Release 12.1.1

This is a security release for TYPO3 12 LTS.

!!! Upgrade to Apache Solr 9.10.1

Apache Solr 9.10.1 fixes several security issues, please upgrade your Apache Solr instance!

• CVE-2025-54988: Apache Solr extraction module vulnerable to XXE attacks via XFA content in PDFs
• CVE-2026-22444: Apache Solr: Insufficient file-access checking in standalone core-creation requests
• CVE-2026-22022: Apache Solr: Unauthorized bypass of certain "predefined permission" rules in the RuleBasedAuthorizationPlugin

All Changes

• [DOCS] Update version matrix in main for current versions by @dkd-kaehm in #4506
• [SECURITY] Update to Apache Solr 9.10.1 by @dkd-friedrich in #4517

Contributors

Like always this release would not have been possible without the help from our
awesome community. Here are the contributors to this release.

• @dkd-friedrich
• @dkd-kaehm

Also a big thank you to our partners who have already concluded one of our new development participation packages such
as Apache Solr EB for TYPO3 12 LTS (Maintenance):

• 3m5. Media GmbH
• ACO Ahlmann SE & Co. KG
• AmedickSommer Neue Medien GmbH
• CDG 59
• chiliSCHARF GmbH
• Columbus Interactive GmbH
• cosmoblonde GmbH
• CPS GmbH
• Davitec GmbH
• Deutsches Literaturarchiv Marbach
• Die Medialen GmbH
• Digitale Offensive GmbH
• Eidg. Forschungsanstalt WSL
• GAYA
• Gernot Leitgab
• grips IT GmbH
• Gyldendal A/S
• HSPV NRW
• INOTEC Sicherheitstechnik GmbH
• Intersim AG
• Kassenzahnärztliche Vereinigung Bayerns (KZVB)
• La Financière agricole du Québec
• Landesinstitut für Schule und Medien Berlin-Brandenburg
• Landeskriminalamt Thüringen
• Lingner Consulting New Media GmbH
• LST AG
• medien.de mde GmbH
• MEDIENHAUS der Evangelischen Kirche in Hessen und Nassau GmbH
• mellowmessage GmbH
• NEW.EGO GmbH
• OST Ostschweizer Fachhochschule
• Provitex GmbH Provitex GmbH
• Randstad Digital
• rms. relationship marketing solutions GmbH
• Serviceplan Suisse AG
• sgalinski Internet Services
• Stratis
• Studio 9 GmbH
• SUNZINET GmbH
• Webtech AG
• Werbeagentur netzpepper
• zimmer7 GmbH

Full Changelog: 12.1.0...12.1.1