TYPO3 8.7.57 ELTS

Release Notes

Version 8.7.57 ELTS

This version is not supported anymore.

The TYPO3 CMS community supported from 2017-04-04 until 2020-03-31. Extended security & compatibility support (ELTS) expired on 2024-03-31.

Please consider updating to a newer version.

Release Notes for TYPO3 CMS 8.7.57

This document contains information about TYPO3 CMS 8.7.57 which was released on 13.02.2024.

Get TYPO3 8.7.57 now

Checksums of TYPO3 8.7.57


038e6f92d20370a51cced8e79deb45ce675cb64192e15b7a16b64351a399d2ee typo3_src-8.7.57.tar.gz
c39430b536e8aaa0b5f227b1c4251c7c3a873d700e1e86058bb65f56373f7261 typo3_src-8.7.57.zip


a624042e8b3bfd2410879ee0e02db7c9d4162bd9 typo3_src-8.7.57.tar.gz
c5d287c3b7f5d103040d6670ff2a9c2b27ff54f3 typo3_src-8.7.57.zip


d41d8cd98f00b204e9800998ecf8427e typo3_src-8.7.57.tar.gz
d41d8cd98f00b204e9800998ecf8427e typo3_src-8.7.57.zip

Package Signatures

TYPO3 Release Packages (the downloadable tarballs and zip files) as well as Git tags are signed using PGP signatures during the automated release process. Besides that, MD5 and SHA2-256 hashes are being generated for these files. Find more details on verifying signatures and hashes in the infrastructure guide.

Download GPG signed release README.md file

Example of verifying integrity of tar.gz package of current release:

wget --content-disposition https://get.typo3.org/8.7.57/tar.gz
wget --content-disposition https://get.typo3.org/8.7.57/tar.gz.sig
gpg --verify typo3_src-8.7.57.tar.gz.sig typo3_src-8.7.57.tar.gz


The usual upgrading procedure applies. No database updates are necessary. It might be required to clear all caches; the "important actions" section in the TYPO3 Install Tool offers the accordant possibility to do so.


Here is a list of what was fixed since 8.7.56:

  • 2024-02-13 ed735932bd [RELEASE] Release of TYPO3 8.7.57 (thanks to Andreas Kienast)
  • 2024-02-13 1cb80abfaa [SECURITY] Prevent RCE via install tool settings (thanks to Benjamin Franzke)
  • 2024-02-13 4b816dac6d [SECURITY] Prevent arbitrary access to privileged resources via t3:// (thanks to Benjamin Franzke)
  • 2024-02-13 e16e22db55 [SECURITY] Do not disclose encryptionKey via InstallTool (thanks to Benjamin Franzke)
  • 2024-02-13 bbe9b3574d [SECURITY] Avoid showing password hashes in backend edit forms (thanks to Oliver Hader)
  • 2024-02-13 087f3f6ce9 [!!!][SECURITY] Enforce absolute path checks in FAL local driver (thanks to Oliver Hader)
  • 2024-02-13 119a4cd083 [SECURITY] Deny directly modifying file abstraction layer entities (thanks to Oliver Hader)
  • 2023-11-21 726e00cfc8 [TASK] Set TYPO3 version to 8.7.57-dev (thanks to Andreas Kienast)