What you should know about the General Assembly 2016

We are happy that so many members attended our webinar this week, where Alain Veuve presented TYPO3 Inc. Draft Business Plan. As the interest for this topic is that high, we decided, to allow more…

Report on the Server Admin Team sprint in Stuttgart (March 2016)

The location for this sprint was sponsored by Schommer Media and we are thankful for sharing their desks with us in their office, located in the heart of Stuttgart. In total, 10 people from the TYPO3…

TYPO3 founds independent service company

The headquarters of the new service company TYPO3 Inc. will most likely be in Dusseldorf, Germany. Mathias Schreiber will manage the company as its CEO. Benjamin Mack will assume the position of CTO…

Explanation of the T3A 2016 budget

Last month, we sent out the budget agreements for 2016 and in this article we are going to explain how the budgets have been assigned for 2016 and the motivations for the decisions we made.…

Results of the TYPO3 Association Elections 2016

The TYPO3 Association elections that took place between March 23 and April 3 2016, have given the following results: Elected T3A Expert Advisory Board members: Dominik Stankowski Dominik is part of…

Cross-Site Scripting in TYPO3 Backend

Component Type: TYPO3 CMS Release Date: April 12, 2016 Vulnerable subcomponent: Backend Vulnerability Type: Cross-Site Scripting Affected Versions: Versions 6.2.0 to 6.2.19, 7.6.0 to 7.6.4 and 8.0.0…

Arbitrary File Disclosure in Form Component

Component Type: TYPO3 CMS Release Date: April 12, 2016 Vulnerable subcomponent: Form Vulnerability Type: Arbitrary File Disclosure Affected Versions: Versions 6.2.0 to 6.2.19 Severity: High Suggested…

Authentication Bypass in TYPO3 CMS

Component Type: TYPO3 CMS Release Date: April 12, 2016 Vulnerable subcomponent: Authentication Vulnerability Type: Authentication Bypass Affected Versions: Versions 6.2.0 to 6.2.19, 7.6.0 to 7.6.4 and…

Privilege Escalation in TYPO3 CMS

Component Type: TYPO3 CMS Release Date: April 12, 2016 Vulnerable subcomponent: Version Vulnerability Type: Privilege Escalation Affected Versions: Versions 6.2.0 to 6.2.19, 7.6.0 to 7.6.4 and 8.0.0…

TYPO3 CMS 6.2.20, 7.6.5 and 8.0.1 released

We are announcing the release of the following TYPO3 CMS updates: TYPO3 CMS 6.2.20 LTS TYPO3 CMS 7.6.5 LTS TYPO3 CMS 8.0.1 All versions are maintenance releases and contain bug and security fixes.…

TYPO3 CMS 6.2.21 released

We are announcing the release of the following TYPO3 CMS updates: TYPO3 CMS 6.2.21 LTS This release is a regression fix release for TYPO3 CMS 6.2.20 which contained important security fixes . For…

TYPO3 Inc. – What is next?

In many ways, the GA 2016 felt a bit like the GA 2015, we have been in doubt if the members will be in favor of our idea for a commercial leg of the TYPO3 Association. And as in 2015 we have been…

Regular maintenance release schedule

The TYPO3 Core team has a fixed roadmap for sprint releases of the current development cycle. This makes it transparent and plannable for everybody in the TYPO3 Community to know when to expect a next…

Protocol of the General Assembly 2016

TYPO3 CMS 6.2.22 and 7.6.6 released

We are announcing the release of the following TYPO3 CMS updates: TYPO3 CMS 6.2.22 LTS TYPO3 CMS 7.6.6 LTS All versions are maintenance releases and contain bug fixes only. For details about the…

Critical vulnerabilities in ImageMagick

For image manipulation TYPO3 CMS makes use of either one of the third party tools GraphicsMagick or ImageMagick. Recently it has been discovered, that ImageMagick exposes multiple vulnerabilities ,…

TYPO3Camp Venlo 2016

TYPO3camp Venlo is an international camp that is conveniently situated on the Dutch German border and thus brings together both nationalities and even some from Belgium, France and Switzerland. Just…

typo3.org code sprint Rosenheim

The last very rainy days gave as perfect conditions, to meet and nerd for a weekend. Our main focus was the improvement of the professional service listing (PSL). Due to changes at the Google Maps API…

TYPO3 CMS 6.2.23 and 7.6.7 released

We are announcing the release of the following TYPO3 CMS updates: TYPO3 CMS 6.2.23 LTS TYPO3 CMS 7.6.7 LTS All versions are maintenance releases and contain bug fixes only. For details about the…

Missing Access Check in TYPO3 CMS

Component Type: TYPO3 CMS Release Date: May 24, 2016 Vulnerable subcomponent: Extbase Vulnerability Type: Missing access check Affected Versions: Versions 4.3.0 up to 8.1.0 Severity: Critical…

TYPO3 CMS 6.2.24, 7.6.8 and 8.1.1 released

UPDATE: Due to one regression in these packages, TYPO3 CMS 6.2.25, 7.6.9 and 8.1.2 have been released . We are announcing the release of the following TYPO3 CMS updates: TYPO3 CMS 6.2.24 LTS TYPO3 CMS…

Missing Access Check in extension "Frontend User Registration" (sf_register)

Release Date: May 24, 2016 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 6.2.7 and below Vulnerability Type: Missing…

TYPO3 CMS 6.2.25, 7.6.9 and 8.1.2 released

We are announcing the release of the following TYPO3 CMS updates: TYPO3 CMS 6.2.25 LTS TYPO3 CMS 7.6.9 LTS TYPO3 CMS 8.1.2 These versions are regression fix releases for TYPO3 CMS 6.2.24, TYPO3 CMS…

Cross-Site Scripting in extension "Formhandler" (formhandler)

Release Date: May 27, 2016 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 2.3.0 and below Vulnerability Type:…

Path Traversal in extension "Media management" (media)

Release Date: May 27, 2016 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 4.0.3 and below Vulnerability Type: Path…