Posts by date: 2019 / 12 en https://news.typo3.com/article/archive/2019/december/blog.archive.xml Tue, 28 Jul 2026 15:18:48 +0200 https://news.typo3.com/article/issues-you-might-run-into-when-upgrading-typo3-extensionshttps://news.typo3.com/article/issues-you-might-run-into-when-upgrading-typo3-extensions#commentsThu, 19 Dec 2019 10:04:00 +0100Frank Näglerhttps://news.typo3.com/article/issues-you-might-run-into-when-upgrading-typo3-extensionsWhen considering to upgrade your TYPO3 installation, one of the bigger parts you need to take care of is the upgrade of all installed extensions. Some of them might be your own, others are public extensions. https://news.typo3.com/article/typo3-v6247-and-7640-elts-releasedhttps://news.typo3.com/article/typo3-v6247-and-7640-elts-released#commentsTue, 17 Dec 2019 14:35:00 +0100Andreas Kienasthttps://news.typo3.com/article/typo3-v6247-and-7640-elts-releasedStill sticking to an older version of TYPO3? There may be good reasons for doing so. Today, TYPO3 v6.2.47 and 7.6.40 ELTS have been released. Staying on top of maintenance and security updates should be a top priority - Gain peace of mind by opting for one of TYPO3 GmbH’s Extended Support offers! https://news.typo3.com/security/advisory/typo3-ext-sa-2019-023https://news.typo3.com/security/advisory/typo3-ext-sa-2019-023#commentsTue, 17 Dec 2019 13:04:00 +0100Torben Hansenhttps://news.typo3.com/security/advisory/typo3-ext-sa-2019-023It has been discovered that the extension "femanager" (femanager) is susceptible to Cross-Site-Request-Forgery (CSRF). https://news.typo3.com/security/advisory/typo3-ext-sa-2019-022https://news.typo3.com/security/advisory/typo3-ext-sa-2019-022#commentsTue, 17 Dec 2019 13:03:00 +0100Torben Hansenhttps://news.typo3.com/security/advisory/typo3-ext-sa-2019-022It has been discovered that the extension "femanager direct mail subscription" (femanager_dmail_subscribe) is susceptible to Privilege Escalation. https://news.typo3.com/security/advisory/typo3-ext-sa-2019-021https://news.typo3.com/security/advisory/typo3-ext-sa-2019-021#commentsTue, 17 Dec 2019 13:02:00 +0100Torben Hansenhttps://news.typo3.com/security/advisory/typo3-ext-sa-2019-021It has been discovered that the extension "File List" (file_list) is susceptible to Cross Site Scripting. https://news.typo3.com/security/advisory/typo3-ext-sa-2019-020https://news.typo3.com/security/advisory/typo3-ext-sa-2019-020#commentsTue, 17 Dec 2019 13:01:00 +0100Torben Hansenhttps://news.typo3.com/security/advisory/typo3-ext-sa-2019-020It has been discovered that the extension "Change password for frontend users" (fe_change_pwd) is susceptible to Cross-Site-Request-Forgery (CSRF). https://news.typo3.com/security/advisory/typo3-ext-sa-2019-019https://news.typo3.com/security/advisory/typo3-ext-sa-2019-019#commentsTue, 17 Dec 2019 12:00:00 +0100Torben Hansenhttps://news.typo3.com/security/advisory/typo3-ext-sa-2019-019It has been discovered that the extension "MKSamlAuth" (mksamlauth) is susceptible to Broken Authentication and Authentication Bypass. https://news.typo3.com/article/typo3-1022-9513-and-8730-security-releases-publishedhttps://news.typo3.com/article/typo3-1022-9513-and-8730-security-releases-published#commentsTue, 17 Dec 2019 11:25:44 +0100Oliver Haderhttps://news.typo3.com/article/typo3-1022-9513-and-8730-security-releases-publishedThe TYPO3 Community announces the versions 10.2.2, 9.5.13 LTS and 8.7.30 LTS of the TYPO3 Enterprise Content Management System. https://news.typo3.com/security/advisory/typo3-core-sa-2019-026https://news.typo3.com/security/advisory/typo3-core-sa-2019-026#commentsTue, 17 Dec 2019 11:16:57 +0100Oliver Haderhttps://news.typo3.com/security/advisory/typo3-core-sa-2019-026It has been discovered that TYPO3 CMS is vulnerable to insecure deserialization. https://news.typo3.com/security/advisory/typo3-core-sa-2019-025https://news.typo3.com/security/advisory/typo3-core-sa-2019-025#commentsTue, 17 Dec 2019 11:13:41 +0100Oliver Haderhttps://news.typo3.com/security/advisory/typo3-core-sa-2019-025It has been discovered that TYPO3 CMS is vulnerable to SQL injection. https://news.typo3.com/security/advisory/typo3-core-sa-2019-024https://news.typo3.com/security/advisory/typo3-core-sa-2019-024#commentsTue, 17 Dec 2019 11:09:49 +0100Andreas Fernandezhttps://news.typo3.com/security/advisory/typo3-core-sa-2019-024It has been discovered that TYPO3 CMS is vulnerable to directory traversal. https://news.typo3.com/security/advisory/typo3-core-sa-2019-023https://news.typo3.com/security/advisory/typo3-core-sa-2019-023#commentsTue, 17 Dec 2019 11:05:10 +0100Andreas Fernandezhttps://news.typo3.com/security/advisory/typo3-core-sa-2019-023It has been discovered that TYPO3 CMS is vulnerable to cross-site scripting. https://news.typo3.com/security/advisory/typo3-core-sa-2019-022https://news.typo3.com/security/advisory/typo3-core-sa-2019-022#commentsTue, 17 Dec 2019 11:02:15 +0100Frank Näglerhttps://news.typo3.com/security/advisory/typo3-core-sa-2019-022It has been discovered that TYPO3 CMS is vulnerable to cross-site scripting in Link Handling. https://news.typo3.com/security/advisory/typo3-core-sa-2019-021https://news.typo3.com/security/advisory/typo3-core-sa-2019-021#commentsTue, 17 Dec 2019 10:57:26 +0100Frank Näglerhttps://news.typo3.com/security/advisory/typo3-core-sa-2019-021It has been discovered that TYPO3 CMS is vulnerable to cross-site scripting. https://news.typo3.com/security/advisory/typo3-psa-2019-011https://news.typo3.com/security/advisory/typo3-psa-2019-011#commentsTue, 17 Dec 2019 09:44:28 +0100Oliver Haderhttps://news.typo3.com/security/advisory/typo3-psa-2019-011It has been discovered that TYPO3 CMS can be vulnerable to insecure deserialization. https://news.typo3.com/security/advisory/typo3-psa-2019-010https://news.typo3.com/security/advisory/typo3-psa-2019-010#commentsTue, 17 Dec 2019 09:44:28 +0100Oliver Haderhttps://news.typo3.com/security/advisory/typo3-psa-2019-010It has been discovered that TYPO3 is susceptible to cross-site scripting. https://news.typo3.com/article/keep-your-typo3-v76-site-safe-with-eltshttps://news.typo3.com/article/keep-your-typo3-v76-site-safe-with-elts#commentsThu, 12 Dec 2019 16:35:00 +0100Julian Böhmhttps://news.typo3.com/article/keep-your-typo3-v76-site-safe-with-eltsSoftware delivers the most value when fully updated and supported - your enterprise’s CMS is no exception. Keep your TYPO3 v7.6 website safe and increase your return on investment (ROI) by opting for our Extended Long Term Support (ELTS). https://news.typo3.com/article/november-2019-developer-appreciation-day-dadhttps://news.typo3.com/article/november-2019-developer-appreciation-day-dad#commentsMon, 09 Dec 2019 02:01:00 +0100Susanne Mooghttps://news.typo3.com/article/november-2019-developer-appreciation-day-dadOn this Developer Appreciation Day (DAD), we’d like to appreciate all the hard working developers once more who continuously contribute to the TYPO3 Project: Thank you ever so much, folks! Find November's most important names and some really impressive numbers in our recent post. https://news.typo3.com/article/typo3-version-102-treasure-huntinghttps://news.typo3.com/article/typo3-version-102-treasure-hunting#commentsTue, 03 Dec 2019 11:00:00 +0100Michael Schamshttps://news.typo3.com/article/typo3-version-102-treasure-huntingTYPO3 v10.2 is out now — the last sprint release of the year. A lot of functionality was developed during the TYPO3 Initiative Week (T3INIT19) and TYPO3 v10.2 contains some of these components. We are excited to see that we made a big step forward to shape the next LTS release.