parameter for list of ids in plain data resolver (thanks to Alexander Schnitzler)
  • 2020-11-02 f72a755f22 [TASK] Update build plans (thanks to Andreas Fernandez)
  • 2020-09-08 5a64de95d3 [TASK] Set TYPO3 version to 8.7.38-dev (thanks to Andreas Fernandez)