TYPO3-CORE-SA-2019-016: Possible deserialization side-effects in symfony/cache
It has been discovered that a third party dependency used by TYPO3 CMS is susceptible of being used during insecure deserialization.
Read moreTYPO3-CORE-SA-2019-015: Cross-Site Scripting in Link Handling
It has been discovered that TYPO3 CMS is vulnerable to cross-site scripting.
TYPO3-CORE-SA-2019-014: Information Disclosure in Backend User Interface
It has been discovered that TYPO3 CMS is susceptible to information disclosure.
docs.typo3.org Gets New Infrastructure
docs.typo3.org is now hosted by TYPO3 Inc. and gets a modern setup using Bamboo as CI (Continuous Integration) solution for rendering.
Recap: Docs Team Joins typo3.org Sprint Wiesbaden
The Documentation Team joined the typo3.org Team Sprint in Wiesbaden, Germany from Feb 10-13. Two of us from the Docs team met up for the sprint, Daniel Siepmann, of Codappix GmbH, and myself, Sybille Peters, from Carl von Ossietzky Universität Oldenburg.
TYPO3 v9.5.7 LTS and v8.7.26 LTS released
The TYPO3 Community announces the versions 9.5.7 LTS and 8.7.26 LTS of the TYPO3 Enterprise Content Management System.
T3DD 2019—Sponsor One of the Biggest TYPO3 Events of the Year
If you would like to support TYPO3 Developer Days 2019, we would be happy to hear from you!
TYPO3-PSA-2019-008: By-passing protection of Phar Stream Wrapper Interceptor
It has been discovered that the protection against insecure deserialization can be by-passed in Phar Stream Wrapper component.
TYPO3-PSA-2019-007: By-passing protection of Phar Stream Wrapper Interceptor
It has been discovered that the protection against insecure deserialization can be by-passed in Phar Stream Wrapper component.
TYPO3 9.5.6 and 8.7.25 security releases published
The TYPO3 Community announces the versions 9.5.6 LTS and 8.7.25 LTS of the TYPO3 Enterprise Content Management System.