Benjamin Franzke
and
Benni Mack
The following information is relevant for all Composer-based installations of all supported TYPO3 versions that have been set up or updated between Tuesday, 12 November 2024 11:25 UTC and Wednesday, 13 November 2024 12:40 UTC.
TYPO3 installations using the so-called Classic Mode are not affected.
Do I have a Composer-based or a Classic Mode TYPO3 Installation?
Along with many other popular PHP-based software platforms, TYPO3’s dependency system is based on the Composer dependency manager. In a Composer-based installation, you use the composer command in the command line, it calculates the optimal library and extension versions for your system and loads them dynamically into your TYPO3 installation.
TYPO3's Classic Mode is a TYPO3 installation created from pre-packaged files, often downloaded as a .zip or .tar.gz file. This file is made available without system-specific optimizations and uses TYPO3's built-in Extension Manager to download and upgrade extension.
It has been discovered that, for a limited time, a weak dependency range in the composer package symfony/type-info caused an incompatible version of their optional dependency phpstan/phpdoc-parser to be installed.
This caused Extbase runtime errors on all TYPO3 instances that have been updated in the mentioned date range if they used Extbase plugins. Please see TYPO3 bug report #105582 for more information.
TYPO3 released a hotfix of the typo3/cms-cli package (version 3.1.2) on Wednesday, 13 November 2024 12:40 UTC. This release ensures that subsequent updates are not affected. We recommend everyone who updated TYPO3 between the mentioned dates to perform a downgrade to phpstan/phpdoc-parser version 1 by running this Composer command:
composer update phpstan/phpdoc-parser --with "phpstan/phpdoc-parser:^1"
As of 13 November 2024 14:52 UTC, this issue has also been fixed upstream by Symfony (version 7.1.8).