TYPO3 11.3.1

Release Notes

Version 11.3.1

Stay secure and up-to-date with TYPO3 ELTS!

The TYPO3 CMS community supported from 2020-12-22 until 2024-10-31.
Extend your support now until 2027-10-31 to get access to the latest security and compatibility updates for this version.

Learn more about TYPO3 ELTS Browse the TYPO3 ELTS Portal

Release Notes for TYPO3 CMS 11.3.1

This document contains information about TYPO3 CMS 11.3.1 which was released on 20.07.2021.

Get TYPO3 11.3.1 now

Checksums of TYPO3 11.3.1

SHA256

bcecb5daf456155d8c061283127806d216b9fa7b59effeabd65ea91126503bef typo3_src-11.3.1.tar.gz
af6aae6aedf2384a63066818544dcad72302a738172c47f2849a3716c19c8ac6 typo3_src-11.3.1.zip

SHA1

f793a1fd8f52091105a79d2a318a3e703cc9d947 typo3_src-11.3.1.tar.gz
cedf684dd65230664db1fbfcc97f4b7d68ee11ca typo3_src-11.3.1.zip

MD5

ff28cf38e3ae9b78138fb99aacdc0a0a typo3_src-11.3.1.tar.gz
2e6862db02cafbe19917a1ca24751c13 typo3_src-11.3.1.zip

Package Signatures

TYPO3 Release Packages (the downloadable tarballs and zip files) as well as Git tags are signed using PGP signatures during the automated release process. Besides that, MD5 and SHA2-256 hashes are being generated for these files. Find more details on verifying signatures and hashes in the infrastructure guide.

Download GPG signed release README.md file

Example of verifying integrity of tar.gz package of current release:

wget --content-disposition https://get.typo3.org/11.3.1/tar.gz
wget --content-disposition https://get.typo3.org/11.3.1/tar.gz.sig
gpg --verify typo3_src-11.3.1.tar.gz.sig typo3_src-11.3.1.tar.gz

Upgrading

The usual upgrading procedure applies. No database updates are necessary. It might be required to clear all caches; the "important actions" section in the TYPO3 Install Tool offers the accordant possibility to do so.

Changes

Here is a list of what was fixed since 11.3.0:

  • 2021-07-20 e16fd6e981 [RELEASE] Release of TYPO3 11.3.1 (thanks to Oliver Hader)
  • 2021-07-20 0b4950163b [SECURITY] Do not log sensitive data in authentication process (thanks to Benni Mack)
  • 2021-07-20 6f8d69d233 [SECURITY] Mitigate XSS related to column names (thanks to Oliver Bartsch)
  • 2021-07-20 843718ec5d [SECURITY] Encode error messages in Query Generatory & Query View (thanks to Oliver Hader)
  • 2021-07-20 a4406f3762 [SECURITY] Mitigate XSS in viewpage (thanks to Oliver Bartsch)
  • 2021-07-20 5a49b34b4f [TASK] Skip another SVG sanitizer test causing seg fault (thanks to Christian Kuhn)
  • 2021-07-20 0c78fae113 [TASK] Skip SVG sanitizer test causing segmentation fault (thanks to Oliver Hader)
  • 2021-07-20 7998a24be2 [TASK] Mitigate downstream CSV code injection (thanks to Oliver Hader)
  • 2021-07-20 8037908606 [BUGFIX] Avoid PHP8 fatal errors in CommandLineUserAuthentication (thanks to Helmut Hummel)
  • 2021-07-19 e566f83213 [BUGFIX] Upgrade packages chart.js, codemirror, ckeditor4 (thanks to Oliver Hader)
  • 2021-07-19 a2a3490b4d [TASK] Streamline identifier usage in SvgFilesSanitization upgrade wizard (thanks to Oliver Hader)
  • 2021-07-16 cc9484741f [TASK] Set TYPO3 version to 11.3.1-dev (thanks to Oliver Hader)