TYPO3 News & Events Hub
What’s new & what’s comin’
TYPO3 4.4beta1 released
Here comes the latest release of TYPO3 4.4. We've just hit feature freeze, and are now entering the last phase on the road to the final release of TYPO3 4.4.0, which is scheduled to be published on June 22nd, 2010.
Read moreScrumify Phoenix!
TYPO3 Phoenix (aka "version five") undoubtedly is a big venture. And despite its long history, the intermediate results are hard to grasp and virtually invisible to the majority of the TYPO3 community. However, there's a good chance that this will change now: Firstly the foundational work necessary for the CMS part is almost complete. And secondly we will now extend the agile approach we've taken with FLOW3 to the Phoenix project. In essence that means: visible results and a release each month, starting only a few weeks from now.
TYPO3-SA-2010-011: Vulnerabilitiy in extension 404 Error Page Handling (error_404_handling)
It has been discovered that the extension 404 Error Page Handling (error_404_handling) is susceptible to SQL Injection attacks.
TYPO3-SA-2010-010: Vulnerabilitiy in extension Tip-A-Friend (tipafriend)
It has been discovered that the extension Tip-A-Friend (tipafriend) is susceptible to Cross Site Scripting (XSS) attacks.
TYPO3-SA-2010-009: Vulnerabilitiy in extension Frontend User Registration (sr_feuser_register)
It has been discovered that the extension Frontend User Registration (sr_feuser_register) is susceptible to Cross Site Scripting (XSS) attacks.
SECURITY-ISSUES-IN-SEVERAL-THIRD-PARTY-TYPO3-EXTENSIONS-INCLUDING-FRONTEND-USER-REGISTRATION-SR-FEUSER-REGISTER-404-ERROR-PAGE-HANDLING-ERROR-404-HANDLING-AND-TIP-A-FRIEND-TIPAFRIEND: Security issues in several third party TYPO3 extensions including "Frontend User Registration" (sr_feuser_register), "404 Error Page Handling" (error_404_handling) and "Tip-A-Friend" (tipafriend)
Security vulnerabilities have been discovered in the third party TYPO3 extensions including sr_feuser_register, error_404_handling and tipafriend
SECURITY-ISSUE-FOUND-IN-TYPO3-CORE-1: Security Issue found in TYPO3 Core
It has been discovered that TYPO3 Core is vulnerable to Remote Command Execution.
TYPO3 4.3.3 released
TYPO3-SA-2010-008: Vulnerability in TYPO3 Core
It has been discovered that TYPO3 Core is vulnerable to Remote Command Execution.
IMPORTANT-SECURITY-BULLETIN-PRE-ANNOUNCEMENT-1: Important Security-Bulletin Pre-Announcement
The TYPO3 security team has identified a critical security issue in the TYPO3 core.