Official TYPO3 news

TYPO3 4.1.5 - "hotfix edition"

Ingmar Schlecht — Fri, 14 Dec 2007 14:30:00 +0100

The TYPO3 Core Team announces version 4.1.5 of TYPO3. The release is a hotfix necessary due to a critical bug of the localization system introduced with the earlier 4.1.4 release.

TYPO3 4.1.4 and 4.0.8

Ingmar Schlecht — Mon, 10 Dec 2007 12:00:00 +0100

The TYPO3 Core Team announces versions 4.1.4 and 4.0.8 of the TYPO3 Enterprise Content Management System.

TYPO3-SECURITY-BULLETIN-20071210-1-SQL-INJECTION-IN-SYSTEM-EXTENSION-INDEXED-SEARCH: TYPO3 Security Bulletin 20071210-1: SQL Injection in system extension indexed_search

Lars Houmark — Mon, 10 Dec 2007 11:00:00 +0100

It has been discovered that the system extension indexed_search is vulnerable to a SQL Injection flaw.

TYPO3-20071210-1: SQL Injection in system extension indexed_search

Zoe Legacy — Mon, 10 Dec 2007 10:00:00 +0100

It has been discovered that the system extension indexed_search is vulnerable to a SQL Injection flaw.

Help Wanted: 5.0 Jobs

Robert Lemke — Thu, 06 Dec 2007 12:18:00 +0100

The TYPO3 Style guide has been updated

Rasmus Skjoldan — Fri, 23 Nov 2007 10:56:00 +0100

The TYPO3 online style guide has been updated (a little while ago) with guidelines regarding the subbrand system, the use of photography, basic layout rules and extended logo use.

TYPO3 4.2 Alpha 2

Ingo Renner — Thu, 15 Nov 2007 22:52:00 +0100

The core team is proud to announce the second Alpha of TYPO3 version 4.2.

T3N Magazine releases six current English-TYPO3-Articles

Zoe Legacy — Tue, 06 Nov 2007 18:44:00 +0100

For the 9th time T3N Magazine for Open Source and Web updated their article database. Six stories from the current issue (No. 9) have recently been translated for your free reading pleasure.

TYPO3 4.1.3

Ingmar Schlecht — Mon, 22 Oct 2007 20:00:00 +0200

The TYPO3 Core Team announces version 4.1.3 of the TYPO3 Enterprise Content Management System.

Core-development mailinglist now open for community involvement

Ingmar Schlecht — Mon, 15 Oct 2007 09:00:00 +0200

During this year's T3CON a couple of core team members have got together and brainstormed on how processes in the community could be optimized. The idea was born to open up the core development mailinglist to all community members willing to join.

T3CON07: Slides of 5.0-related talks online

News team — Tue, 25 Sep 2007 14:30:00 +0200

Using PHP with mod_fcgid

Michael Stucki — Sat, 22 Sep 2007 12:06:00 +0200

The upcoming version 4.2 of TYPO3 will depend on PHP 5.2. Here is some help on migrating your server.

TYPO3-SECURITY-BULLETIN-20070919-1-MULTIPLE-VULNERABILITIES-IN-EXTENSION-MM-FORUM: TYPO3 Security Bulletin 20070919-1: Multiple vulnerabilities in extension mm_forum

Lars Houmark — Wed, 19 Sep 2007 14:36:00 +0200

It has been discovered that the extension mm_forum is vulnerable to multiple SQL Injection attacks and multiple XSS flaws alongside other vulnerabilities.

TYPO3 4.2 Alpha 1

Ingo Renner — Fri, 07 Sep 2007 17:55:00 +0200

The core team is proud to announce the first Alpha of TYPO3 version 4.2.

TYPO3 present at FrOSCon open source conference

Sander Vogels — Wed, 22 Aug 2007 09:27:00 +0200

The Department of Computer Science of the University of Applied Sciences Bonn-Rhein-Sieg is again organising the Froscon conference. FrOSCon is a two day conference on Free Software and Open Source, taking place for the second time on August, 25th/26th(this weekend!) at the Fachhochschule Bonn-Rhein-Sieg in Sankt Augustin near the cities of Bonn and Cologne. TYPO3 will be presented at this conference amongst other projects.

Roadmap to TYPO3 4.2

Ingo Renner — Thu, 16 Aug 2007 21:14:00 +0200

The TYPO3 Core Team is proud to announce the roadmap for the upcoming 4.2 release of the TYPO3 Enterprise Content Managment System.

TYPO3-SECURITY-BULLETIN-20070801-1-MULTIPLE-VULNERABILITIES-IN-EXTENSION-VE-GUESTBOOK: TYPO3 Security Bulletin 20070801-1: Multiple vulnerabilities in extension ve_guestbook

Lars Houmark — Wed, 01 Aug 2007 19:50:00 +0200

It has been discovered that the extension ve_guestbook is vulnerable to SQL Injection attacks. Also, a Cross Site Scripting issue has been detected.

TYPO3-20070801-1: Multiple vulnerabilities in extension ve_guestbook

Zoe Legacy — Wed, 01 Aug 2007 10:00:00 +0200

It has been discovered that the extension ve_guestbook is vulnerable to SQL Injection attacks. Also, a Cross Site Scripting issue has been detected.

T3N Magazine releases five current TYPO3 Articles

Thomas Hempel — Fri, 20 Jul 2007 13:56:00 +0200

It is time again for a bunch of T3N articles - seven pages from the current issue (No. 8) have been translated for your reading pleasure.

TYPO3-SECURITY-BULLETIN-20070719-1-REMOTE-SHELL-COMMAND-EXECUTION-IN-EXTENSIONS-EMBEDDING-PHPMAILER: TYPO3 Security Bulletin 20070719-1: Remote shell command execution in extensions embedding PHPMailer

Lars Houmark — Thu, 19 Jul 2007 16:30:00 +0200

Multiple TYPO3 extensions is affected by the third party tool PHPMailer, which is vulnerable to a remote shell command execution.

TYPO3-20070719-1: Remote shell command execution in extensions embedding PHPMailer

Zoe Legacy — Thu, 19 Jul 2007 10:00:00 +0200

Multiple TYPO3 extensions is affected by the third party tool PHPMailer, which is vulnerable to a remote shell command execution.

TYPO3 4.1.2 and 4.0.7

Michael Stucki — Tue, 17 Jul 2007 16:12:00 +0200

The TYPO3 Core Team announces versions 4.1.2 and 4.0.7 of the TYPO3 Enterprise Content Management System.

TYPO3-SECURITY-BULLETIN-TYPO3-20070716-2-INFORMATION-DISCLOSURE-FROM-EXTENSION-PHPMYADMIN: TYPO3 Security Bulletin TYPO3-20070716-2: Information Disclosure from Extension phpmyadmin

Lars Houmark — Mon, 16 Jul 2007 23:50:00 +0200

An information disclosure issue has been found in the phpmyadmin extension of TYPO3 that may give access to phpinfo() information in special cases. The standalone version of phpmyadmin is not affected.

TYPO3-SECURITY-BULLETIN-20070716-1-CROSS-SITE-SCRIPTING-VULNERABILITY-IN-FAQ: TYPO3 Security Bulletin 20070716-1: Cross Site Scripting vulnerability in faq

Lars Houmark — Mon, 16 Jul 2007 13:17:00 +0200

It has been discovered that the extension faq is susceptible to cross site scripting (XSS) attacks, making it possible to execute arbitrary JavaScript.

TYPO3-20070716-2: Information Disclosure from phpmyadmin

Ekkehard Gümbel — Mon, 16 Jul 2007 10:00:00 +0200

TYPO3-20070716-1: Cross Site Scripting vulnerability in faq

Zoe Legacy — Mon, 16 Jul 2007 10:00:00 +0200

It has been discovered that the extension faq is susceptible to cross site scripting (XSS) attacks, making it possible to execute arbitrary JavaScript.

TYPO3-SECURITY-BULLETIN-TYPO3-20070712-1-MULTIPLE-VULNERABILITIES-IN-CIVSERV: TYPO3 Security Bulletin TYPO3-20070712-1: Multiple vulnerabilities in civserv

Lars Houmark — Thu, 12 Jul 2007 12:17:00 +0200

Multiple vulnerabilities has been found. Incorrect handling of input from GET/POST-variables, and allowing an attacker to execute XSS and/or SQL Injection attacks.

TYPO3-20070712-1: Multiple vulnerabilities in civserv

Zoe Legacy — Thu, 12 Jul 2007 10:00:00 +0200

Multiple vulnerabilities has been found in the extension civserv: Incorrect handling of input from GET/POST-variables, and allowing an attacker to execute XSS and/or SQL Injection attacks.

TYPO3-SECURITY-BULLETIN-TYPO3-20070710-1-SQL-INJECTION-IN-FECHANGEPASSWORD: TYPO3 Security Bulletin TYPO3-20070710-1: SQL Injection in fechangepassword

Lars Houmark — Tue, 10 Jul 2007 20:06:00 +0200

It has been discovered that the extension fechangepassword is open for a SQL injection when updating the password.

TYPO3-20070710-1: SQL Injection in fechangepassword

Zoe Legacy — Tue, 10 Jul 2007 10:00:00 +0200

It has been discovered that the extension fechangepassword is open for a SQL injection when updating the password.