[TASK] Release 6.4.5

Relates: https://projekte.in2code.de/issues/82884

Author: sebastianstein

Documentation/Changelog/Index.rst

@@ -14,6 +14,19 @@ Changelog
    :Changes:
       Release Description
 
+-
+      :Version: 6.4.5
+      :Date: 2026-08-25
+      :Changes:
+
+      * [SECURITY] Dispatch ImpersonateEvent only after authorization check
+      * [SECURITY] Use timing-safe comparison in HashUtility::validHash
+      * [SECURITY] Prevent user disclosure via user argument in showAction
+      * [SECURITY] Require valid adminHash for admin profile change confirmation
+      * [SECURITY] Prevent usergroup privilege escalation in frontend forms
+      * [SECURITY] Prevent admin confirmation bypass via resend confirmation mail
+      * [SECURITY] Require valid adminHash for admin registration confirmation
+
 -
       :Version: 6.4.4
       :Date: 2026-08-20

Documentation/Upgrade/Index.rst

@@ -8,11 +8,11 @@ Upgrade
 
 .. only:: html
 
-	:ref:`v6.4.4` | :ref:`v6.3.4` | :ref:`v6.0` |:ref:`v5.2` | :ref:`v5.0` | :ref:`v4.0`
+	:ref:`v6.4.5` | :ref:`v6.3.4` | :ref:`v6.0` |:ref:`v5.2` | :ref:`v5.0` | :ref:`v4.0`
 
-.. _v6.4.4:
+.. _v6.4.5:
 
-to version 6.4.4 (security update)
+to version 6.4.5 (security update)
 ----------------------------------
 
 This security release closes multiple security issues:

ext_emconf.php

@@ -23,7 +23,7 @@
     'modify_tables' => '',
     'clearCacheOnLoad' => 0,
     'lockType' => '',
-    'version' => '6.4.4',
+    'version' => '6.4.5',
     'constraints' => [
         'depends' => [
             'typo3' => '10.0.0-10.4.99',