TYPO3 8.7.48 ELTS

Release Notes

Version 8.7.48 ELTS

This version is not supported anymore.

The TYPO3 CMS community supported from 2017-04-04 until 2020-03-31. Extended security & compatibility support (ELTS) expired on 2024-03-31.

Please consider updating to a newer version.

Release Notes for TYPO3 CMS 8.7.48

This document contains information about TYPO3 CMS 8.7.48 which was released on 12.09.2022.

Get TYPO3 8.7.48 now

Checksums of TYPO3 8.7.48


baf63c5e69394ce778a77b7f1ce9dd3d57d57bb0c7d4e8e4e29b02705a1ce4ac typo3_src-8.7.48.tar.gz
9f88fc0dd14f75cb06f1f99ff0e2130318930c3ba075a7fd5c9f31bf99c68507 typo3_src-8.7.48.zip


3c8fc73fa0d93be2e30a803fc7f8dd4307a485bb typo3_src-8.7.48.tar.gz
75163018bc38497d3925bca6fd5d917908d32aa2 typo3_src-8.7.48.zip


2e09af58605db61086f4240d4f6e9b78 typo3_src-8.7.48.tar.gz
ad89ea432a990df4ef464af7498258c7 typo3_src-8.7.48.zip

Package Signatures

TYPO3 Release Packages (the downloadable tarballs and zip files) as well as Git tags are signed using PGP signatures during the automated release process. Besides that, MD5 and SHA2-256 hashes are being generated for these files. Find more details on verifying signatures and hashes in the infrastructure guide.

Download GPG signed release README.md file

Example of verifying integrity of tar.gz package of current release:

wget --content-disposition https://get.typo3.org/8.7.48/tar.gz
wget --content-disposition https://get.typo3.org/8.7.48/tar.gz.sig
gpg --verify typo3_src-8.7.48.tar.gz.sig typo3_src-8.7.48.tar.gz


The usual upgrading procedure applies. No database updates are necessary. It might be required to clear all caches; the "important actions" section in the TYPO3 Install Tool offers the accordant possibility to do so.


  • 2022-09-13 bed5c9ddd7 [RELEASE] Release of TYPO3 8.7.48 (thanks to Andreas Fernandez)
  • 2022-09-13 4e8dc0b3dd [SECURITY] Upgrade to typo3/html-sanitizer v1.0.7 (thanks to Andreas Fernandez)
  • 2022-09-13 70c3e15766 [SECURITY] Mitigate timing discrepancies during user authentication (thanks to Oliver Hader)
  • 2022-09-13 32704a8dc4 [SECURITY] Mitigate cross-site-scripting in FileDumpController (thanks to Oliver Hader)
  • 2022-09-13 328e0e6925 [BUGFIX] Add missing msclkid parameter to cacheHash excludedParameters (thanks to dsteinborn)
  • 2022-06-22 66ce361de4 [BUGFIX] Update guzzlehttp/guzzle to 6.5.8 (thanks to Andreas Fernandez)
  • 2022-06-20 8b615f99ac [BUGFIX] Avoid invalid type exception in FinisherVariableProvider (thanks to Josua Vogel)
  • 2022-06-14 0f28f321a5 [TASK] Set TYPO3 version to 8.7.48-dev (thanks to Andreas Fernandez)