TYPO3 9.5.46 ELTS

Release Notes

Version 9.5.46 ELTS

This version is not supported anymore.

The TYPO3 CMS community supported from 2018-10-02 until 2021-09-30. Extended security & compatibility support (ELTS) expired on 2024-09-30.

Please consider updating to a newer version.

Release Notes for TYPO3 CMS 9.5.46

This document contains information about TYPO3 CMS 9.5.46 which was released on 13.02.2024.

Get TYPO3 9.5.46 now

Checksums of TYPO3 9.5.46

SHA256

9cbc03dd70f6ede8dd3efb18ecd5a7e5106db7b26bbc599f0094749b76ee1a09 typo3_src-9.5.46.tar.gz
766f74f78c89e1367e3bb8aaf9b497773591cbd5129318a3621d93e1f769e13d typo3_src-9.5.46.zip

SHA1

fcf436b081216939143b96924d9b8c32a9307f02 typo3_src-9.5.46.tar.gz
e280894be5b1cf4556d258a0384b241aad698b17 typo3_src-9.5.46.zip

MD5

d41d8cd98f00b204e9800998ecf8427e typo3_src-9.5.46.tar.gz
d41d8cd98f00b204e9800998ecf8427e typo3_src-9.5.46.zip

Package Signatures

TYPO3 Release Packages (the downloadable tarballs and zip files) as well as Git tags are signed using PGP signatures during the automated release process. Besides that, MD5 and SHA2-256 hashes are being generated for these files. Find more details on verifying signatures and hashes in the infrastructure guide.

Upgrading

The usual upgrading procedure applies. No database updates are necessary. It might be required to clear all caches; the "important actions" section in the TYPO3 Install Tool offers the accordant possibility to do so.

Changes

Here is a list of what was fixed since 9.5.45:

  • 2024-02-13 9a51f1b4f2 [RELEASE] Release of TYPO3 9.5.46 (thanks to Andreas Kienast)
  • 2024-02-13 57efeb0b00 [SECURITY] Prevent RCE via install tool settings (thanks to Benjamin Franzke)
  • 2024-02-13 ecc4bbbd85 [SECURITY] Prevent arbitrary access to privileged resources via t3:// (thanks to Benjamin Franzke)
  • 2024-02-13 6350dc0c22 [SECURITY] Do not disclose encryptionKey via InstallTool (thanks to Benjamin Franzke)
  • 2024-02-13 dcf06f8a05 [SECURITY] Avoid showing password hashes in backend edit forms (thanks to Oliver Hader)
  • 2024-02-13 b436f7ef9d [!!!][SECURITY] Enforce absolute path checks in FAL local driver (thanks to Oliver Hader)
  • 2024-02-13 fa8bf52e9f [SECURITY] Deny directly modifying file abstraction layer entities (thanks to Oliver Hader)
  • 2024-02-09 bddd8cab88 [TASK] Replace former extension packages using self.version (thanks to Thomas Hohn)
  • 2023-11-21 d7f244edd0 [TASK] Set TYPO3 version to 9.5.46-dev (thanks to Andreas Kienast)