Posts by date: 2019 / 0 en https://news.typo3.com/article/archive/2019/blog.archive.xml Mon, 12 Oct 2026 00:12:09 +0200 https://news.typo3.com/article/issues-you-might-run-into-when-upgrading-typo3-extensionshttps://news.typo3.com/article/issues-you-might-run-into-when-upgrading-typo3-extensions#commentsThu, 19 Dec 2019 10:04:00 +0100Frank Näglerhttps://news.typo3.com/article/issues-you-might-run-into-when-upgrading-typo3-extensionsWhen considering to upgrade your TYPO3 installation, one of the bigger parts you need to take care of is the upgrade of all installed extensions. Some of them might be your own, others are public extensions. https://news.typo3.com/article/typo3-v6247-and-7640-elts-releasedhttps://news.typo3.com/article/typo3-v6247-and-7640-elts-released#commentsTue, 17 Dec 2019 14:35:00 +0100Andreas Kienasthttps://news.typo3.com/article/typo3-v6247-and-7640-elts-releasedStill sticking to an older version of TYPO3? There may be good reasons for doing so. Today, TYPO3 v6.2.47 and 7.6.40 ELTS have been released. Staying on top of maintenance and security updates should be a top priority - Gain peace of mind by opting for one of TYPO3 GmbH’s Extended Support offers! https://news.typo3.com/security/advisory/typo3-ext-sa-2019-023https://news.typo3.com/security/advisory/typo3-ext-sa-2019-023#commentsTue, 17 Dec 2019 13:04:00 +0100Torben Hansenhttps://news.typo3.com/security/advisory/typo3-ext-sa-2019-023It has been discovered that the extension "femanager" (femanager) is susceptible to Cross-Site-Request-Forgery (CSRF). https://news.typo3.com/security/advisory/typo3-ext-sa-2019-022https://news.typo3.com/security/advisory/typo3-ext-sa-2019-022#commentsTue, 17 Dec 2019 13:03:00 +0100Torben Hansenhttps://news.typo3.com/security/advisory/typo3-ext-sa-2019-022It has been discovered that the extension "femanager direct mail subscription" (femanager_dmail_subscribe) is susceptible to Privilege Escalation. https://news.typo3.com/security/advisory/typo3-ext-sa-2019-021https://news.typo3.com/security/advisory/typo3-ext-sa-2019-021#commentsTue, 17 Dec 2019 13:02:00 +0100Torben Hansenhttps://news.typo3.com/security/advisory/typo3-ext-sa-2019-021It has been discovered that the extension "File List" (file_list) is susceptible to Cross Site Scripting. https://news.typo3.com/security/advisory/typo3-ext-sa-2019-020https://news.typo3.com/security/advisory/typo3-ext-sa-2019-020#commentsTue, 17 Dec 2019 13:01:00 +0100Torben Hansenhttps://news.typo3.com/security/advisory/typo3-ext-sa-2019-020It has been discovered that the extension "Change password for frontend users" (fe_change_pwd) is susceptible to Cross-Site-Request-Forgery (CSRF). https://news.typo3.com/security/advisory/typo3-ext-sa-2019-019https://news.typo3.com/security/advisory/typo3-ext-sa-2019-019#commentsTue, 17 Dec 2019 12:00:00 +0100Torben Hansenhttps://news.typo3.com/security/advisory/typo3-ext-sa-2019-019It has been discovered that the extension "MKSamlAuth" (mksamlauth) is susceptible to Broken Authentication and Authentication Bypass. https://news.typo3.com/article/typo3-1022-9513-and-8730-security-releases-publishedhttps://news.typo3.com/article/typo3-1022-9513-and-8730-security-releases-published#commentsTue, 17 Dec 2019 11:25:44 +0100Oliver Haderhttps://news.typo3.com/article/typo3-1022-9513-and-8730-security-releases-publishedThe TYPO3 Community announces the versions 10.2.2, 9.5.13 LTS and 8.7.30 LTS of the TYPO3 Enterprise Content Management System. https://news.typo3.com/security/advisory/typo3-core-sa-2019-026https://news.typo3.com/security/advisory/typo3-core-sa-2019-026#commentsTue, 17 Dec 2019 11:16:57 +0100Oliver Haderhttps://news.typo3.com/security/advisory/typo3-core-sa-2019-026It has been discovered that TYPO3 CMS is vulnerable to insecure deserialization. https://news.typo3.com/security/advisory/typo3-core-sa-2019-025https://news.typo3.com/security/advisory/typo3-core-sa-2019-025#commentsTue, 17 Dec 2019 11:13:41 +0100Oliver Haderhttps://news.typo3.com/security/advisory/typo3-core-sa-2019-025It has been discovered that TYPO3 CMS is vulnerable to SQL injection. https://news.typo3.com/security/advisory/typo3-core-sa-2019-024https://news.typo3.com/security/advisory/typo3-core-sa-2019-024#commentsTue, 17 Dec 2019 11:09:49 +0100Andreas Fernandezhttps://news.typo3.com/security/advisory/typo3-core-sa-2019-024It has been discovered that TYPO3 CMS is vulnerable to directory traversal. https://news.typo3.com/security/advisory/typo3-core-sa-2019-023https://news.typo3.com/security/advisory/typo3-core-sa-2019-023#commentsTue, 17 Dec 2019 11:05:10 +0100Andreas Fernandezhttps://news.typo3.com/security/advisory/typo3-core-sa-2019-023It has been discovered that TYPO3 CMS is vulnerable to cross-site scripting. https://news.typo3.com/security/advisory/typo3-core-sa-2019-022https://news.typo3.com/security/advisory/typo3-core-sa-2019-022#commentsTue, 17 Dec 2019 11:02:15 +0100Frank Näglerhttps://news.typo3.com/security/advisory/typo3-core-sa-2019-022It has been discovered that TYPO3 CMS is vulnerable to cross-site scripting in Link Handling. https://news.typo3.com/security/advisory/typo3-core-sa-2019-021https://news.typo3.com/security/advisory/typo3-core-sa-2019-021#commentsTue, 17 Dec 2019 10:57:26 +0100Frank Näglerhttps://news.typo3.com/security/advisory/typo3-core-sa-2019-021It has been discovered that TYPO3 CMS is vulnerable to cross-site scripting. https://news.typo3.com/security/advisory/typo3-psa-2019-011https://news.typo3.com/security/advisory/typo3-psa-2019-011#commentsTue, 17 Dec 2019 09:44:28 +0100Oliver Haderhttps://news.typo3.com/security/advisory/typo3-psa-2019-011It has been discovered that TYPO3 CMS can be vulnerable to insecure deserialization. https://news.typo3.com/security/advisory/typo3-psa-2019-010https://news.typo3.com/security/advisory/typo3-psa-2019-010#commentsTue, 17 Dec 2019 09:44:28 +0100Oliver Haderhttps://news.typo3.com/security/advisory/typo3-psa-2019-010It has been discovered that TYPO3 is susceptible to cross-site scripting. https://news.typo3.com/article/keep-your-typo3-v76-site-safe-with-eltshttps://news.typo3.com/article/keep-your-typo3-v76-site-safe-with-elts#commentsThu, 12 Dec 2019 16:35:00 +0100Julian Böhmhttps://news.typo3.com/article/keep-your-typo3-v76-site-safe-with-eltsSoftware delivers the most value when fully updated and supported - your enterprise’s CMS is no exception. Keep your TYPO3 v7.6 website safe and increase your return on investment (ROI) by opting for our Extended Long Term Support (ELTS). https://news.typo3.com/article/november-2019-developer-appreciation-day-dadhttps://news.typo3.com/article/november-2019-developer-appreciation-day-dad#commentsMon, 09 Dec 2019 02:01:00 +0100Susanne Mooghttps://news.typo3.com/article/november-2019-developer-appreciation-day-dadOn this Developer Appreciation Day (DAD), we’d like to appreciate all the hard working developers once more who continuously contribute to the TYPO3 Project: Thank you ever so much, folks! Find November's most important names and some really impressive numbers in our recent post. https://news.typo3.com/article/typo3-version-102-treasure-huntinghttps://news.typo3.com/article/typo3-version-102-treasure-hunting#commentsTue, 03 Dec 2019 11:00:00 +0100Michael Schamshttps://news.typo3.com/article/typo3-version-102-treasure-huntingTYPO3 v10.2 is out now — the last sprint release of the year. A lot of functionality was developed during the TYPO3 Initiative Week (T3INIT19) and TYPO3 v10.2 contains some of these components. We are excited to see that we made a big step forward to shape the next LTS release. https://news.typo3.com/article/how-we-chose-to-support-xdebughttps://news.typo3.com/article/how-we-chose-to-support-xdebug#commentsThu, 28 Nov 2019 14:01:58 +0100Mathias SchreiberDaniel Fauhttps://news.typo3.com/article/how-we-chose-to-support-xdebugAs an open-source service company, TYPO3 GmbH is based on creating revenue to support our open source software project. Since Xdebug saves our developers actual working time each day, we’ve decided to invest in one of three available support packages. Read this article and learn why you should do so too. https://news.typo3.com/article/skill-verification-access-for-the-typo3-academic-committeehttps://news.typo3.com/article/skill-verification-access-for-the-typo3-academic-committee#commentsThu, 21 Nov 2019 12:32:46 +0100Zoe Legacyhttps://news.typo3.com/article/skill-verification-access-for-the-typo3-academic-committeeAcademic institutions are invited to set up their organization as part of a network of institutions that can verify TYPO3 skills according to the SkillDisplay SkillSets for TYPO3 CMS. https://news.typo3.com/article/skilldisplay-find-an-employee-with-the-web-skills-you-really-needhttps://news.typo3.com/article/skilldisplay-find-an-employee-with-the-web-skills-you-really-need#commentsThu, 21 Nov 2019 10:34:53 +0100Christina Bornberghttps://news.typo3.com/article/skilldisplay-find-an-employee-with-the-web-skills-you-really-needBy creating a job profile with SkillDisplay, a department can choose from a set of skills. Thus, they can assist the HR team with their requirements and the future employees as they can determine how much their skills match the job requirements. https://news.typo3.com/article/how-is-typo3-performing-in-your-agencyhttps://news.typo3.com/article/how-is-typo3-performing-in-your-agency#commentsFri, 15 Nov 2019 09:12:00 +0100Luana Valentinihttps://news.typo3.com/article/how-is-typo3-performing-in-your-agencyHow is TYPO3 performing in your agency? TYPO3 Partner DFAU conducted a survey among Association Members to find out about website project scopes and potential revenue losses. See all results and conclusions. https://news.typo3.com/article/typo3-initiative-week-insider-reporthttps://news.typo3.com/article/typo3-initiative-week-insider-report#commentsWed, 13 Nov 2019 10:29:00 +0100Susi Mooghttps://news.typo3.com/article/typo3-initiative-week-insider-reportTYPO3 Initiative Week was introduced this year to bring together members of TYPO3 Initiatives to drive development forward. Core development is now organized into Strategic Initiatives where teams can focus on a targeted effort on one task. This week-long event provided a chance for everyone to connect across the initiatives. https://news.typo3.com/article/impressions-of-developer-days-from-the-documentation-team0https://news.typo3.com/article/impressions-of-developer-days-from-the-documentation-team0#commentsMon, 11 Nov 2019 01:27:00 +0100Ronald Meeuwissenhttps://news.typo3.com/article/impressions-of-developer-days-from-the-documentation-team0The 14th TYPO3 Conference is a wrap! This is the main event for the business community in the TYPO3 ecosystem. Sharing knowledge around building your business and improving the impact of your TYPO3 projects helps ensure the TYPO3 community is productive and sustainable. https://news.typo3.com/article/october-2019-developer-appreciation-day-dadhttps://news.typo3.com/article/october-2019-developer-appreciation-day-dad#commentsThu, 07 Nov 2019 02:01:00 +0100Susanne Mooghttps://news.typo3.com/article/october-2019-developer-appreciation-day-dadAs always, a new month starts off with Developer Appreciation Day (DAD): We‘d like to tip our hats to the devoted TYPO3 developers who contributed to the TYPO3 Project during October. Thanks a lot, everyone! Find the contributor’s names and some truly impressive numbers in our recent article. https://news.typo3.com/article/impressions-of-developer-days-from-the-documentation-teamhttps://news.typo3.com/article/impressions-of-developer-days-from-the-documentation-team#commentsMon, 04 Nov 2019 20:27:52 +0100Sybille Petershttps://news.typo3.com/article/impressions-of-developer-days-from-the-documentation-teamIn this post, the Documentation Team and contributors share their impressions from TYPO3 Developer Days 2019. They had sessions to talk about the state of documentation, to demonstrate how to contribute, and to generate new ideas and feedback. https://news.typo3.com/article/impressions-from-t3dd19https://news.typo3.com/article/impressions-from-t3dd19#commentsMon, 04 Nov 2019 20:26:22 +0100Jörg Hambuchhttps://news.typo3.com/article/impressions-from-t3dd19We gathered impressions from TYPO3 Developer Days 2019 in Karlsruhe. Thank you to the speakers, sponsors, and attendees for making this a brilliant event. https://news.typo3.com/article/typo3-9511-and-8729-maintenance-releases-publishedhttps://news.typo3.com/article/typo3-9511-and-8729-maintenance-releases-published#commentsWed, 30 Oct 2019 22:00:00 +0100Benni Mackhttps://news.typo3.com/article/typo3-9511-and-8729-maintenance-releases-publishedThe TYPO3 Community announces the versions 9.5.11 LTS and 8.7.29 LTS of the TYPO3 Enterprise Content Management System. https://news.typo3.com/security/advisory/typo3-psa-2019-009https://news.typo3.com/security/advisory/typo3-psa-2019-009#commentsWed, 30 Oct 2019 20:00:00 +0100Oliver Haderhttps://news.typo3.com/security/advisory/typo3-psa-2019-009It has been discovered that passwords were truncated during authentication process on typo3.org services.