TYPO3-SECURITY-BULLETIN-TYPO3-20070703-1-MULTIPLE-VULNERABILITIES-IN-ALL-VARIANTS-OF-MYSQLDUMPER: TYPO3 Security Bulletin TYPO3-20070703-1: Multiple vulnerabilities in all variants of MySQLDumper
Multiple vulnerabilities have been found in the third party extension "mysqldumper". Full read/write access to the connected database and other related issues.
Read moreTYPO3-SECURITY-BULLETIN-TYPO3-20070612-1-INFORMATION-DISCLOSURE-IN-W4X-BACKUP: TYPO3 Security Bulletin TYPO3-20070612-1: Information disclosure in w4x_backup
It has been discovered that the extension w4x_backup has several security related issues, which may disclosure confidential information.
TYPO3-SECURITY-BULLETIN-TYPO3-20070608-1-SQL-INJECTION-IN-MACINA-BANNERS-RIC-ROTATION: TYPO3 Security Bulletin TYPO3-20070608-1: SQL injection in macina_banners / ric_rotation
It has been discovered that the extensions macina_banners and its descendant ric_rotation are exposed to an SQL injection issue because they fail to properly sanitize user-supplied input.
Installer 2.0 survey
The Installer 2.0 project has now reached a point where we wan't to get the final input from the community before we start the implementation.
Five on six
TYPO3 4.1.1 and 4.0.6
The TYPO3 Core Team announces versions 4.1.1 and 4.0.6 of the TYPO3 Enterprise Content Management System.
Results of TYPO3 5.0 Meeting in Berlin
Last weekend the 5.0 Development Team met the first time in a bigger formation than usual: Karsten Dambekalns, Christian Jul Jensen, Sebastian Kurfürst, Robert Lemke and Ronny Unger spent two days in Berlin to discuss what has happened so far, what problems occurred and what next steps have to be taken. Robert's apartment obviously was the best choice for a meeting place as it guaranteed the best coffee in the area.
TYPO3-SECURITY-BULLETIN-TYPO3-20070221-1-EMAIL-HEADER-INJECTION: TYPO3 Security Bulletin TYPO3-20070221-1: Email header injection
A problem has been discovered where the internal form engine can be used for sending arbitrary mail headers, using it for purposes which it is not meant for.
TYPO3 4.1 Release Candidate 1
The core team is proud to announce the first Release Candidate of TYPO3 4.1. The 4.1 development is now feature frozen so only bugfixes will be added until the final release.
TYPO3 4.1 Beta 3
The core team is proud to announce the third and last Beta of TYPO3 version 4.1.