TYPO3 News & Events Hub
What’s New & What’s Coming
Extbase Quickstart Documentation Released
During the TYPO3 snowboard tour (T3BOARD10) in Laax last week the Extbase quickstart documentation was improved and finished by Franz Ripfel from A.BE.ZET. Its aim is to help you get a first impression of how Extbase based extensions are working and...
Read moreGoogle Summer of Code 2010 coming up
We are excited that Google Summer of Code is underway again this year. After having had a successful first Google Summer of Code last year</link>, we are happy to also apply for GSoC 2010. We're looking for help to make this years Summer of Code...
Blind SQL Injection vulnerability in extension Calendar Base (cal)
It has been discovered that the extension Calendar Base (cal) is vulnerable to Blind SQL Injection.
Security issue in third party TYPO3 extension "Calendar Base" (cal)
A security vulnerabilitiy has been discovered in the third party TYPO3 extension "Calendar Base".
"What ever happened to..." the results of T3UXW09?
You might have heard of last years' TYPO3 coding week "TYPO3 User eXperience Week" where 30 TYPO3 enthusiasts met in a castle to bring TYPO3 closer to the user. This meant that these coders, designers and managers worked on all the things the user is...
Release of TYPO3 4.4alpha1 and the current status
Today, the TYPO3 community released the first alpha version of TYPO3 4.4. Although it's far from a final release, which is scheduled for a release in mid June, we're doing a lot of fine tuning and groundwork. You can consider this alpha version as a...
TYPO3 4.3.2 and 4.2.12 released
The TYPO3 Core Team announces versions 4.3.2 and 4.2.12 of the TYPO3 Enterprise Content Management System.
Security issues found in TYPO3 core
It has been discovered that TYPO3 Core is vulnerable to Cross-Site Scripting, Authentication Bypass for frontend users and Information Disclosure.
Vulnerabilities in TYPO3 Core
It has been discovered that TYPO3 Core is vulnerable to Cross-Site Scripting, Authentication Bypass for frontend users and Information Disclosure.
Support for TYPO3 4.0 is officially over
The end of life of TYPO3 4.0 was announced as a kind of footnote at the bottom of the security bulletin released on October 22, 2009. This triggered some discussion inside the Core Team and it was decided that the end of life of a given TYPO3 branch...
New maintenance policy
The TYPO3 Core Team is pleased to announce its new official maintenance policy for TYPO3 4.x.
TYPO3's first Google Summer of Code
The TYPO3 community was amazed when the project was selected to participate in Google Summer of Code 2009 – TYPO3's first Summer of Code ever. TYPO3 is an enterprise class Content Management System with its origin in Denmark with a 10 year history of...
typo3.org Relaunch
Relaunching typo3.org is finally on a solid road to success. d.k.d Internet Service GmbH from Frankfurt, Germany has been given the task to officially manage the project and handle the first step to implement the new design.
Security issues in third party TYPO3 extensions including t3blog
Security vulnerabilities have been discovered in third party TYPO3 extensions t3blog, eventmanagement, game_articledb, ml_career, ml_surprisecalendar, searchajaxgoogle and spr_downloadmanager
Security issues in third party TYPO3 extensions including t3blog (copy 1)
Security vulnerabilities have been discovered in third party TYPO3 extensions t3blog, eventmanagement, game_articledb, ml_career, ml_surprisecalendar, searchajaxgoogle and spr_downloadmanager
Security issues in third party TYPO3 extensions including t3blog (copy 2)
Security vulnerabilities have been discovered in third party TYPO3 extensions t3blog, eventmanagement, game_articledb, ml_career, ml_surprisecalendar, searchajaxgoogle and spr_downloadmanager
Multiple vulnerabilities in third party extensions
Several vulnerabilities have been found in the following third party TYPO3 extensions: Event Manager (eventmanagement), Game Article DB (game_articledb), Simple career (ml_career), Surprise Calendar (ml_surprisecalendar), Search Api Ajax Google...
Multiple vulnerabilities in extension T3BLOG (t3blog)
It has been discovered that the extension T3BLOG (t3blog) is vulnerable to SQL Injection and Cross–Site Scripting.
FLOW3 1.0.0 alpha 7 released
The FLOW3 core team is delighted to announce the release of the seventh alpha release of FLOW3.
Security issue found in TYPO3 core
It has been discovered that using the openid system extension in TYPO3 4.3.0 can lead to an authentication bypass under certain circumstances.