TYPO3 10.4.36
8 February 2023
TYPO3 version 10.4.36 is now available (security release).
Upgrading to TYPO3 10.4.36
TYPO3 10.4.36 can be upgraded to (or installed) using any of Installatron's products. Use Installatron's optional Automatic Update feature to automatically apply TYPO3 updates as new versions are released, or use Installatron's Clone feature to duplicate an existing TYPO3 install to test the 10.4.36 upgrade prior to applying it live. Get started managing your TYPO3 installations with Installatron
What's New in TYPO3 10.4.36
Security
- [SECURITY] Prevent XSS due to wrong PATH_INFO evaluation (thanks to Benjamin Franzke)
Bug Fixes and Changes
- [TASK] Improve comments and readability in PageArgumentValidator (thanks to Benjamin Franzke)
- [BUGFIX] Avoid disabling page caches when having cHash validation enforced (thanks to Oliver Hader)
- [BUGFIX] Enforce validation when no cHash is given (thanks to Benni Mack)
- [BUGFIX] Accessing unavailable site config triggers notice instead of warning (thanks to Helmut Hummel)
- [BUGFIX] Avoid logging of invalid locales in site configuration (thanks to Benni Mack)
- [BUGFIX] Allow CSP inline styles in directly requested SVG files (thanks to Oliver Hader)
- [BUGFIX] Fix array access warning in SystemStatusUpdateTask (thanks to Helmut Hummel)
- [TASK] Update copyright year in README.md and INSTALL.md (thanks to Torben Hansen)
- [BUGFIX] Remove unneeded quote (thanks to Georg Ringer)
- [TASK] Set TYPO3 version to 10.4.35-dev (thanks to Oliver Hader)
- [RELEASE] Release of TYPO3 10.4.36 (thanks to Oliver Hader)