TYPO3 6.2.18
16 February 2016
TYPO3 version 6.2.18 is now available (security release).
Upgrading to TYPO3 6.2.18
TYPO3 6.2.18 can be upgraded to (or installed) using any of Installatron's products. Use Installatron's optional Automatic Update feature to automatically apply TYPO3 updates as new versions are released, or use Installatron's Clone feature to duplicate an existing TYPO3 install to test the 6.2.18 upgrade prior to applying it live. Get started managing your TYPO3 installations with Installatron
What's New in TYPO3 6.2.18
- [SECURITY] SQLi in DBAL (Morton Jonuschat) (#58896)
- [SECURITY] XSS in form extension (Wouter Wolters) (#54205)
- [SECURITY] XSS in content element "Form" (Helmut Hummel) (#25244)
- [SECURITY] XSS in Link Validator (Steffen Müller) (#72240)
- [BUGFIX] Deduplicate "Hide default translation of page" logic (Morton Jonuschat) (#73083)
- [FOLLOWUP][BUGFIX] Table wizard: large fields and BR-tags (Morton Jonuschat) (#72388)
- [BUGFIX] Failing Unit Tests on Windows systems (Nicole Cordes) (#73006)
- [BUGFIX] Re-enable export of multiple records via clipboard (Bernhard Kraft) (#59180)
- [BUGFIX] Fallback to version of ext_emconf.php if not found in Composer (Peter Niederlag) (#65866)
- [BUGFIX] impexp ignore file reference records with missing related files (Marc Bastian Heinrichs) (#58693)
- [BUGFIX] ImpExp: Correct casing for FAL function call (Benni Mack) (#73158)
- [BUGFIX] Off-by-one error in FAL's LocalDriver (Andreas Fernandez) (#73103)
- [BUGFIX] Reallow '0' as valid userFunc argument in TypoScript (Frank Naegler) (#72936)
- [BUGFIX] CategoryRegistry::addTcaColumn() ignores displayCond (Benni Mack) (#70307)
- [BUGFIX] Clear cache system icon is shown for non admin in dev context (Benni Mack) (#72964)
- [TASK] Switch mirror links to https (Nicole Cordes) (#72943)
- [BUGFIX] SimpleFileBackend::setCacheDirectory returns valid path name (Jan Helke) (#72635)
- [BUGFIX] Remove newline from PLACEHOLDER marker in indexed_search (Wouter Wolters) (#72892)
- [TASK] Hide "Save document and create a new one" in filelist (Gianluigi Martino) (#72786)
- Add missing return type to createVersionNumberedFilename (Thomas Löffler) ([BUGFIX])
- [BUGFIX] Clarify extension dependency skipping (Nicole Cordes) (#72762)
- [BUGFIX] Apply hsc() to exception debug output (Markus Klein) (#72755)
- [BUGFIX] Copy DataHandler::enableLogging to sub objects (Morton Jonuschat) (#72357)
- [BUGFIX] Table wizard: large fields and BR-tags (Anja Leichsenring) (#72388)
- [FOLLOWUP] Fix call to not existing function (Anja Leichsenring) (#72734)
- [BUGFIX] Automatically remove BOM from files before concatenation (Christian Futterlieb) (#72648)
- [TASK] Allow access to visible content within /.well-known/ directory (Cedric Ziel) (#72712)
- [BUGFIX] ImpExp: Do not show error message for recursive relations (Markus Klein) (#72709)
- [BUGFIX] Remove debug echo from checkDeniedSuburls (Morton Jonuschat) (#72598)
- [TASK] Update copyright year to 2016 (Benni Mack) (#72501)
- [SECURITY] XSS in belog module (Morton Jonuschat) (#72475)
- [BUGFIX] Computed properties are queried in workspace context (Oliver Hader) (#66135)
- [TASK] Expose identifier and path of functional test instance (Oliver Hader) (#72450)
- [BUGFIX] Fix NumberRangeValidator using startRange and endRange (Stephan Großberndt) (#72047)