TYPO3 9.5.37 ELTS

Release Notes

Version 9.5.37 ELTS

Stay secure and up-to-date with TYPO3 ELTS!

The TYPO3 CMS community supported from 2018-10-02 until 2021-09-30.
Extend your support now until 2024-09-30 to get access to the latest security and compatibility updates for this version.

Learn more about TYPO3 ELTS Browse the TYPO3 ELTS Portal

Release Notes for TYPO3 CMS 9.5.37

This document contains information about TYPO3 CMS 9.5.37 which was released on 12.09.2022.

Get TYPO3 9.5.37 now

Checksums of TYPO3 9.5.37


fd8e88aab82ae4cea01601ea14d02dd23a1a9c0453f9cf3a25a6ba5e084f4970 typo3_src-9.5.37.tar.gz
d81987720a14e21194163c02548262a1389dabd17bc137483714becffc599c51 typo3_src-9.5.37.zip


3d3ce74dfee52357e134051220586aa0664fdffb typo3_src-9.5.37.tar.gz
623dd82fefbaf4e799da0dd8824f6ee8f216fc5e typo3_src-9.5.37.zip


5fd06b8a2cd9682d11e8b334a500743f typo3_src-9.5.37.tar.gz
68c85a12bd919f2914cdd7c10716a956 typo3_src-9.5.37.zip

Package Signatures

TYPO3 Release Packages (the downloadable tarballs and zip files) as well as Git tags are signed using PGP signatures during the automated release process. Besides that, MD5 and SHA2-256 hashes are being generated for these files. Find more details on verifying signatures and hashes in the infrastructure guide.

Download GPG signed release README.md file

Example of verifying integrity of tar.gz package of current release:

wget --content-disposition https://get.typo3.org/9.5.37/tar.gz
wget --content-disposition https://get.typo3.org/9.5.37/tar.gz.sig
gpg --verify typo3_src-9.5.37.tar.gz.sig typo3_src-9.5.37.tar.gz


The usual upgrading procedure applies. No database updates are necessary. It might be required to clear all caches; the "important actions" section in the TYPO3 Install Tool offers the accordant possibility to do so.


  • 2022-09-13 8be481051b [RELEASE] Release of TYPO3 9.5.37 (thanks to Andreas Fernandez)
  • 2022-09-13 af59e64cac [SECURITY] Upgrade to typo3/html-sanitizer v2.0.16 (thanks to Andreas Fernandez)
  • 2022-09-13 321e5d7cee [SECURITY] Mitigate timing discrepancies during user authentication (thanks to Oliver Hader)
  • 2022-09-13 c5c66dd60e [SECURITY] Mitigate cross-site-scripting in FileDumpController (thanks to Oliver Hader)
  • 2022-09-13 aaf395f895 [BUGFIX] Add missing msclkid parameter to cacheHash excludedParameters (thanks to dsteinborn)
  • 2022-08-15 f86d856587 [BUGFIX] Disable pagetree drag and drop for touch inputs (thanks to Benjamin Kott)
  • 2022-06-22 6aa639ba5e [BUGFIX] Update guzzlehttp/guzzle to 6.5.8 (thanks to Andreas Fernandez)
  • 2022-06-20 412e115faf [BUGFIX] Avoid invalid type exception in FinisherVariableProvider (thanks to Josua Vogel)
  • 2022-06-15 ee5fa76297 [TASK] Set TYPO3 version to 9.5.37-dev (thanks to Andreas Fernandez)