TYPO3 8.7.57 ELTS
Release Notes
This version is not supported anymore.
The TYPO3 CMS community supported from 2017-04-04 until 2020-03-31. Extended security & compatibility support (ELTS) expired on 2024-03-31.
Please consider updating to a newer version.
Release Notes for TYPO3 CMS 8.7.57
This document contains information about TYPO3 CMS 8.7.57 which was released on 13.02.2024.
Get TYPO3 8.7.57 nowNews
This release is a combined bug fix and security release.
Find more details in the security bulletins:
- https://typo3.org/security/advisory/typo3-core-sa-2024-001
- https://typo3.org/security/advisory/typo3-core-sa-2024-002
- https://typo3.org/security/advisory/typo3-core-sa-2024-003
- https://typo3.org/security/advisory/typo3-core-sa-2024-004
- https://typo3.org/security/advisory/typo3-core-sa-2024-005
- https://typo3.org/security/advisory/typo3-core-sa-2024-006
Checksums of TYPO3 8.7.57
SHA256
038e6f92d20370a51cced8e79deb45ce675cb64192e15b7a16b64351a399d2ee typo3_src-8.7.57.tar.gz c39430b536e8aaa0b5f227b1c4251c7c3a873d700e1e86058bb65f56373f7261 typo3_src-8.7.57.zip
SHA1
a624042e8b3bfd2410879ee0e02db7c9d4162bd9 typo3_src-8.7.57.tar.gz c5d287c3b7f5d103040d6670ff2a9c2b27ff54f3 typo3_src-8.7.57.zip
MD5
d41d8cd98f00b204e9800998ecf8427e typo3_src-8.7.57.tar.gz d41d8cd98f00b204e9800998ecf8427e typo3_src-8.7.57.zip
Package Signatures
TYPO3 Release Packages (the downloadable tarballs and zip files) as well as Git tags are signed using PGP signatures during the automated release process. Besides that, MD5 and SHA2-256 hashes are being generated for these files. Find more details on verifying signatures and hashes in the infrastructure guide.
Upgrading
The usual upgrading procedure applies. No database updates are necessary. It might be required to clear all caches; the "important actions" section in the TYPO3 Install Tool offers the accordant possibility to do so.
Changes
Here is a list of what was fixed since 8.7.56:
- 2024-02-13 ed735932bd [RELEASE] Release of TYPO3 8.7.57 (thanks to Andreas Kienast)
- 2024-02-13 1cb80abfaa [SECURITY] Prevent RCE via install tool settings (thanks to Benjamin Franzke)
- 2024-02-13 4b816dac6d [SECURITY] Prevent arbitrary access to privileged resources via t3:// (thanks to Benjamin Franzke)
- 2024-02-13 e16e22db55 [SECURITY] Do not disclose encryptionKey via InstallTool (thanks to Benjamin Franzke)
- 2024-02-13 bbe9b3574d [SECURITY] Avoid showing password hashes in backend edit forms (thanks to Oliver Hader)
- 2024-02-13 087f3f6ce9 [!!!][SECURITY] Enforce absolute path checks in FAL local driver (thanks to Oliver Hader)
- 2024-02-13 119a4cd083 [SECURITY] Deny directly modifying file abstraction layer entities (thanks to Oliver Hader)
- 2023-11-21 726e00cfc8 [TASK] Set TYPO3 version to 8.7.57-dev (thanks to Andreas Kienast)