Official TYPO3 news

Apply now for Google Summer of Code with TYPO3

Ingo Renner — Tue, 30 Mar 2010 14:34:00 +0200

Student application for Google Summer of Code is now open.

The new TYPO3-chief Jürgen Egeling in an interview, "To move the project forward we need every TYPO3 enthusiast"

Zoe Legacy — Mon, 29 Mar 2010 22:58:00 +0200

At the annual meeting of the TYPO3 Association Jürgen Egeling has taken over the chairmanship previously held by Kasper Skårhøj. Juergen Egeling is the CEO of a Karlsruhe-based TYPO3 Agency, that has supported the TYPO3 project for years now, including the organization of the annual TYPO3 conference T3CON. Jan Christe of t3n Magazine asked the new chairman of the TYPO3 Association a few questions about his plans and the biggest challenges facing the TYPO3 project.

The Bug Days reloaded

François Suter — Mon, 29 Mar 2010 20:52:00 +0200

Friday, March 26 marked the return of the Bug Days after several months of winter sleep. It was a very successful rebirth.

Google Summer of Code 2010 application accepted

ben van 't ende — Sat, 27 Mar 2010 19:50:00 +0100

This last week the projects for GSoC 2010 were announced and TYPO3's application for Google Summer of Code was amongst the accepted projects. We are again participating and have already determined ways on how to improve the experience of working with the TYPO3 community. We already got quite a number of student applications, but are keen on also having you on board.

FTI becomes Platinum Sponsor of the TYPO3 Association

Søren Schaffstein — Fri, 19 Mar 2010 11:57:00 +0100

Tour operator from Munich invests in the Enterprise Content Management specialist TYPO3.

Release of TYPO3 4.4alpha2 - Development Snapshot #2

Benni Mack — Tue, 16 Mar 2010 12:17:00 +0100

Today, the TYPO3 community released the second alpha version of TYPO3 4.4. This is another snapshot of the current v4 development, and is considered a sneak preview of what is coming in June 2010. This is also the last snapshot before the feature freeze in early April 2010. After that, it's all about straightening out the package.

TYPO3-SA-2010-007: Cross-Site Scripting vulnerability in extension mm_forum (mm_forum)

Marcus Krause — Tue, 16 Mar 2010 10:00:00 +0100

It has been discovered that the extension mm_forum (mm_forum) is vulnerable to Cross-Site Scripting.

TYPO3-SA-2010-006: Multiple vulnerabilities in third party extensions

Marcus Krause — Tue, 16 Mar 2010 10:00:00 +0100

Several vulnerabilities have been found in the following third party TYPO3 extensions: Brainstorming (brainstorming), Power Extension Manager (ch_lightem), Sellector.com Widget Integration (chsellector), Educator (educator), MK Wastebasket (mk_wastebasket), myDashboard (mydashboard), CleanDB (nf_cleandb), Diocese of Portsmouth Database (pd_diocesedatabase), Reports Logfile View (reports_logview), SAV Filter Alphabetic (sav_filter_abc), SAV Filter Selectors (sav_filter_selectors), SAV Filter Months (sav_filter_months), Book Reviews (sk_bookreview), Simple Gallery (sk_simplegallery), Typo3 Quixplorer (t3quixplorer), TYPO3 Security - Salted user password hashes (t3sec_saltedpw), UserTask Center, recent (taskcenter_recent), TGM-Newsletter (tgm_newsletter), CleanDB - DBAL (tmsw_cleandb), Meet Travelmates (travelmate), YATSE - Yet another TYPO3 search engine (yatse)

SECURITY-ISSUES-IN-SEVERAL-THIRD-PARTY-TYPO3-EXTENSIONS-INCLUDING-MM-FORUM-MM-FORUM: Security issues in several third party TYPO3 extensions including "mm_forum" (mm_forum)

Helmut Hummel — Mon, 15 Mar 2010 22:32:00 +0100

A security vulnerabilities has been discovered in the third party TYPO3 extensions including mm_forum, brainstorming, ch_lightem, chsellector, educator, mk_wastebasket, mydashboard, nf_cleandb, pd_diocesedatabase, reports_logview, sav_filter_abc, sav_filter_selectors, sav_filter_months, sk_bookreview, sk_simplegallery, t3quixplorer, t3sec_saltedpw, taskcenter_recent, tgm_newsletter, tmsw_cleandb, travelmate, yatse

The Bug Days are back!

François Suter — Fri, 12 Mar 2010 09:00:00 +0100

The Bug Days went dormant for a couple of months, but they're not dead! Join us on Friday, March 26th.

Extbase Quickstart Documentation Released

Franz Ripfel — Tue, 09 Mar 2010 00:00:00 +0100

Google Summer of Code 2010 coming up

Ingo Renner — Tue, 02 Mar 2010 21:58:00 +0100

TYPO3-SA-2010-005: Blind SQL Injection vulnerability in extension Calendar Base (cal)

Marcus Krause — Tue, 02 Mar 2010 10:00:00 +0100

It has been discovered that the extension Calendar Base (cal) is vulnerable to Blind SQL Injection.

SECURITY-ISSUE-IN-THIRD-PARTY-TYPO3-EXTENSION-CALENDAR-BASE-CAL: Security issue in third party TYPO3 extension "Calendar Base" (cal)

Helmut Hummel — Tue, 02 Mar 2010 10:00:00 +0100

A security vulnerabilitiy has been discovered in the third party TYPO3 extension "Calendar Base".