Posts by date: 2016 / 5 en https://news.typo3.com/article/archive/2016/may/blog.archive.xml Tue, 28 Jul 2026 14:18:45 +0200 https://news.typo3.com/security/advisory/typo3-ext-sa-2016-017https://news.typo3.com/security/advisory/typo3-ext-sa-2016-017#commentsTue, 31 May 2016 12:04:00 +0200Marcus Krausehttps://news.typo3.com/security/advisory/typo3-ext-sa-2016-017It has been discovered that the extension "MMC directmail subscription" (mmc_directmail_subscription) is susceptible to Information Disclosure. https://news.typo3.com/security/advisory/typo3-ext-sa-2016-016https://news.typo3.com/security/advisory/typo3-ext-sa-2016-016#commentsTue, 31 May 2016 12:03:00 +0200News teamhttps://news.typo3.com/security/advisory/typo3-ext-sa-2016-016It has been discovered that the extension "http:BL Blocking" (mh_httpbl) is susceptible to SQL Injection and Cross-Site Scripting. https://news.typo3.com/security/advisory/typo3-ext-sa-2016-015https://news.typo3.com/security/advisory/typo3-ext-sa-2016-015#commentsTue, 31 May 2016 12:02:00 +0200Marcus Krausehttps://news.typo3.com/security/advisory/typo3-ext-sa-2016-015It has been discovered that the extension "Static Methods since 2007" (div2007) is susceptible to Cross-Site Scripting. https://news.typo3.com/security/advisory/typo3-ext-sa-2016-014https://news.typo3.com/security/advisory/typo3-ext-sa-2016-014#commentsTue, 31 May 2016 12:01:00 +0200Marcus Krausehttps://news.typo3.com/security/advisory/typo3-ext-sa-2016-014It has been discovered that the extension "Questionnaire" (ke_questionnaire) is susceptible to Information Disclosure. https://news.typo3.com/security/advisory/typo3-ext-sa-2016-013https://news.typo3.com/security/advisory/typo3-ext-sa-2016-013#commentsTue, 31 May 2016 12:00:00 +0200Marcus Krausehttps://news.typo3.com/security/advisory/typo3-ext-sa-2016-013It has been discovered that the extension "Browser - TYPO3 without PHP" (browser) is susceptible to SQL Injection. https://news.typo3.com/article/this-week-in-typo3-2016-week-20https://news.typo3.com/article/this-week-in-typo3-2016-week-20#commentsFri, 27 May 2016 12:22:00 +0200ben van 't endehttps://news.typo3.com/article/this-week-in-typo3-2016-week-20In this episode special attention for this year’s T3Rookies initiative. There is a new Kid on the Block: Usergroup Greece, more bootup days, updated manuals and focus on accessibility. https://news.typo3.com/security/advisory/typo3-ext-sa-2016-012https://news.typo3.com/security/advisory/typo3-ext-sa-2016-012#commentsFri, 27 May 2016 12:01:00 +0200Marcus Krausehttps://news.typo3.com/security/advisory/typo3-ext-sa-2016-012It has been discovered that the extension "Media management" (media) is susceptible to Path Traversal. https://news.typo3.com/security/advisory/typo3-ext-sa-2016-011https://news.typo3.com/security/advisory/typo3-ext-sa-2016-011#commentsFri, 27 May 2016 12:00:00 +0200Marcus Krausehttps://news.typo3.com/security/advisory/typo3-ext-sa-2016-011It has been discovered that the extension "Formhandler" (formhandler) is susceptible to Cross-Site Scripting. https://news.typo3.com/article/typo3-cms-6225-769-and-812-releasedhttps://news.typo3.com/article/typo3-cms-6225-769-and-812-released#commentsTue, 24 May 2016 12:15:00 +0200Oliver Haderhttps://news.typo3.com/article/typo3-cms-6225-769-and-812-releasedThe TYPO3 Community announces the versions 6.2.25 LTS, 7.6.9 LTS and 8.1.2 of the TYPO3 Enterprise Content Management System. https://news.typo3.com/security/advisory/typo3-ext-sa-2016-010https://news.typo3.com/security/advisory/typo3-ext-sa-2016-010#commentsTue, 24 May 2016 12:00:00 +0200Marcus Krausehttps://news.typo3.com/security/advisory/typo3-ext-sa-2016-010It has been discovered that the extension "Frontend User Registration" (sf_register) lacks a proper access check. https://news.typo3.com/security/advisory/typo3-core-sa-2016-013https://news.typo3.com/security/advisory/typo3-core-sa-2016-013#commentsTue, 24 May 2016 10:00:00 +0200Helmut Hummelhttps://news.typo3.com/security/advisory/typo3-core-sa-2016-013It has been discovered, that TYPO3 CMS lacks an access check for Extbase actions. https://news.typo3.com/article/typo3-cms-6224-768-and-811-releasedhttps://news.typo3.com/article/typo3-cms-6224-768-and-811-released#commentsTue, 24 May 2016 10:00:00 +0200Oliver Haderhttps://news.typo3.com/article/typo3-cms-6224-768-and-811-releasedThe TYPO3 Community announces the versions 6.2.24 LTS, 7.6.8 LTS and 8.1.1 of the TYPO3 Enterprise Content Management System. https://news.typo3.com/security/advisory/typo3-psa-2016-002https://news.typo3.com/security/advisory/typo3-psa-2016-002#commentsFri, 20 May 2016 11:00:00 +0200Helmut Hummelhttps://news.typo3.com/security/advisory/typo3-psa-2016-002TYPO3 releases containing a fix for a critical vulnerability will be published Tuesday 24th of May at about 10:00 a.m. CEST (08:00 a.m. GMT). https://news.typo3.com/article/typo3-cms-6223-and-767-releasedhttps://news.typo3.com/article/typo3-cms-6223-and-767-released#commentsTue, 17 May 2016 14:45:00 +0200Oliver Haderhttps://news.typo3.com/article/typo3-cms-6223-and-767-releasedThe TYPO3 Community announces the versions 6.2.23 LTS and 7.6.7 LTS of the TYPO3 Enterprise Content Management System. https://news.typo3.com/article/typo3org-code-sprint-rosenheimhttps://news.typo3.com/article/typo3org-code-sprint-rosenheim#commentsSat, 14 May 2016 10:08:00 +0200Stefan Busemannhttps://news.typo3.com/article/typo3org-code-sprint-rosenheimCleaning the house. From 12th to 14th of may 2016 that typo3.org team met in Rosenheim. https://news.typo3.com/article/typo3camp-venlo-2016https://news.typo3.com/article/typo3camp-venlo-2016#commentsTue, 10 May 2016 13:31:00 +0200News teamhttps://news.typo3.com/article/typo3camp-venlo-2016April 22nd and 23rd marked the dates for the TYPO3Camp Venlo 2016. It was the fourth time the event took place. Together with a codesprint at MaxServ prior to T3CV this maxed out activity in the dutch TYPO3 community. https://news.typo3.com/security/advisory/typo3-psa-2016-001https://news.typo3.com/security/advisory/typo3-psa-2016-001#commentsThu, 05 May 2016 13:00:00 +0200Helmut Hummelhttps://news.typo3.com/security/advisory/typo3-psa-2016-001Multiple vulnerabilities in ImageMagick have been discovered, Remote Code Execution being one of them. https://news.typo3.com/article/typo3-v81-tightening-the-screwshttps://news.typo3.com/article/typo3-v81-tightening-the-screws#commentsTue, 03 May 2016 16:00:00 +0200TYPO3 CMS Core Teamhttps://news.typo3.com/article/typo3-v81-tightening-the-screwsToday, the TYPO3 community published the second sprint release of the v8 series of TYPO3, the enterprise content management.