The TYPO3 Association attaches great importance to security and technological progress. For this reason, there is a clear release strategy. Every main release (v8, v9, v10, etc.) is provided with security updates free of charge for 3 years from the date of release as part of Long Term Support (LTS). After that, it is possible to purchase an ELTS (Extended Long Term Support) licence from TYPO3 GmbH.
According to the current status:
TYPO3 v7 is no longer supported as of 01.12.2021
can TYPO3 v8 be operated with ELTS until 31.5.2023(costs per year approx. 2.500,-€)
can TYPO3 v9 still be operated with ELTS until 30.9.2024
will TYPO3 v10 be available as LTS version until 30.4.2023
will TYPO3 v11 be available as LTS version until 31.10.2024
TYPO3 is based on the PHP programming language. PHP also follows a release plan.
All PHP versions including 7.2 have expired
PHP 7.3 expires on 6.12.2021
PHP 7.4 expires on 28.11.2022
the latest PHP version is 8.0.
The relevant TYPO3 versions 8,9,10 and 11 correlate with the current PHP versions as follows:
This matrix only refers to the core system. Extensions may need to be adapted, but in any case tested.
The PHP support requires that the latest TYPO3 version (recognisable by the 3rd digit, e.g. 10.4.16) is used. Therefore, before switching to a new PHP version, carry out a Minor-/Security Update.
Why you should take mails from your provider seriously
PHP, in contrast to TYPO3 (which can be called an "application"), is a basic technology close to the system. The use of PHP versions is very strictly limited by the providers according to the above release plan. This is partly due to the fact that many hosting packages run on a "shared server". This means that several customers of a provider "share" a server. Security gaps at one customer (e.g. when using an outdated PHP version) can therefore also make the systems of other customers (who use modern software) vulnerable. For this reason, one cannot expect a delay from the provider.
Perform TYPO3 updates promptly
The individual TYPO3 versions only support certain PHP versions (see roadmap https://typo3.org/cms/roadmap). From version TYPO3 v8 upwards, PHP 7.4 is supported. For the successor version PHP 8.0, there is still no official statement from the TYPO3 Association. However, it can be assumed that support will be offered from version 10 onwards (otherwise an LTS would not be possible either).
Because of the current situation and with a view to a stable, powerful and secure TYPO3 installation in the long term, we recommend that you update to version 10.