Official TYPO3 news

DAM 1.1.0 has been released

ben van 't ende — Wed, 31 Dec 2008 12:00:00 +0100

The DAM development team is proud to announce the release of version 1.1.0 of Digital Asset Management (DAM), the bugfix Release after "The Big Sleep".

SECURITY-ISSUES-IN-SEVERAL-THIRD-PARTY-TYPO3-EXTENSIONS: Security issues in several third party TYPO3 extensions

Henning Pingel — Mon, 22 Dec 2008 14:21:00 +0100

Security vulnerabilities have been discovered in the following third party TYPO3 extensions: "phpMyAdmin" (phpmyadmin), "DR Wiki - Typo3 Wiki extension" (dr_wiki), "WEC Discussion Forum" (wec_discussion), "Vox populi" (mv_vox_populi), "SB Universal Plugin" (SBuniplug), "Simple File Browser" (simplefilebrowser), "TU-Clausthal ODIN" (tuc_odin), "TU-Clausthal Staff" (tuc_staff), "WEBERkommunal Facilities" (wes_facilities).

TYPO3-20081222-4: TYPO3 Security Bulletin

Zoe Legacy — Mon, 22 Dec 2008 10:00:00 +0100

Several vulnerabilities have been found in the following third party TYPO3 extensions: "Vox populi" (mv_vox_populi), "SB Universal Plugin" (SBuniplug), "Simple File Browser" (simplefilebrowser), "TU-Clausthal ODIN" (tuc_odin), "TU-Clausthal Staff" (tuc_staff), "WEBERkommunal Facilities" (wes_facilities)

TYPO3-20081222-3: TYPO3 Security Bulletin

Zoe Legacy — Mon, 22 Dec 2008 10:00:00 +0100

It has been discovered that the extension DR Wiki - Typo3 Wiki extension (dr_wiki) is vulnerable to Cross-Site Scripting (XSS).

TYPO3-20081222-2: TYPO3 Security Bulletin

Zoe Legacy — Mon, 22 Dec 2008 10:00:00 +0100

It has been discovered that the extension WEC Discussion Forum (wec_discussion) is vulnerable to Cross-Site Scripting (XSS) and SQL injection.

TYPO3-20081222-1: TYPO3 Security Bulletin

Zoe Legacy — Mon, 22 Dec 2008 10:00:00 +0100

It has been discovered that the extension phpMyAdmin (phpmyadmin) is vulnerable to SQL injections via XSRF.

TYPO3 Coding Weekend in Karlsruhe

Oliver Hader — Mon, 15 Dec 2008 19:00:00 +0100

Podcast about Transition Days published

Robert Lemke — Thu, 11 Dec 2008 10:03:00 +0100

UPDATE-ON-RECENT-TYPO3ORG-ISSUE: Update on recent typo3.org issue

Zoe Legacy — Mon, 01 Dec 2008 17:49:00 +0100

Sponsoring of Form Project Completed

François Suter — Fri, 28 Nov 2008 21:00:00 +0100

I am very pleased to announce that the financing of the new FORM sponsored project has been completed. The main supporters of this project were a network of German universities.

IMPORTANT-SECURITY-WARNING: Important security warning

Zoe Legacy — Fri, 14 Nov 2008 00:00:00 +0100

TYPO3-20081113-2: Cross-Site Scripting vulnerability in TYPO3 Core

Zoe Legacy — Thu, 13 Nov 2008 10:00:00 +0100

It has been discovered that the frontend plugin of system extension "felogin" is vulnerable to Cross-Site Scripting (XSS).

TYPO3-20081113-1: Cross-Site Scripting vulnerability in TYPO3 Core

Zoe Legacy — Thu, 13 Nov 2008 10:00:00 +0100

It has been discovered that the backend module "file" is vulnerable to Cross-Site Scripting (XSS).

CROSS-SITE-SCRIPTING-VULNERABILITIES-IN-TYPO3-CORE: Cross Site Scripting vulnerabilities in TYPO3 core

Henning Pingel — Thu, 13 Nov 2008 07:36:00 +0100

It has been discovered that TYPO3 core is susceptible to two Cross Site Scripting (XSS) issues. The frontend plugin of system extension "felogin" and the backend module "file" are vulnerable.

TYPO3 4.3 Alpha 1

Oliver Hader — Wed, 12 Nov 2008 21:00:00 +0100

The TYPO3 Core Team is proud to announce the first alpha release of TYPO3 version 4.3. Get a short overview of the most important changes.

T3CON09 Dallas, TX, April 16-18 2009

Jürgen Egeling — Mon, 10 Nov 2008 12:00:00 +0100

TYPO3-20081110-2: TYPO3 Security Bulletin

Zoe Legacy — Mon, 10 Nov 2008 10:00:00 +0100

Several vulnerabilities have been found in the following third party TYPO3 extensions: "advcalendar" (advCalendar), "CMS Poll system" (cms_poll), "eLuna Page Comments" (eluna_pagecomments), "Wir ber uns" [sic] (fsmi_people), "Dictionary" (rtgdictionary)

TYPO3-20081110-1: TYPO3 Security Bulletin

Zoe Legacy — Mon, 10 Nov 2008 10:00:00 +0100

It has been discovered that the extension phpMyAdmin (phpmyadmin) is vulnerable to Cross-Site Scripting.

SECURITY-ISSUES-IN-TYPO3-EXTENSION-PHPMYADMIN-AND-SEVERAL-OTHER-THIRD-PARTY-EXTENSIONS: Security issues in TYPO3 extension phpMyAdmin and several other third party extensions

Henning Pingel — Mon, 10 Nov 2008 07:16:00 +0100

Security issues have been discovered in the following third party TYPO3 extensions: "phpMyAdmin" (phpmyadmin), "advCalendar" (advcalendar), "CMS Poll system" (cms_poll), "eLuna Page Comments" (eluna_pagecomments), "Wir ber uns" [sic] (fsmi_people), "Dictionary" (rtgdictionary).

T3N Magazine releases three current TYPO3-Articles in English (October 2008)

Michael Stucki — Wed, 29 Oct 2008 14:50:00 +0100

For the 12th time the T3N Magazine for Open Source and Web 2.0 updated their article database. Three stories from the last issue (No. 12) have recently been translated for your free reading pleasure.

Bug Day coming up this Friday, Oct 31st

Ingo Renner — Tue, 28 Oct 2008 16:00:00 +0100

If you're an extension developer and never really got around the TYPO3 core, this is your chance to get insight.

Become a certified TYPO3 integrator

Dominic Brander — Mon, 27 Oct 2008 18:19:00 +0100

After a long preparation phase the certification team finally made it!
The first public beta test has successfully taken place during the T3CON 08 in Berlin. Register now and become one of the very first certified "TYPO3 integrator".

A Common Roadmap for TYPO3

Robert Lemke — Fri, 24 Oct 2008 16:08:00 +0200

After T3CON08 21 developers, most of them member of the TYPO3 core team, met for one week to discuss possible strategies for a smooth migration from version 4 to 5. The outcome is a new joint roadmap, visionary new features for both branches and a unified core team with a common vision for future versions of TYPO3.

FLOW3 slides online

Robert Lemke — Thu, 23 Oct 2008 13:35:00 +0200

Slides from most of the talks and presentations about FLOW3 are now online.

TYPO3-20081020-2: SQL Injection in extension Commerce (commerce)

Zoe Legacy — Mon, 20 Oct 2008 10:00:00 +0200

It has been discovered that the extension Commerce (commerce) is vulnerable to SQL Injection attacks.

TYPO3-20081020-1: TYPO3 Security Bulletin

Zoe Legacy — Mon, 20 Oct 2008 10:00:00 +0200

Several vulnerabilities have been found in the following third party TYPO3 extensions: JobControl (dmmjobcontrol), Econda Plugin (econda), Frontend Users View (feusersview), Mannschaftsliste (kiddog_playerlist), M1 Intern (m1_intern), Simple survey (simplesurvey), Page Improvements (sm_pageimprovements)

SECURITY-ISSUES-IN-TYPO3-EXTENSION-COMMERCE-AND-SEVERAL-OTHER-THIRD-PARTY-EXTENSIONS: Security issues in TYPO3 extension Commerce and several other third party extensions

Henning Pingel — Mon, 20 Oct 2008 08:17:00 +0200

Security issues have been discovered in the following third party TYPO3 extensions: Commerce (commerce), JobControl (dmmjobcontrol), Econda Plugin (econda), Frontend Users View (feusersview), Mannschaftsliste (kiddog_playerlist), M1 Intern (m1_intern), Simple survey (simplesurvey), Page Improvements (sm_pageimprovements)

T3BOARD09 Registration to start on Monday, Oct. 20th

Daniel Hinderink — Fri, 17 Oct 2008 15:10:00 +0200

The registration for next years snowboard tour starts on Monday, the 20th of October 2008.

TYPO3-20080924-2: TYPO3 Security Bulletin

Zoe Legacy — Wed, 24 Sep 2008 10:00:00 +0200

It has been discovered that the extension freeCap CAPTCHA (sr_freecap) is vulnerable to Cross-Site Scripting.

TYPO3-20080924-1: TYPO3 Security Bulletin

Zoe Legacy — Wed, 24 Sep 2008 10:00:00 +0200

It has been discovered that the extension phpMyAdmin (phpmyadmin) is vulnerable to Cross-Site Scripting.