Posts by date: 2019 / 5 en https://news.typo3.com/article/archive/2019/may/blog.archive.xml Tue, 28 Jul 2026 14:18:48 +0200 https://news.typo3.com/article/mark-your-calendar-typo3-events-in-q2-2019-and-beyondhttps://news.typo3.com/article/mark-your-calendar-typo3-events-in-q2-2019-and-beyond#commentsThu, 30 May 2019 15:00:00 +0200Jörg Emshttps://news.typo3.com/article/mark-your-calendar-typo3-events-in-q2-2019-and-beyondTYPO3 events are an invaluable opportunity to make new business connections, meet like-minded people, gain knowledge, and contribute to the TYPO3 project. Find out what’s going on where in the next couple of months. https://news.typo3.com/article/docs-typo3-org-gets-new-infrastructurehttps://news.typo3.com/article/docs-typo3-org-gets-new-infrastructure#commentsWed, 29 May 2019 09:35:42 +0200Daniel Siepmannhttps://news.typo3.com/article/docs-typo3-org-gets-new-infrastructuredocs.typo3.org is now hosted by TYPO3 Inc. and gets a modern setup using Bamboo as CI (Continuous Integration) solution for rendering. https://news.typo3.com/article/making-typo3-global-cms-africa-summit-2019https://news.typo3.com/article/making-typo3-global-cms-africa-summit-2019#commentsTue, 28 May 2019 16:18:21 +0200Daniel Homorodeanhttps://news.typo3.com/article/making-typo3-global-cms-africa-summit-2019The TYPO3 Association was among the sponsors of the CMS Africa Summit 2019. We came away inspired with new ideas and direct connections to one of the fastest-growing tech communities in the world. https://news.typo3.com/article/recap-of-the-combined-sprint-of-typo3-org-and-server-teamhttps://news.typo3.com/article/recap-of-the-combined-sprint-of-typo3-org-and-server-team#commentsFri, 24 May 2019 14:00:00 +0200Andreas Beutelhttps://news.typo3.com/article/recap-of-the-combined-sprint-of-typo3-org-and-server-teamReport of combined sprint of TYPO3.org and Server Team in Stuttgart, May 2019. https://news.typo3.com/article/skilldisplay-recap-typo3camp-vienna-2019https://news.typo3.com/article/skilldisplay-recap-typo3camp-vienna-2019#commentsThu, 23 May 2019 15:00:00 +0200Christina Bornberghttps://news.typo3.com/article/skilldisplay-recap-typo3camp-vienna-2019SkillDisplay was the educational partner of TYPO3Camp Vienna 2019. Being a barcamp, sessions of the camp were held and chosen by the participants. Due to the course of the event, some SkillSets that suited the held sessions were created. https://news.typo3.com/article/join-us-at-the-fluid-30-workshop-in-denmarkhttps://news.typo3.com/article/join-us-at-the-fluid-30-workshop-in-denmark#commentsWed, 22 May 2019 11:13:51 +0200Claus Duehttps://news.typo3.com/article/join-us-at-the-fluid-30-workshop-in-denmarkJoin the mission to prepare Fluid version 3.0, help us improve documentation—and enjoy a couple of days in beautiful Denmark. https://news.typo3.com/article/event-report-from-typo3-camp-viennahttps://news.typo3.com/article/event-report-from-typo3-camp-vienna#commentsTue, 21 May 2019 08:47:38 +0200Elli Ludwigsonhttps://news.typo3.com/article/event-report-from-typo3-camp-viennaEarlier this month TYPO3 community members gathered at TYPO3 Camp Vienna for a weekend of learning, connecting, and camaraderie. https://news.typo3.com/article/recap-docs-team-joins-typo3-org-sprint-wiesbadenhttps://news.typo3.com/article/recap-docs-team-joins-typo3-org-sprint-wiesbaden#commentsMon, 20 May 2019 13:08:42 +0200Sybille Petershttps://news.typo3.com/article/recap-docs-team-joins-typo3-org-sprint-wiesbadenThe Documentation Team joined the typo3.org Team Sprint in Wiesbaden, Germany from Feb 10-13. Two of us from the Docs team met up for the sprint, Daniel Siepmann, of Codappix GmbH, and myself, Sybille Peters, from Carl von Ossietzky Universität Oldenburg. https://news.typo3.com/article/typo3-v957-lts-and-v8726-lts-releasedhttps://news.typo3.com/article/typo3-v957-lts-and-v8726-lts-released#commentsWed, 15 May 2019 13:24:47 +0200Benni Mackhttps://news.typo3.com/article/typo3-v957-lts-and-v8726-lts-releasedThe TYPO3 Community announces the versions 9.5.7 LTS and 8.7.26 LTS of the TYPO3 Enterprise Content Management System. https://news.typo3.com/article/report-on-the-typo3-org-team-sprint-in-india-march-2019https://news.typo3.com/article/report-on-the-typo3-org-team-sprint-in-india-march-2019#commentsTue, 14 May 2019 17:53:48 +0200Stefan Busemannhttps://news.typo3.com/article/report-on-the-typo3-org-team-sprint-in-india-march-2019For the first time our team met in India. We were invited by NITSAN to Bhavnagar from 28-31 March. https://news.typo3.com/article/t3dd-2019-sponsor-one-of-the-biggest-typo3-events-of-the-yearhttps://news.typo3.com/article/t3dd-2019-sponsor-one-of-the-biggest-typo3-events-of-the-year#commentsMon, 13 May 2019 14:42:33 +0200News teamhttps://news.typo3.com/article/t3dd-2019-sponsor-one-of-the-biggest-typo3-events-of-the-yearIf you would like to support TYPO3 Developer Days 2019, we would be happy to hear from you! https://news.typo3.com/article/rebooting-the-content-grouphttps://news.typo3.com/article/rebooting-the-content-group#commentsMon, 13 May 2019 08:22:38 +0200News teamhttps://news.typo3.com/article/rebooting-the-content-groupThe TYPO3 Content Group is reorganizing, rebooting, and growing! We’re looking for new members, come join our next meeting on Tuesday, 28 May 2019, 10:30 CET. It’s really easy to get involved: find out first-hand from our current contributors! https://news.typo3.com/article/outsmarting-the-lifecycle-of-outdated-websites-with-toujouhttps://news.typo3.com/article/outsmarting-the-lifecycle-of-outdated-websites-with-toujou#commentsThu, 09 May 2019 15:00:00 +0200Luana Valentinihttps://news.typo3.com/article/outsmarting-the-lifecycle-of-outdated-websites-with-toujouPrevent outdated TYPO3 websites on old PHP versions from going offline! Read about the journey of TYPO3 GmbH’s partner DFAU with "toujou": A website builder that is leading to outsmart the end-of-life cycle as a tool for agencies and companies. https://news.typo3.com/security/advisory/typo3-psa-2019-008https://news.typo3.com/security/advisory/typo3-psa-2019-008#commentsWed, 08 May 2019 09:25:38 +0200Oliver Haderhttps://news.typo3.com/security/advisory/typo3-psa-2019-008It has been discovered that the protection against insecure deserialization can be by-passed in Phar Stream Wrapper component. https://news.typo3.com/security/advisory/typo3-psa-2019-007https://news.typo3.com/security/advisory/typo3-psa-2019-007#commentsWed, 08 May 2019 09:04:48 +0200Oliver Haderhttps://news.typo3.com/security/advisory/typo3-psa-2019-007It has been discovered that the protection against insecure deserialization can be by-passed in Phar Stream Wrapper component. https://news.typo3.com/article/typo3-v7636-and-6242-elts-releasedhttps://news.typo3.com/article/typo3-v7636-and-6242-elts-released#commentsTue, 07 May 2019 16:15:00 +0200Anja Leichsenringhttps://news.typo3.com/article/typo3-v7636-and-6242-elts-releasedAre you still sticking to an older version of TYPO3? Recently, TYPO3 v7.6.36 and 6.2.42 ELTS have been released. Staying on top of maintenance and security updates should be a top priority. Gain peace of mind by opting for one of TYPO3 GmbH’s ELTS offers. https://news.typo3.com/article/teamleader-meeting-march-april-2019https://news.typo3.com/article/teamleader-meeting-march-april-2019#commentsTue, 07 May 2019 15:51:00 +0200Stefan Busemannhttps://news.typo3.com/article/teamleader-meeting-march-april-2019The leaders of the official teams and committees of the TYPO3 projects met to their monthly meeting. Highlight was a workshop, to improve communication. Once in a month our leaders met in an online meeting, to coordinate all efforts for our project. In March and April we had two meetings. One regular online meeting and one real life meeting in Leipzig. https://news.typo3.com/article/typo3-956-and-8725-security-releases-publishedhttps://news.typo3.com/article/typo3-956-and-8725-security-releases-published#commentsTue, 07 May 2019 14:00:00 +0200Benni Mackhttps://news.typo3.com/article/typo3-956-and-8725-security-releases-publishedThe TYPO3 Community announces the versions 9.5.6 LTS and 8.7.25 LTS of the TYPO3 Enterprise Content Management System. https://news.typo3.com/security/advisory/typo3-ext-sa-2019-013https://news.typo3.com/security/advisory/typo3-ext-sa-2019-013#commentsTue, 07 May 2019 11:08:00 +0200Torben Hansenhttps://news.typo3.com/security/advisory/typo3-ext-sa-2019-013It has been discovered that the extension "comsolit Suggest" (comsolit_suggest) is susceptible to SQL Injection. https://news.typo3.com/security/advisory/typo3-ext-sa-2019-012https://news.typo3.com/security/advisory/typo3-ext-sa-2019-012#commentsTue, 07 May 2019 11:07:00 +0200Torben Hansenhttps://news.typo3.com/security/advisory/typo3-ext-sa-2019-012It has been discovered that the extension "Yet Another Gallery" (yag) is susceptible to Arbitrary File Upload. https://news.typo3.com/security/advisory/typo3-ext-sa-2019-011https://news.typo3.com/security/advisory/typo3-ext-sa-2019-011#commentsTue, 07 May 2019 11:06:00 +0200Torben Hansenhttps://news.typo3.com/security/advisory/typo3-ext-sa-2019-011It has been discovered that the extension "Event Calender" (pits_wd_calender) is susceptible to SQL Injection. https://news.typo3.com/security/advisory/typo3-ext-sa-2019-010https://news.typo3.com/security/advisory/typo3-ext-sa-2019-010#commentsTue, 07 May 2019 11:05:00 +0200Torben Hansenhttps://news.typo3.com/security/advisory/typo3-ext-sa-2019-010It has been discovered that the extension "Instagram" (ws_instagram) is susceptible to Cross Site Scripting. https://news.typo3.com/security/advisory/typo3-ext-sa-2019-009https://news.typo3.com/security/advisory/typo3-ext-sa-2019-009#commentsTue, 07 May 2019 11:04:00 +0200Torben Hansenhttps://news.typo3.com/security/advisory/typo3-ext-sa-2019-009It has been discovered that the extension "gkh RSS Import" (gkh_rss_import) is susceptible to Cross Site Scripting. https://news.typo3.com/security/advisory/typo3-ext-sa-2019-008https://news.typo3.com/security/advisory/typo3-ext-sa-2019-008#commentsTue, 07 May 2019 11:03:00 +0200Torben Hansenhttps://news.typo3.com/security/advisory/typo3-ext-sa-2019-008It has been discovered that the extension "phpMyAdmin" (phpmyadmin) is susceptible to Arbitrary file read and SQL injection. https://news.typo3.com/security/advisory/typo3-ext-sa-2019-007https://news.typo3.com/security/advisory/typo3-ext-sa-2019-007#commentsTue, 07 May 2019 11:02:00 +0200Torben Hansenhttps://news.typo3.com/security/advisory/typo3-ext-sa-2019-007It has been discovered that the extension "ImageOptimizer" (imageoptimizer) is susceptible to Remote Code Execution. https://news.typo3.com/security/advisory/typo3-ext-sa-2019-006https://news.typo3.com/security/advisory/typo3-ext-sa-2019-006#commentsTue, 07 May 2019 11:01:00 +0200Torben Hansenhttps://news.typo3.com/security/advisory/typo3-ext-sa-2019-006It has been discovered that the extension "Hairu" (hairu) is susceptible to an Open Redirect. https://news.typo3.com/security/advisory/typo3-ext-sa-2019-005https://news.typo3.com/security/advisory/typo3-ext-sa-2019-005#commentsTue, 07 May 2019 11:00:00 +0200Torben Hansenhttps://news.typo3.com/security/advisory/typo3-ext-sa-2019-005It has been discovered that the extension "Faceted Search" (ke_search) is susceptible to SQL Injection. https://news.typo3.com/security/advisory/typo3-psa-2019-006https://news.typo3.com/security/advisory/typo3-psa-2019-006#commentsTue, 07 May 2019 10:35:34 +0200Oliver Haderhttps://news.typo3.com/security/advisory/typo3-psa-2019-006It has been discovered that TYPO3 is susceptible to security misconfiguration. https://news.typo3.com/security/advisory/typo3-psa-2019-005https://news.typo3.com/security/advisory/typo3-psa-2019-005#commentsTue, 07 May 2019 10:32:30 +0200Oliver Haderhttps://news.typo3.com/security/advisory/typo3-psa-2019-005It has been discovered that 3rd party library Bootstrap CSS toolkit bundled with TYPO3 is vulnerable to cross-site scripting through prototype pollution. https://news.typo3.com/security/advisory/typo3-psa-2019-004https://news.typo3.com/security/advisory/typo3-psa-2019-004#commentsTue, 07 May 2019 10:25:22 +0200Oliver Haderhttps://news.typo3.com/security/advisory/typo3-psa-2019-004It has been discovered that 3rd party library jQuery bundled with TYPO3 is vulnerable to cross-site scripting through prototype pollution.