TYPO3 9.5.20

Release Notes

Version 9.5.20

This version is not supported anymore.

The TYPO3 CMS community supported from 2018-10-02 until 2021-09-30. Extended security & compatibility support (ELTS) expired on 2024-09-30.

Please consider updating to a newer version.

Release Notes for TYPO3 CMS 9.5.20

This document contains information about TYPO3 CMS 9.5.20 which was released on 28.07.2020.

Get TYPO3 9.5.20 now

News

This release is a combined bug fix and security release.

Find more details in the security bulletins:

Read TYPO3 9.5.20 Release News

Checksums of TYPO3 9.5.20

SHA256

dd1adf61d7e0fb77b23da0048fbdf67b3ab0be0c273b18197a0b753f39c4e432 typo3_src-9.5.20.tar.gz
5ceafb09e943f097b365c5c09ca6d2fd29db33cd1dda451a3c585e216f6bb66f typo3_src-9.5.20.zip

SHA1

ef322ad966509745e7482585fe52334c1224dd43 typo3_src-9.5.20.tar.gz
d45319529e6da7834d9215b5c9cd2ad95f83d0d0 typo3_src-9.5.20.zip

MD5

d177518a5cd298d3d9e974090c872ac4 typo3_src-9.5.20.tar.gz
ca01112a69f31b68b87e1f35dacd1f05 typo3_src-9.5.20.zip

Package Signatures

TYPO3 Release Packages (the downloadable tarballs and zip files) as well as Git tags are signed using PGP signatures during the automated release process. Besides that, MD5 and SHA2-256 hashes are being generated for these files. Find more details on verifying signatures and hashes in the infrastructure guide.

Download GPG signed release README.md file

Example of verifying integrity of tar.gz package of current release:

wget --content-disposition https://get.typo3.org/9.5.20/tar.gz
wget --content-disposition https://get.typo3.org/9.5.20/tar.gz.sig
gpg --verify typo3_src-9.5.20.tar.gz.sig typo3_src-9.5.20.tar.gz

Upgrading

The usual upgrading procedure applies. No database updates are necessary. It might be required to clear all caches; the "important actions" section in the TYPO3 Install Tool offers the accordant possibility to do so.

Changes

Here is a list of what was fixed since 9.5.19:

2020-07-28 9c66a63af8 [RELEASE] Release of TYPO3 9.5.20 (thanks to Oliver Hader)
2020-07-28 d2842eb11a [SECURITY] Avoid ambiguous HMAC results (thanks to Oliver Hader)
2020-07-28 6cd384be8e [SECURITY] Apply file deny pattern to eID API used for file retrieval (thanks to Oliver Hader)
2020-07-27 2cd7b2647a [BUGFIX] Respect different matcher config of ConstructorArgumentMatcher (thanks to Anja Leichsenring)
2020-07-27 f1f0d63926 [TASK] Update description for lockIP and lockIPv6 (thanks to Torben Hansen)
2020-07-27 5838af2474 [BUGFIX] Deleting a localized page deletes its localized records (thanks to Christian Kuhn)
2020-07-25 a82a7c5f5e [BUGFIX] Show indexed_search backend module on PostgreSQL for pages with subpages (thanks to Stephan Großberndt)
2020-07-25 6fd7c3c446 [BUGFIX] Adjust processing order of routes during URL generation (thanks to Oliver Hader)
2020-07-24 231a5f4e58 [BUGFIX] Provide example on how to limit phpunit test execution (thanks to Anja Leichsenring)
2020-07-23 825d90d548 [BUGFIX] Limit amount of data fetched by the page tree (thanks to Tymoteusz Motylewski)
2020-07-21 24aabfffa1 [BUGFIX] Fix indenting in changelog (thanks to Sybille Peters)
2020-07-15 90a1915206 [BUGFIX] Avoid SQL error in indexed_search indexer on PostgreSQL (thanks to Stephan Großberndt)
2020-07-09 ed52de5e6d [BUGFIX] Always merge results from empty tabs (thanks to Helmut Hummel)
2020-06-30 06b7448df9 [BUGIFX] Store state of PageTitleProviderManager in cache (thanks to Helmut Hummel)
2020-06-21 8cb2b2437f [BUGFIX] Allow deserialization of Area objects for processed files (thanks to Helmut Hummel)
2020-06-09 e350506654 [TASK] Set TYPO3 version to 9.5.20-dev (thanks to Benni Mack)