TYPO3 9.5.14

Release Notes

Version 9.5.14

Stay secure and up-to-date with TYPO3 ELTS!

The TYPO3 CMS community supported from 2018-10-02 until 2021-09-30.
Extend your support now until 2024-09-30 to get access to the latest security and compatibility updates for this version.

Learn more about TYPO3 ELTS Browse the TYPO3 ELTS Portal

Release Notes for TYPO3 CMS 9.5.14

This document contains information about TYPO3 CMS 9.5.14 which was released on 17.02.2020.

Get TYPO3 9.5.14 now


This version is a bugfix and maintenance release and contains some important bugfixes:

Support for Same Site Cookies

Read about SameSite Cookies on https://web.dev/samesite-cookies-explained/.

All cookies sent by TYPO3 requests now support the SameSite flag, which protects the users' privacy. For Frontend sessions the cookies are set to "SameSite=Lax" where as all other cookies such as Backend sessions, Install tool sessions and workspace cookies are set to "SameSite=Strict". It is possible to configure the SameSite flag for Frontend sessions and Backend sessions to be either "Strict", "Lax" or "None", see our ChangeLog documentation for configuration options.

Support for MountPoints in Site Handling

MountPoints handling based on Site Handling is now supported natively, while some restrictions with multiple MountPoints with the same path ("slug") still apply.

Routing Improvements

TYPO3's Route Enhancers now support "optional defaults" and correctly evaluate "default" and "requirements" options, similar to Symfony's configuration options.

Read TYPO3 9.5.14 Release News

Checksums of TYPO3 9.5.14


9487ce70160037664c3a67333b840cae86fd5093198d18dfdd29e03e75a01858 typo3_src-9.5.14.tar.gz
dc478351ea1c9e0f9f3b82a1343a0938a6c4a35578dc67a2c06c4c10a0c3d0c2 typo3_src-9.5.14.zip


b604121ede9cf3ab641051a7676753c111e543df typo3_src-9.5.14.tar.gz
3b8831a5b7902b135c2ea59d4d443589f2ad2af8 typo3_src-9.5.14.zip


3244bb91289da9feb59453441d182842 typo3_src-9.5.14.tar.gz
b7c8da43d8f6fa8a09208066a8cf0d0a typo3_src-9.5.14.zip

Package Signatures

TYPO3 Release Packages (the downloadable tarballs and zip files) as well as Git tags are signed using PGP signatures during the automated release process. Besides that, MD5 and SHA2-256 hashes are being generated for these files. Find more details on verifying signatures and hashes in the infrastructure guide.

Download GPG signed release README.md file

Example of verifying integrity of tar.gz package of current release:

wget --content-disposition https://get.typo3.org/9.5.14/tar.gz
wget --content-disposition https://get.typo3.org/9.5.14/tar.gz.sig
gpg --verify typo3_src-9.5.14.tar.gz.sig typo3_src-9.5.14.tar.gz


The usual upgrading procedure applies. No database updates are necessary. It might be required to clear all caches; the "important actions" section in the TYPO3 Install Tool offers the accordant possibility to do so.


Here is a list of what was fixed since 9.5.13:

  • 2020-02-18 4398e8df57 [RELEASE] Release of TYPO3 9.5.14 (thanks to Benni Mack)
  • 2020-02-18 f0a9b4001d [BUGFIX] Ignore quotes in tag attribute value decoding (thanks to Nikita Hovratov)
  • 2020-02-18 4ad70755e3 [BUGFIX] Show sys_note of hidden or deleted author (thanks to Nikita Hovratov)
  • 2020-02-18 2ee19049d1 [BUGFIX] Set parent uid in newly created IRRE child record (thanks to Chris Müller)
  • 2020-02-17 55799d7bf7 [BUGFIX] Use single instance of DocumentTypeExclusionRestriction (thanks to Manuel Selbach)
  • 2020-02-17 b7fe23a035 [BUGFIX] Set correct PID for file references on new pages (thanks to ℳichiel ℛoos)
  • 2020-02-17 a909d5dfbf [TASK] Access VH VariableContainer through RenderingContext (thanks to Claus Due)
  • 2020-02-17 10b5e6e9e5 [BUGFIX] Respect form element instance for validators (thanks to Ralf Zimmermann)
  • 2020-02-17 3beda3e1c9 [BUGFIX] Replace IP address in login error log mails (thanks to Georg Ringer)
  • 2020-02-17 f8f87f64c8 [TASK] Review changelog files for release 9.5.14 (thanks to Anja Leichsenring)
  • 2020-02-16 a0ef1e7151 [DOCS] Optimize scheduler documentation (thanks to Sybille Peters)
  • 2020-02-16 2f415eae3d [FEATURE] Implement SameSite option for TYPO3 cookies (thanks to Benni Mack)
  • 2020-02-16 4578519a9d [BUGFIX] Use multibyte method in CodeCompletionController (thanks to Georg Ringer)
  • 2020-02-15 d019a5896e [BUGFIX] Make user avatar buttons accessible via keyboard (thanks to Elias Häußler)
  • 2020-02-15 cf88a5a73f [BUGFIX] Allow CSH details for extbase based FlexForms (thanks to Stefan Froemken)
  • 2020-02-15 84533bd54a [TASK] Add base Widget class methods for Fluid 3.0 compat (thanks to Claus Due)
  • 2020-02-15 e8cab9ebf6 [BUGFIX] Use correct label while restoring a record in workspace (thanks to Georg Ringer)
  • 2020-02-14 16d36cb472 [BUGFIX] Rework AJAX request queueing (thanks to Andreas Fernandez)
  • 2020-02-14 97906c1c93 [BUGFIX] Check extension configuration before passing it (thanks to Georg Ringer)
  • 2020-02-14 7e5c66adca [BUGFIX] Fix broken icon for groups with allowed all tables (thanks to Nikita Hovratov)
  • 2020-02-14 105e68fab2 [BUGFIX] Display editIcon and editPanel of EXT:feedit (thanks to Daniel Siepmann)
  • 2020-02-14 6d8defce1a [BUGFIX] Respect language permissions for page translations in list module (thanks to Georg Ringer)
  • 2020-02-13 f9834a4bbf [TASK] Avoid Fluid JS escaping trick in new content wizard (thanks to Claus Due)
  • 2020-02-12 61b25428c2 [TASK] Raise symfony dependencies to their LTS versions (thanks to Benni Mack)
  • 2020-02-12 f586010b52 [BUGFIX] Use new group names in Bamboo AbstractSpec (thanks to Andreas Fernandez)
  • 2020-02-12 6f8cc6f51b [BUGFIX] Make abstract test class really abstract to exclude it from test runs (thanks to Anja Leichsenring)
  • 2020-02-11 afcacfb64a [FEATURE] Support of Macedonian (thanks to Georg Ringer)
  • 2020-02-10 c43c3868cd [BUGFIX] Reset variables in SiteListCommand (thanks to Georg Ringer)
  • 2020-02-04 16d3191725 [BUGFIX] Reset MP parameter on shortcut to MountPoint (thanks to Benni Mack)
  • 2020-02-04 5caf3f9007 [BUGFIX] OtherLanguageContent: show fallback language icon (thanks to Josef Glatz)
  • 2020-02-03 622bb8d154 [TASK] Remove title field in redirects module (thanks to Guido Schmechel)
  • 2020-02-03 71fa330eba [BUGFIX] Independently check permissions for each language in page module (thanks to Christian Eßl)
  • 2020-02-03 282523fec9 [BUGFIX] Make overlaid mountpoint pages avoid redirects (thanks to Benni Mack)
  • 2020-02-03 d58f48991c [TASK] Update Fluid Standalone to latest version (thanks to Benni Mack)
  • 2020-02-03 8cd3f9230b [BUGFIX] Improve visual output of slug proposal (thanks to Elias Häußler)
  • 2020-02-03 4af60b558d [TASK] Add REPORT HTTP method for WebDAV (thanks to Stefan Horst)
  • 2020-02-02 104459cd47 [TASK] Raise typo3/testing-framework fixing DatabaseSnapshot issue (thanks to Oliver Hader)
  • 2020-02-02 6b8d8a7bce [TASK] Add tests for PersistedAliasMapper (thanks to Oliver Hader)
  • 2020-02-02 0ee4594102 [BUGFIX] Use correct method name in PersistedPatternMapper legacy trait (thanks to Oliver Hader)
  • 2020-02-01 beef709f92 [BUGFIX] Cast integer to string items during route argument mapping (thanks to Oliver Hader)
  • 2020-02-01 1c7aed7618 [BUGFIX] Raise symfony/routing to ^4.3 in composer.json (thanks to Oliver Hader)
  • 2020-01-31 fee60b9bbd [TASK] Update StaticValueMapper example in doc-block (thanks to Oliver Hader)
  • 2020-01-31 1f70258a94 [BUGFIX] Use correct method name in PersistedPatternMapper legacy trait (thanks to Oliver Hader)
  • 2020-01-31 442c8cad3b [BUGFIX] Show error for all invalid conditions (thanks to Frank Naegler)
  • 2020-01-31 48d7af7008 [TASK] Dissolve PersistenceDelegate for persisted mappers (thanks to Oliver Hader)
  • 2020-01-31 fd2b3731c5 [BUGFIX] Allow MountPoints with the same slug and add tests (thanks to Benni Mack)
  • 2020-01-31 34a9727d53 [TASK] Show property path in title attribute (thanks to Sebastian Michaelsen)
  • 2020-01-29 3138352683 [BUGFIX] Avoid PHP warning in ArrayUtility::getValueByPath() (thanks to Daniel Siepmann)
  • 2020-01-28 ae5b3b0bc6 [TASK] Update copyright year in several files to 2020 (thanks to Elias Häußler)
  • 2020-01-28 a763bf1bf5 [TASK] Streamline CacheHashCalculator test case (thanks to Oliver Hader)
  • 2020-01-28 c71e744e4d [TASK] Repair examples (thanks to Stefan Frömken)
  • 2020-01-28 fd4ddf1329 [BUGFIX] Ensure route defaults and requirements are considered (thanks to Oliver Hader)
  • 2020-01-27 c4b9dbda62 [BUGFIX] Do not try to persist fieldNames of type "none" (thanks to Christian Eßl)
  • 2020-01-27 63b03bfc30 [BUGFIX] Fix language synchronization for inline relations with inline relations (thanks to Michael Stucki)
  • 2020-01-25 9a512a60bc [BUGFIX] Load uncached site configuration in editAction (thanks to Kevin Appelt)
  • 2020-01-25 4b84003e05 [BUGFIX] Allow context menu hide/unhide for all TCA-based fields (thanks to Benni Mack)
  • 2020-01-25 8a15b2d277 [BUGFIX] Hide invisible tab-panes to prevent focus hidden form elements (thanks to András Ottó)
  • 2020-01-24 5695613534 [BUGFIX] Add more safety checks when dealing with buttons in the BE (thanks to Markus Klein)
  • 2020-01-24 39c2e112cc [BUGFIX] Make unique id for same checkboxes in different sections (thanks to Dmytro Nozdrin)
  • 2020-01-24 3e8aa38bb5 [BUGFIX] Ensure ZipService->extract sets proper permissions (thanks to Benni Mack)
  • 2020-01-24 ab6cc19816 [BUGFIX] Reduce memory consumption in findIdentifiersByTag() (thanks to Markus Klösges)
  • 2020-01-22 dd1a2c0145 [TASK] Extend route enhancer test framework (thanks to Oliver Hader)
  • 2020-01-20 d2ce2f0b8a [BUGFIX] Consider Symfony route modifier (thanks to Oliver Hader)
  • 2020-01-20 75331623e7 [BUGFIX] Avoid removing empty prefixes in mount-point handling (thanks to Oliver Hader)
  • 2020-01-20 748098ec13 [TASK] Extend route enhancer test framework (thanks to Oliver Hader)
  • 2020-01-20 30651e6cbc [TASK] Add page type enhancer tests for root page (thanks to Susanne Moog)
  • 2020-01-20 9fca335b32 [FEATURE] Native MountPoint support for Site Handling (thanks to Benni Mack)
  • 2020-01-18 9dde8915e6 [BUGFIX] Hand over new parameters to DataHandler clones (thanks to Benni Mack)
  • 2020-01-17 cb1cc8a8ff [BUGFIX] Remove dependency check on openSSL (thanks to Benni Mack)
  • 2020-01-17 08a55b3393 [TASK] Do not add target attribute if lightbox is enabled (thanks to Eric Chavaillaz)
  • 2020-01-17 8758e9e61c [BUGFIX] Use latest slug in PopulatePageSlug (thanks to Sybille Peters)
  • 2020-01-17 f3b9c4be57 [BUGFIX] Fix search in file list mount points (thanks to Sebastian Hofer)
  • 2020-01-17 838a23e626 [BUGFIX] Correctly pass arguments to ext:felogin "postProcContent" hook (thanks to Christian Eßl)
  • 2020-01-17 d8391ec44c [DOCS] Add example to RTE configuration concepts (thanks to Toben Schmidt)
  • 2020-01-16 93b9f59efa [BUGFIX] Respect fallback languages in slug generation for pages (thanks to Christian Eßl)
  • 2020-01-16 fbbfcaecaf [BUGFIX] Access module uses DataHandler for updating page (thanks to Benni Mack)
  • 2020-01-16 9dc20efbd6 [BUGFIX] Add support for options in "Execute console commands" (thanks to Sebastian Mazza)
  • 2020-01-16 efc8580dfb [BUGFIX] Apply restrictions for default language in context menu (thanks to Daniel Goerz)
  • 2020-01-16 052a45018b [BUGFIX] Prevent ambiguous column name for TCA items (thanks to Daniel Siepmann)
  • 2020-01-16 0a14ffac46 [BUGFIX] Avoid applying zero prefix for zero in StaticRangeMapper (thanks to Oliver Hader)
  • 2020-01-16 f775aec18c [BUGFIX] Remove handling of nonexisting Exception in PageProvider (thanks to Daniel Goerz)
  • 2020-01-16 4612bad6af [BUGFIX] Allow felogin to work without storage PID (thanks to Benni Mack)
  • 2020-01-16 c7161fa586 [BUGFIX] Clarify description in ExtensionManagementUtility::addPlugin (thanks to Benni Mack)
  • 2020-01-15 a5b78635b8 [BUGFIX] Allow additional parameters in static routes (thanks to Benni Mack)
  • 2020-01-15 672f836211 [TASK] Move RST file for adding Kinyarwanda to correct folder (thanks to Daniel Goerz)
  • 2020-01-15 50bfd9cfa3 [FEATURE] Add support for Kinyarwanda language (thanks to Tymoteusz Motylewski)
  • 2020-01-15 f9a3a41325 [BUGFIX] Check isAbsPath when creating log file (thanks to Susanne Moog)
  • 2020-01-15 36f4e0e53a [BUGFIX] Avoid creation of duplicate processed files (thanks to Benni Mack)
  • 2020-01-15 d693279f4c [BUGFIX] Respect index in page type resolution (thanks to Daniel Goerz)
  • 2020-01-15 39d258b23e [TASK] Respect default_sortby in TCA foreign table queries (thanks to Christoph Lehmann)
  • 2020-01-15 dc8276577b [BUGFIX] Replace regexp capture groups for redirects (thanks to Guido Schmechel)
  • 2020-01-15 5e7759d3e8 [BUGFIX] disableNoCacheParameter option allows TypoScript cache option (thanks to Benni Mack)
  • 2020-01-15 7e984028db [TASK] Allow record or uid for isInWebMount (thanks to Markus Klein)
  • 2020-01-15 98816d8082 [TASK] Add index to l10n_source field (thanks to Riny van Tiggelen)
  • 2020-01-14 b915383f5d [TASK] Add test cases for handling of l18n_cfg field in pages sitemap (thanks to Daniel Goerz)
  • 2020-01-14 a8116815d5 [TASK] Use prepared statement in BackendUtility::getPageForRootline (thanks to Markus Klein)
  • 2020-01-14 f6bc1240bf [BUGFIX] Use DataHandler localize in Localization Overview (thanks to Susanne Moog)
  • 2020-01-14 34a79461c8 [BUGFIX] Cast indexer config to integers before multiplication (thanks to Andreas Fernandez)
  • 2020-01-14 935a7a5b97 [BUGFIX] Support unicode characters for redirects (thanks to Guido Schmechel)
  • 2020-01-14 09fd6661e1 [TASK] Refactor route enhancer tests (thanks to Oliver Hader)
  • 2020-01-14 5048e95610 [BUGFIX] Skip mkdir on logfiles with wrapper (thanks to Sven Carstens)
  • 2020-01-14 174325faa8 [BUGFIX] Use correct type annotation for TSFE->pageCache (thanks to Markus Klein)
  • 2020-01-14 83f29c2589 [BUGFIX] Use indexed menu item array for directory menu (thanks to Alexander Stehlik)
  • 2020-01-14 01a0c5c3f5 [BUGFIX] Make current folder selectable for folder links (thanks to Markus Klein)
  • 2020-01-14 e45c13d633 [BUGFIX] Improved visibility error message in install tool (thanks to Sebastian Rosskopf)
  • 2020-01-14 39e93c9ffa [DOCS] Update TypoLink example inside of ViewHelper (thanks to Tizian Schmidlin)
  • 2020-01-14 47b9dee94e [TASK] Avoid superfluous Reflection invocation in tests (thanks to Oliver Hader)
  • 2020-01-14 04d8ada7d7 [BUGFIX] Show argument validation results in scheduler list (thanks to Markus Klösges)
  • 2020-01-14 28c5a7b2b2 [BUGFIX] Ensure StaticRangeMapper applies zero prefix to internal map (thanks to Oliver Hader)
  • 2020-01-14 6b61b504a5 [BUGFIX] Only include translated pages in sitemap (thanks to Daniel Goerz)
  • 2020-01-13 3c27620f53 [BUGFIX] Preserve order of select items in FormEngine (thanks to Markus Klein)
  • 2020-01-13 1d352d1997 [BUGFIX] Allow resolving unmapped type GET parameters with PageTypeDecorator (thanks to Benni Mack)
  • 2020-01-13 7820d832b0 [BUGFIX] Add language flags to sys category TCA config (thanks to Joerg Boesche)
  • 2020-01-13 33d4aa730d [BUGFIX] Only show translate button for available languages (thanks to Daniel Goerz)
  • 2020-01-13 94bb5e4625 [BUGFIX] Fix various misbehaviors in "Broken Extension Scanner" (thanks to Andreas Fernandez)
  • 2020-01-12 b1279c34cc [DOCS] Document request.getPageArguments() in TS conditions (thanks to Daniel Goerz)
  • 2020-01-12 a566528c4c [BUGFIX] Do not pass extTarget by reference (thanks to Susanne Moog)
  • 2020-01-12 3f8c961ea7 [TASK] Add a function to safely traverse arrays in TS conditions (thanks to Markus Klein)
  • 2020-01-12 92ed7870ee [BUGFIX] Handle missing TSFE gracefully in TS conditions (thanks to Georg Ringer)
  • 2020-01-12 31cc90f0b0 [BUGFIX] DefaultTcaSchema must not create SQL for tables not requested (thanks to Markus Klein)
  • 2020-01-10 a0f12a5252 [BUGFIX] Fix OptimizeDatabaseTableTask for PDO and MySQLi (thanks to Manuel Selbach)
  • 2020-01-10 a67d0b6710 [BUGFIX] Ensure fresh logger instance in scheduler tasks (thanks to Helmut Hummel)
  • 2020-01-10 02976de354 [BUGFIX] Check return value of inet_pton in IpAnonymizationUtility (thanks to Georg Ringer)
  • 2020-01-10 fdccaace66 [BUGFIX] Correctly display the CGI environment in Environment module (thanks to Benni Mack)
  • 2020-01-09 07eea94944 [FEATURE] Provide feature flag for new translation server's export (thanks to Georg Ringer)
  • 2020-01-07 ab16e2eddf [TASK] Add max_line_length to .editorconfig for rst files (thanks to Chris Müller)
  • 2020-01-07 e7f4e66606 [DOCS] Link to same version in documentation (thanks to Sybille Peters)
  • 2020-01-06 f5a0c76a9e [TASK] Use PermutationUtility::meltStringItems in test cases (thanks to Oliver Hader)
  • 2020-01-06 ee7bbcb90b [TASK] Introduce PermutationUtility (thanks to Oliver Hader)
  • 2020-01-06 89c62ee2bf [DOCS] Update Deprecation 79440 Changelog entry (thanks to Naderio)
  • 2019-12-31 f13f60ea2e [BUGFIX] PopulatePageSlugs return the most recent slug (thanks to Herman Kremer)
  • 2019-12-30 52ad1726ec [TASK] Disallow .php8 file extensions for uploading (thanks to Benni Mack)
  • 2019-12-28 45a7e5a7c0 [DOCS] Correct code block for site configuration (thanks to Stephan Salzmann)
  • 2019-12-28 f6eae8a817 [DOCS] Update Context API usage example (thanks to Tymoteusz Motylewski)
  • 2019-12-27 357f4df72d [BUGFIX] Fix /date|time|int/ regex in backend search (thanks to Christian Eßl)
  • 2019-12-27 9b74860954 [BUGFIX] Reset evaluate permissions to previous value (thanks to Susanne Moog)
  • 2019-12-27 e40561d7ba [TASK] Add index to slug field (thanks to Oliver Bartsch)
  • 2019-12-27 715977d589 [BUGFIX] PopulatePagesSlugs should respect tx_realurl_pathsegment field (thanks to Tobias Gaertner)
  • 2019-12-27 771f3d878a [BUGFIX] Test failure due to erroneous usage of uniqueId() function (thanks to Anja Leichsenring)
  • 2019-12-27 e11c2a2096 [TASK] Remove report for ext:compatibility7 (thanks to Anja Leichsenring)
  • 2019-12-27 cf3bd5aaa8 [TASK] Correctly nest testing template instructions in DOM (thanks to Oliver Hader)
  • 2019-12-27 1d381c2834 [TASK] Remove repository polling trigger from pre-merge test plans (thanks to Anja Leichsenring)
  • 2019-12-27 aa1feb2470 [TASK] COMPOSER_ROOT_VERSION raise to current version 9.5.13 (thanks to Anja Leichsenring)
  • 2019-12-20 33ad14cac3 [TASK] Update codeception and phpunit to latest versions (thanks to Benni Mack)
  • 2019-12-20 6881edfb7e [BUGFIX] Include .htaccess file in extension packages (thanks to Georg Ringer)
  • 2019-12-19 10b979454c [BUGFIX] Adjust parameters of implode() for PHP 7.4 (thanks to Susanne Moog)
  • 2019-12-19 4203cde399 [TASK] Increase wait limit for mssql containers (thanks to Anja Leichsenring)
  • 2019-12-18 e2dd92d657 [BUGFIX] Use correct implode(string, array) syntax (thanks to Anja Leichsenring)
  • 2019-12-18 cb5a03b335 [TASK] Fix closure comparison in test (thanks to Susanne Moog)
  • 2019-12-17 3f8383ead2 [TASK] Set TYPO3 version to 9.5.14-dev (thanks to Oliver Hader)