<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/">
    <channel>
        <title>Official TYPO3 news</title>
        <description>Posts by date: 2019 / 1</description>
        <language>en</language>
        <link>https://news.typo3.com/article/archive/2019/january/blog.archive.xml</link>
        <lastBuildDate>Tue, 28 Jul 2026 14:59:10 +0200</lastBuildDate>
        
    
    
        
<item><title>SkillDisplay - New Year&#039;s Resolutions 2019</title><link>https://news.typo3.com/article/skilldisplay-new-years-resolutions-2019</link><comments>https://news.typo3.com/article/skilldisplay-new-years-resolutions-2019#comments</comments><pubDate>Thu, 31 Jan 2019 15:05:00 +0100</pubDate><dc:creator>Christina Bornberg</dc:creator><guid>https://news.typo3.com/article/skilldisplay-new-years-resolutions-2019</guid><description>The year 2018 has ended and the new year 2019 has begun. As every year, it is time for New Year’s resolutions for the SkillDisplay team, as well as learners, educators and business persons! Also, the top users of SkillDisplay are announced in this blog entry.</description><enclosure
            length="384405"
            type="image/jpeg"
            url="https://news.typo3.com/fileadmin/_processed_/d/f/csm_skilldisplay_new_years_resolution_header_image_dbd410fea9.webp" /></item>


    
        
<item><title>Association Recap 2018</title><link>https://news.typo3.com/article/association-recap-2018</link><comments>https://news.typo3.com/article/association-recap-2018#comments</comments><pubDate>Fri, 25 Jan 2019 08:12:33 +0100</pubDate><dc:creator>Peter Kraume</dc:creator><guid>https://news.typo3.com/article/association-recap-2018</guid><description>The work the TYPO3 Association does mostly goes on in the background and is not as visible as development related tasks and milestones. But we are proud to be able to reflect on a solid list of achievements for 2018. 

Over the course of last year, the board had 21 regular board meetings and four Quarterly Summits. Our last in-person meet was back in October in Berlin, Germany. Here is an insight into this meeting and our work in 2018:</description><enclosure
            length="1371534"
            type="image/jpeg"
            url="https://news.typo3.com/fileadmin/_processed_/1/4/csm_IMG_2277_1d518b3b28.webp" /></item>


    
        
<item><title>TYPO3 v8.7.24 LTS released</title><link>https://news.typo3.com/article/typo3-v8724-lts-released</link><comments>https://news.typo3.com/article/typo3-v8724-lts-released#comments</comments><pubDate>Tue, 22 Jan 2019 16:30:00 +0100</pubDate><dc:creator>Zoe Legacy</dc:creator><guid>https://news.typo3.com/article/typo3-v8724-lts-released</guid><description>The TYPO3 Community announces version 8.7.24 LTS of the TYPO3 Enterprise Content Management System.</description></item>


    
        
<item><title>TYPO3 9.5.4 and 8.7.23 security releases published</title><link>https://news.typo3.com/article/typo3-954-and-8723-security-releases-published</link><comments>https://news.typo3.com/article/typo3-954-and-8723-security-releases-published#comments</comments><pubDate>Tue, 22 Jan 2019 11:30:00 +0100</pubDate><dc:creator>Zoe Legacy</dc:creator><guid>https://news.typo3.com/article/typo3-954-and-8723-security-releases-published</guid><description>The TYPO3 Community announces the versions 9.5.4 LTS and 8.7.23 LTS of the TYPO3 Enterprise Content Management System.</description></item>


    
        
<item><title>TYPO3-CORE-SA-2019-008: Arbitrary Code Execution via File List Module</title><link>https://news.typo3.com/security/advisory/typo3-core-sa-2019-008</link><comments>https://news.typo3.com/security/advisory/typo3-core-sa-2019-008#comments</comments><pubDate>Tue, 22 Jan 2019 11:07:00 +0100</pubDate><dc:creator>Zoe Legacy</dc:creator><guid>https://news.typo3.com/security/advisory/typo3-core-sa-2019-008</guid><description>It has been discovered, that TYPO3 CMS is vulnerable to arbitrary code execution.</description></item>


    
        
<item><title>TYPO3-CORE-SA-2019-007: Cross-Site Scripting in Form Framework</title><link>https://news.typo3.com/security/advisory/typo3-core-sa-2019-007</link><comments>https://news.typo3.com/security/advisory/typo3-core-sa-2019-007#comments</comments><pubDate>Tue, 22 Jan 2019 11:06:00 +0100</pubDate><dc:creator>Zoe Legacy</dc:creator><guid>https://news.typo3.com/security/advisory/typo3-core-sa-2019-007</guid><description>It has been discovered, that TYPO3 CMS is vulnerable to cross-site scripting.</description></item>


    
        
<item><title>TYPO3-CORE-SA-2019-006: Cross-Site Scripting in Bootstrap CSS toolkit</title><link>https://news.typo3.com/security/advisory/typo3-core-sa-2019-006</link><comments>https://news.typo3.com/security/advisory/typo3-core-sa-2019-006#comments</comments><pubDate>Tue, 22 Jan 2019 11:05:00 +0100</pubDate><dc:creator>Zoe Legacy</dc:creator><guid>https://news.typo3.com/security/advisory/typo3-core-sa-2019-006</guid><description>It has been discovered, that TYPO3 CMS is vulnerable to cross-site scripting.</description></item>


    
        
<item><title>TYPO3-CORE-SA-2019-005: Cross-Site Scripting in Fluid ViewHelpers</title><link>https://news.typo3.com/security/advisory/typo3-core-sa-2019-005</link><comments>https://news.typo3.com/security/advisory/typo3-core-sa-2019-005#comments</comments><pubDate>Tue, 22 Jan 2019 11:04:00 +0100</pubDate><dc:creator>Zoe Legacy</dc:creator><guid>https://news.typo3.com/security/advisory/typo3-core-sa-2019-005</guid><description>It has been discovered, that TYPO3 CMS is vulnerable to cross-site scripting.</description></item>


    
        
<item><title>TYPO3-EXT-SA-2019-004: Object Injection in extension &quot;mkmailer&quot; (mkmailer)</title><link>https://news.typo3.com/security/advisory/typo3-ext-sa-2019-004</link><comments>https://news.typo3.com/security/advisory/typo3-ext-sa-2019-004#comments</comments><pubDate>Tue, 22 Jan 2019 11:03:00 +0100</pubDate><dc:creator>Torben Hansen</dc:creator><guid>https://news.typo3.com/security/advisory/typo3-ext-sa-2019-004</guid><description>It has been discovered that the extension &quot;mkmailer&quot; (mkmailer) is susceptible to Object Injection.</description></item>


    
        
<item><title>TYPO3-CORE-SA-2019-004: Cross-Site Scripting in Language Pack Handling</title><link>https://news.typo3.com/security/advisory/typo3-core-sa-2019-004</link><comments>https://news.typo3.com/security/advisory/typo3-core-sa-2019-004#comments</comments><pubDate>Tue, 22 Jan 2019 11:03:00 +0100</pubDate><dc:creator>Zoe Legacy</dc:creator><guid>https://news.typo3.com/security/advisory/typo3-core-sa-2019-004</guid><description>It has been discovered, that TYPO3 CMS is vulnerable to cross-site scripting.</description></item>


    
        
<item><title>TYPO3-EXT-SA-2019-003: Multiple vulnerabilities in extension &quot;femanager&quot; (femanager)</title><link>https://news.typo3.com/security/advisory/typo3-ext-sa-2019-003</link><comments>https://news.typo3.com/security/advisory/typo3-ext-sa-2019-003#comments</comments><pubDate>Tue, 22 Jan 2019 11:02:00 +0100</pubDate><dc:creator>Torben Hansen</dc:creator><guid>https://news.typo3.com/security/advisory/typo3-ext-sa-2019-003</guid><description>It has been discovered that the extension &quot;femanager&quot; (femanager) is susceptible to Validation Bypass and Information Disclosure</description></item>


    
        
<item><title>TYPO3-CORE-SA-2019-003: Broken Access Control in Localization Handling</title><link>https://news.typo3.com/security/advisory/typo3-core-sa-2019-003</link><comments>https://news.typo3.com/security/advisory/typo3-core-sa-2019-003#comments</comments><pubDate>Tue, 22 Jan 2019 11:02:00 +0100</pubDate><dc:creator>Zoe Legacy</dc:creator><guid>https://news.typo3.com/security/advisory/typo3-core-sa-2019-003</guid><description>It has been discovered, that TYPO3 CMS is susceptible to broken access control.</description></item>


    
        
<item><title>TYPO3-EXT-SA-2019-002: Multiple vulnerabilities in extension &quot;typo3_forum&quot; (typo3_forum)</title><link>https://news.typo3.com/security/advisory/typo3-ext-sa-2019-002</link><comments>https://news.typo3.com/security/advisory/typo3-ext-sa-2019-002#comments</comments><pubDate>Tue, 22 Jan 2019 11:01:00 +0100</pubDate><dc:creator>Torben Hansen</dc:creator><guid>https://news.typo3.com/security/advisory/typo3-ext-sa-2019-002</guid><description>It has been discovered that the extension &quot;typo3_forum&quot; (typo3_forum) is susceptible to Broken Access Control and Improper Filesystem Permissions.</description></item>


    
        
<item><title>TYPO3-CORE-SA-2019-002: Security Misconfiguration for Backend User Accounts</title><link>https://news.typo3.com/security/advisory/typo3-core-sa-2019-002</link><comments>https://news.typo3.com/security/advisory/typo3-core-sa-2019-002#comments</comments><pubDate>Tue, 22 Jan 2019 11:01:00 +0100</pubDate><dc:creator>Zoe Legacy</dc:creator><guid>https://news.typo3.com/security/advisory/typo3-core-sa-2019-002</guid><description>It has been discovered, that TYPO3 CMS is susceptible to security misconfiguration.</description></item>


    
        
<item><title>TYPO3-CORE-SA-2019-001: Information Disclosure of Installed Extensions</title><link>https://news.typo3.com/security/advisory/typo3-core-sa-2019-001</link><comments>https://news.typo3.com/security/advisory/typo3-core-sa-2019-001#comments</comments><pubDate>Tue, 22 Jan 2019 11:00:00 +0100</pubDate><dc:creator>Zoe Legacy</dc:creator><guid>https://news.typo3.com/security/advisory/typo3-core-sa-2019-001</guid><description>It has been discovered, that TYPO3 CMS is susceptible to information disclosure.</description></item>


    
        
<item><title>TYPO3-EXT-SA-2019-001: Multiple vulnerabilities in extension &quot;phpMyAdmin&quot; (phpmyadmin)</title><link>https://news.typo3.com/security/advisory/typo3-ext-sa-2019-001</link><comments>https://news.typo3.com/security/advisory/typo3-ext-sa-2019-001#comments</comments><pubDate>Tue, 22 Jan 2019 11:00:00 +0100</pubDate><dc:creator>Torben Hansen</dc:creator><guid>https://news.typo3.com/security/advisory/typo3-ext-sa-2019-001</guid><description>It has been discovered that the extension &quot;phpMyAdmin&quot; (phpmyadmin) is susceptible to Cross-Site Scripting, CSRF, File Inclusion and Remote Code Execution.</description></item>


    
        
<item><title>TYPO3-PSA-2019-001: Possible Arbitrary Code Execution in CommandUtility API</title><link>https://news.typo3.com/security/advisory/typo3-psa-2019-001</link><comments>https://news.typo3.com/security/advisory/typo3-psa-2019-001#comments</comments><pubDate>Tue, 22 Jan 2019 10:00:00 +0100</pubDate><dc:creator>Zoe Legacy</dc:creator><guid>https://news.typo3.com/security/advisory/typo3-psa-2019-001</guid><description>It has been discovered that TYPO3 CMS can be vulnerable to arbitrary code execution.</description></item>


    
        
<item><title>TYPO3-PSA-2019-002: Username and Email Address Enumeration</title><link>https://news.typo3.com/security/advisory/typo3-psa-2019-002</link><comments>https://news.typo3.com/security/advisory/typo3-psa-2019-002#comments</comments><pubDate>Tue, 22 Jan 2019 10:00:00 +0100</pubDate><dc:creator>Zoe Legacy</dc:creator><guid>https://news.typo3.com/security/advisory/typo3-psa-2019-002</guid><description>It has been discovered, that usernames and email addresses may be enumerated with brute-force techniques, when using validators in order to ensure a unique username or email address.</description></item>


    
        
<item><title>TYPO3-PSA-2019-003: Cross-Site Scripting in Flash component (ELTS)</title><link>https://news.typo3.com/security/advisory/typo3-psa-2019-003</link><comments>https://news.typo3.com/security/advisory/typo3-psa-2019-003#comments</comments><pubDate>Tue, 22 Jan 2019 10:00:00 +0100</pubDate><dc:creator>Zoe Legacy</dc:creator><guid>https://news.typo3.com/security/advisory/typo3-psa-2019-003</guid><description>It has been discovered, that TYPO3 CMS is vulnerable to cross-site scripting.</description></item>


    
        
<item><title>Mark Your Calendar! TYPO3 Events in Q1 2019 and Beyond</title><link>https://news.typo3.com/article/mark-your-calendar-typo3-events-in-q1-2019-and-beyond</link><comments>https://news.typo3.com/article/mark-your-calendar-typo3-events-in-q1-2019-and-beyond#comments</comments><pubDate>Thu, 17 Jan 2019 13:27:48 +0100</pubDate><dc:creator>Jörg Ems</dc:creator><guid>https://news.typo3.com/article/mark-your-calendar-typo3-events-in-q1-2019-and-beyond</guid><description>TYPO3 events are an invaluable opportunity to make new business connections, meet like-minded people, gain knowledge, and contribute to the TYPO3 Project. Whether it’s the the annual TYPO3 Conference, TYPO3 East Europe or TYPO3camps - Find out what’s going on where in the next couple of months.</description><enclosure
            length="238951"
            type="image/jpeg"
            url="https://news.typo3.com/fileadmin/_processed_/7/6/csm_mark_your_calendar_header_image_c7395ebcae.webp" /></item>


    
        
<item><title>Developing the TYPO3 Website Builder ‘toujou’</title><link>https://news.typo3.com/article/developing-the-typo3-website-builder-toujou</link><comments>https://news.typo3.com/article/developing-the-typo3-website-builder-toujou#comments</comments><pubDate>Thu, 10 Jan 2019 12:49:00 +0100</pubDate><dc:creator>Luana Valentini</dc:creator><guid>https://news.typo3.com/article/developing-the-typo3-website-builder-toujou</guid><description>Developing a website builder that provides perfectly fine TYPO3 websites. Read about DFAU’s motivation to boost website quality. Serving companies. Kick-starting websites. Supporting the community. The mission is in its name. This is ‘toujou’.</description><enclosure
            length="279566"
            type="image/png"
            url="https://news.typo3.com/fileadmin/_processed_/7/f/csm_toujou_TYPO3-Blog_a7a1c5a6a2.webp" /></item>


    
        
<item><title>December 2018: Developer Appreciation Day (DAD)</title><link>https://news.typo3.com/article/december-2018-developer-appreciation-day-dad</link><comments>https://news.typo3.com/article/december-2018-developer-appreciation-day-dad#comments</comments><pubDate>Thu, 03 Jan 2019 12:01:00 +0100</pubDate><dc:creator>Susanne Moog</dc:creator><guid>https://news.typo3.com/article/december-2018-developer-appreciation-day-dad</guid><description>Happy New Year, everyone! On this first Developer Appreciation Day (DAD) of 2019, we’d like to acknowledge all the hard working developers who continuously contribute to the TYPO3 project: Thank you ever so much, folks! Find December’s most important names and some truly impressive numbers in this article.</description><enclosure
            length="583027"
            type="image/jpeg"
            url="https://news.typo3.com/fileadmin/_processed_/4/6/csm_december_2018_dad_header_image_7dc20d2425.webp" /></item>


    



    </channel>
</rss>
