Release Notes for TYPO3 CMS 8.7.38

This document contains information about TYPO3 CMS 8.7.38 which was released on 17.11.2020.

Get TYPO3 8.7.38 now

News

This release is a combined bug fix and security release.

Find more details in the security bulletins

• https://typo3.org/security/advisory/typo3-core-sa-2020-009
• https://typo3.org/security/advisory/typo3-core-sa-2020-010
• https://typo3.org/security/advisory/typo3-core-sa-2020-011
• https://typo3.org/security/advisory/typo3-psa-2020-003

Many thanks to Marketing Factory Consulting GmbH for their generous sponsorship allowing a bugfix in the Reference Index in this release.

Checksums of TYPO3 8.7.38

SHA256

e0b4cf9e7e76e19028caa3a814e55c82625740d3d56c28db6ab5440d7e156ae6 typo3_src-8.7.38.tar.gz
00473875910046f16068a3b948b7749e1adab814e38e2357016a2d8dbe73df71 typo3_src-8.7.38.zip

SHA1

4393f1e64b1ae19f067905d115ade608b1565509 typo3_src-8.7.38.tar.gz
f76d55b7e7ee83b8295cd99d7ee7c2fa0e962b72 typo3_src-8.7.38.zip

MD5

cb648040b2fda6ec28da1d2985da0655 typo3_src-8.7.38.tar.gz
83fade0a74b8eaafe4d2643b565e46e0 typo3_src-8.7.38.zip

Package Signatures

TYPO3 Release Packages (the downloadable tarballs and zip files) as well as Git tags are signed using PGP signatures during the automated release process. Besides that, MD5 and SHA2-256 hashes are being generated for these files. Find more details on verifying signatures and hashes in the infrastructure guide.

Download GPG signed release README.md file

Example of verifying integrity of tar.gz package of current release:

wget --content-disposition https://get.typo3.org/8.7.38/tar.gz
wget --content-disposition https://get.typo3.org/8.7.38/tar.gz.sig
gpg --verify typo3_src-8.7.38.tar.gz.sig typo3_src-8.7.38.tar.gz

Upgrading

The usual upgrading procedure applies. No database updates are necessary. It might be required to clear all caches; the "important actions" section in the TYPO3 Install Tool offers the accordant possibility to do so.

Changes