TYPO3 9.5.21

Release Notes

Version 9.5.21

Stay secure and up-to-date with TYPO3 ELTS!

The TYPO3 CMS community supported from 2018-10-02 until 2021-09-30.
Extend your support now until 2024-09-30 to get access to the latest security and compatibility updates for this version.

Learn more about TYPO3 ELTS Browse the TYPO3 ELTS Portal

Release Notes for TYPO3 CMS 9.5.21

This document contains information about TYPO3 CMS 9.5.21 which was released on 08.09.2020.

Get TYPO3 9.5.21 now


This version is a bugfix and maintenance release.

Read TYPO3 9.5.21 Release News

Checksums of TYPO3 9.5.21


44aa723607b5a55c7d5d63df7bb3aa55ae67c52b01ff3fa245c9268e78f92e6c typo3_src-9.5.21.tar.gz
4c8d02c860bdd3517eb6f24f5b475b41148d2b93b6e845da38d6498dfa6d8299 typo3_src-9.5.21.zip


cd1b32959c7044c625935e69e91f4a548e0cfdef typo3_src-9.5.21.tar.gz
670cfbad2a583a11bbc16a9b64cb5dd015faea4d typo3_src-9.5.21.zip


a0adff31a28a8efa67453532139adbfa typo3_src-9.5.21.tar.gz
d9d3c9eb3a99abc9d0698cd22cb959cc typo3_src-9.5.21.zip

Package Signatures

TYPO3 Release Packages (the downloadable tarballs and zip files) as well as Git tags are signed using PGP signatures during the automated release process. Besides that, MD5 and SHA2-256 hashes are being generated for these files. Find more details on verifying signatures and hashes in the infrastructure guide.

Download GPG signed release README.md file

Example of verifying integrity of tar.gz package of current release:

wget --content-disposition https://get.typo3.org/9.5.21/tar.gz
wget --content-disposition https://get.typo3.org/9.5.21/tar.gz.sig
gpg --verify typo3_src-9.5.21.tar.gz.sig typo3_src-9.5.21.tar.gz


The usual upgrading procedure applies. No database updates are necessary. It might be required to clear all caches; the "important actions" section in the TYPO3 Install Tool offers the accordant possibility to do so.


Here is a list of what was fixed since 9.5.20:

  • 2020-09-08 fb8493288f [RELEASE] Release of TYPO3 9.5.21 (thanks to Benni Mack)
  • 2020-09-07 62868e837a [TASK] Add tests for SecurityUtility.getRandomHexValue (thanks to Oliver Hader)
  • 2020-09-07 9ff82a0894 [TASK] Clean up JavaScript code (thanks to Oliver Hader)
  • 2020-09-07 ef6325962c [TASK] Add possibility to create random values in JavaScript (thanks to Oliver Hader)
  • 2020-09-07 9338661a72 [BUGFIX] Correctly show changes in current workspace in the page tree (thanks to Richard Haeser)
  • 2020-09-07 365e3b2bb3 [BUGFIX] Correctly build query string without cHash (thanks to Helmut Hummel)
  • 2020-09-07 e33e9885ba [BUGFIX] Don't call ResourceFactory::getStorageObject twice (thanks to Helmut Hummel)
  • 2020-09-05 341fc2668c [TASK] CSV integrity test script can fix fixtures (thanks to Christian Kuhn)
  • 2020-09-03 def8bf2403 [BUGFIX] Don't pre-calculcate asset paths in t3editor (thanks to Andreas Fernandez)
  • 2020-09-03 35bc94f5bf [BUGFIX] Do not mark repeatable wizards executed during install (thanks to Helmut Hummel)
  • 2020-09-02 d9f0fe6605 [DOCS] Avoid use of TYPO3_MODE checks in ext_localconf.php (thanks to Oliver Bartsch)
  • 2020-08-31 53d9c4abe2 [BUGFIX] Correctly call BackendUtility::selectVersionsOfRecord (thanks to Oliver Hader)
  • 2020-08-28 deb86e617f [BUGFIX] Wrap operands in parentheses (thanks to Andreas Fernandez)
  • 2020-08-27 9a14557a98 [DOCS] Add RTE preset override for flexform field (thanks to Simon Ackermann)
  • 2020-08-26 2416228557 [BUGFIX] Use URI of current request for referrer check (thanks to Andreas Fernandez)
  • 2020-08-21 ad5b7a5226 [TASK] Add security relevant .htaccess configuration as default (thanks to Markus Klein)
  • 2020-08-19 383622db19 [TASK] Add SECURITY.md (thanks to Oliver Hader)
  • 2020-08-17 d2650bff9f [BUGFIX] Limit amount of data fetched by the page tree (thanks to Benni Mack)
  • 2020-08-14 1dc0cba45e [BUGFIX] Extract width and height meta data for all image files (thanks to Helmut Hummel)
  • 2020-08-13 2e2ac3c14b [BUGFIX] Fix typo to show label description of tasks again (thanks to Georg Ringer)
  • 2020-08-12 efa4291ffe [TASK] Use frontend requests when testing canonical URL behavior (thanks to Oliver Hader)
  • 2020-08-10 f5de2b4750 [BUGFIX] Allow routes without actual route variables for ExtbaseEnhancer (thanks to Oliver Hader)
  • 2020-08-10 dda201fa8b [BUGFIX] Ensure decoded parameters are a valid array (thanks to Oliver Bartsch)
  • 2020-08-10 5035666227 [BUGFIX] Skip processing of inline children which aren't workspace-aware (thanks to Christian Kuhn)
  • 2020-08-10 b5ef37599d [BUGFIX] Make "showHiddenRecords" in adminpanel work again (thanks to Christian Eßl)
  • 2020-08-07 053cd5e5f4 [TASK] Revert "Limit amount of data fetched by the page tree" (thanks to Benni Mack)
  • 2020-08-07 a8a8beaae8 [BUGFIX] Do not use hard-coded magic 1337 in admin panel (thanks to Benni Mack)
  • 2020-08-06 41de055b8d [BUGFIX] Fix slug handling for sites not on root level (thanks to Helmut Hummel)
  • 2020-08-04 4f7bd3bd53 [BUGFIX] Allow more than 999 subpages in link browser pagetree (thanks to Jigal van Hemert)
  • 2020-08-04 5a1b0140a5 [BUGFIX] Prevent non-numeric value warning in ErrorHandler.php (thanks to Kevin Ditscheid)
  • 2020-08-04 31481cad1d [BUGFIX] Prevent non-numeric value warning in PhpErrorCodeViewHelper (thanks to Kevin Ditscheid)
  • 2020-08-04 1d0e0ddb35 [BUGFIX] Fetch TYPO3 version in reports module only (thanks to Markus Klein)
  • 2020-08-04 fc9e8452e8 [BUGFIX] Fix install tool updates of user configuration on PostgreSQL (thanks to Stephan Großberndt)
  • 2020-08-04 5466944a16 [BUGFIX] Send warning email for backend login failure on all DBMS (thanks to Stephan Großberndt)
  • 2020-08-03 dbc2af3430 [BUGFIX] Tests for translated content will prepare a translated page (thanks to Anja Leichsenring)
  • 2020-07-31 3a5d3796d5 [TASK] Update example of FormProtectionFactory validation (thanks to otherpaco)
  • 2020-07-31 a0da229e47 [BUGFIX] Disable new content buttons until module is loaded (thanks to Andreas Fernandez)
  • 2020-07-31 c06aed567b [BUGFIX] Properly return integer within resolvePreviewRecordId (thanks to Daniel Siepmann)
  • 2020-07-28 3db82244cb [TASK] Set TYPO3 version to 9.5.21-dev (thanks to Oliver Hader)