TYPO3 9.5.40 ELTS

Release Notes

Version 9.5.40 ELTS

Stay secure and up-to-date with TYPO3 ELTS!

The TYPO3 CMS community supported from 2018-10-02 until 2021-09-30.
Extend your support now until 2024-09-30 to get access to the latest security and compatibility updates for this version.

Learn more about TYPO3 ELTS Browse the TYPO3 ELTS Portal

Release Notes for TYPO3 CMS 9.5.40

This document contains information about TYPO3 CMS 9.5.40 which was released on 07.02.2023.

Get TYPO3 9.5.40 now


This release is a combined bug fix and security release.

Find more details in the security bulletins

Checksums of TYPO3 9.5.40


3e149d1716b58303ceb27c9a98731819db252c6acba8836fda72689fe45f8a5e typo3_src-9.5.40.tar.gz
5c9de4c51d63afbc0238767a6f14b8dfb1666809c9c0653fff79410e3b520d6f typo3_src-9.5.40.zip


7437abc2c46bfe938885bc22bb8c9b2b5b2ae17e typo3_src-9.5.40.tar.gz
03ac3ba0607749ce80c45a4cdf1b2ef020a00497 typo3_src-9.5.40.zip


05203f6f994fc6e69cba26cdee7f1dba typo3_src-9.5.40.tar.gz
870af91af6797c2f498d33c72d4966f3 typo3_src-9.5.40.zip

Package Signatures

TYPO3 Release Packages (the downloadable tarballs and zip files) as well as Git tags are signed using PGP signatures during the automated release process. Besides that, MD5 and SHA2-256 hashes are being generated for these files. Find more details on verifying signatures and hashes in the infrastructure guide.

Download GPG signed release README.md file

Example of verifying integrity of tar.gz package of current release:

wget --content-disposition https://get.typo3.org/9.5.40/tar.gz
wget --content-disposition https://get.typo3.org/9.5.40/tar.gz.sig
gpg --verify typo3_src-9.5.40.tar.gz.sig typo3_src-9.5.40.tar.gz


The usual upgrading procedure applies. No database updates are necessary. It might be required to clear all caches; the "important actions" section in the TYPO3 Install Tool offers the accordant possibility to do so.


  • 2023-02-07 e6e9474903 [RELEASE] Release of TYPO3 9.5.40 (thanks to Andreas Fernandez)
  • 2023-02-07 35e835c589 [SECURITY] Prevent XSS due to wrong PATH_INFO evaluation (thanks to Benjamin Franzke)
  • 2023-01-23 e5b02bd1c2 [TASK] Update copyright year to 2023 (thanks to Andreas Fernandez)
  • 2022-12-15 3d9b37abc2 [TASK] Set TYPO3 version to 9.5.40-dev (thanks to Andreas Fernandez)