TYPO3 8.7.49 ELTS

Release Notes

Version 8.7.49 ELTS

This version is not supported anymore.

The TYPO3 CMS community supported from 2017-04-04 until 2020-03-31. Extended security & compatibility support (ELTS) expired on 2024-03-31.

Please consider updating to a newer version.

Release Notes for TYPO3 CMS 8.7.49

This document contains information about TYPO3 CMS 8.7.49 which was released on 13.12.2022.

Get TYPO3 8.7.49 now

Checksums of TYPO3 8.7.49


c95b8031e0ef8393abd3267fd11e17bca027174e643f735f1406321cb8f230b4 typo3_src-8.7.49.tar.gz
969b7eeb978b985e023d5396b7c3eac1a748b06f608bdb1bf566a09560ea1457 typo3_src-8.7.49.zip


a5a041689dad10d3002af56dea712713fa7ec218 typo3_src-8.7.49.tar.gz
e41ac1038f7657de9974aa4a1cf56059ed9e37ea typo3_src-8.7.49.zip


fdbfb29293ee179fba18e13905cd7f34 typo3_src-8.7.49.tar.gz
d8aadf0a3023d3c164845ddcdc19d5a4 typo3_src-8.7.49.zip

Package Signatures

TYPO3 Release Packages (the downloadable tarballs and zip files) as well as Git tags are signed using PGP signatures during the automated release process. Besides that, MD5 and SHA2-256 hashes are being generated for these files. Find more details on verifying signatures and hashes in the infrastructure guide.

Download GPG signed release README.md file

Example of verifying integrity of tar.gz package of current release:

wget --content-disposition https://get.typo3.org/8.7.49/tar.gz
wget --content-disposition https://get.typo3.org/8.7.49/tar.gz.sig
gpg --verify typo3_src-8.7.49.tar.gz.sig typo3_src-8.7.49.tar.gz


The usual upgrading procedure applies. No database updates are necessary. It might be required to clear all caches; the "important actions" section in the TYPO3 Install Tool offers the accordant possibility to do so.


  • 2022-12-13 ef3453c7e2 [RELEASE] Release of TYPO3 8.7.49 (thanks to Andreas Fernandez)
  • 2022-12-13 a894cf3839 [!!!][SECURITY] Upgrade to typo3/html-sanitizer v1.5.0 (thanks to Andreas Fernandez)
  • 2022-12-13 6171fd987d [SECURITY] Prohibit TypoScript in form yaml files (thanks to waldhacker)
  • 2022-12-13 798fa0760a [SECURITY] Use signed storage PID during frontend authentication (thanks to Oliver Hader)
  • 2022-12-13 6a3ab1fcd8 [TASK] Add HTTP host header injection check to reports module (thanks to Oliver Hader)
  • 2022-12-12 c03536673a [BUGFIX] Cover multi-value properties in form editor with HMAC (thanks to Oliver Hader)
  • 2022-12-12 82c0cc8fcd [BUGFIX] Fix CGL checks on GitHub Actions (thanks to Andreas Fernandez)
  • 2022-12-07 43b4767d66 [TASK] Update GitHub action plans (thanks to Andreas Fernandez)
  • 2022-09-13 acf3a75ab4 [TASK] Set TYPO3 version to 8.7.49-dev (thanks to Andreas Fernandez)