TYPO3 v10 - Safe and Sound

TYPO3 v9 LTS was released in October 2018. Since then a number of extensions have been published at the TYPO3 Extension Repository (TER) that are already compatible with this version. This proves a…

TYPO3 v9.5.5 LTS released

We are announcing the release of TYPO3 v9.5.5 LTS, as scheduled. This version is a maintenance release and contains bug fixes only. For details about the release, please visit the following website:…

This Month in TYPO3 - February 2019 - Issue #11

typo3.org recap 2018

It is now nearly a tradition that our team meets after the TYPO3camp Rhein-Ruhr. Our sprint started right after the camp ended. 82 tickets and 76 merge requests were done. Common Infrastructure Speed:…

A revised Core development structure

In the last years TYPO3’s development process showed that Core Development needs an improved working mode. The original “scratching my own itch” idea of fixing small parts that are necessary for…

Open Source Definition

This Month in TYPO3 - January 2019 - Issue #10

Association Recap 2018

QSA #4 2018 in Berlin The quarterly summit of the TYPO3 Association (QSA) took place the day before the TYPO3 conference. We met in the nhow hotel in Berlin and seized the opportunity to get in touch…

TYPO3 v8.7.24 LTS released

We are announcing the release of TYPO3 v8.7.24 LTS. This version is a maintenance release and contains a regression fix from this week's security release. For details about the release, please visit…

TYPO3 9.5.4 and 8.7.23 security releases published

Known Issues https://forge.typo3.org/issues/87519 - fixed with TYPO3 v8.7.24 We are announcing the release of the following TYPO3 updates: TYPO3 9.5.4 LTS TYPO3 8.7.23 LTS All versions are security…

Cross-Site Scripting in Form Framework

Component Type: TYPO3 CMS Vulnerable subcomponent: Form Framework (ext:form) Release Date: January 22, 2019 Vulnerability Type: Cross-Site Scripting Affected Versions: 8.5.0-8.7.22 and 9.0.0-9.5.3…

Cross-Site Scripting in Bootstrap CSS toolkit

Component Type: TYPO3 CMS Vulnerable subcomponent: 3rd party library Bootstrap CSS toolkit Release Date: January 22, 2019 Vulnerability Type: Cross-Site Scripting Affected Versions: 8.0.0-8.7.22 and…

Cross-Site Scripting in Fluid ViewHelpers

Component Type: TYPO3 CMS Vulnerable subcomponent: Fluid (ext:fluid) Release Date: January 22, 2019 Vulnerability Type: Cross-Site Scripting Affected Versions: 8.0.0-8.7.22 and 9.0.0-9.5.3 Severity:…

Object Injection in extension "mkmailer" (mkmailer)

Release Date: January 22, 2019 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Vulnerability Type: Object Injection Affected Versions: 3.0.9 and…

Cross-Site Scripting in Language Pack Handling

Component Type: TYPO3 CMS Vulnerable subcomponent: Language Pack Handling (ext:install) Release Date: January 22, 2019 Vulnerability Type: Cross-Site Scripting Affected Versions: 9.2.0-9.5.3 Severity:…

Broken Access Control in Localization Handling

Component Type: TYPO3 CMS Vulnerable subcomponent: Localization Handling Release Date: January 22, 2019 Vulnerability Type: Broken Access Control Affected Versions: 8.0.0-8.7.22 Severity: Medium…

Multiple vulnerabilities in extension "femanager" (femanager)

Release Date: January 22, 2019 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Vulnerability Type: Multiple vulnerabilities Affected Versions:…

Multiple vulnerabilities in extension "typo3_forum" (typo3_forum)

Release Date: January 22, 2019 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Vulnerability Type: Multiple vulnerabilities Affected Versions:…

Multiple vulnerabilities in extension "phpMyAdmin" (phpmyadmin)

Release Date: January 22, 2019 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Vulnerability Type: Multiple vulnerabilities Affected Versions:…

Information Disclosure of Installed Extensions

Component Type: TYPO3 CMS Vulnerable subcomponent: RequireJS package configuration Release Date: January 22, 2019 Vulnerability Type: Information Disclosure Affected Versions: 8.0.0-8.7.22 and…

Cross-Site Scripting in Flash component (ELTS)

Release Date: January 22, 2019 (December 11, 2018 for ELTS) Vulnerability Type: Cross-Site Scripting Affected Versions: TYPO3 6.2.0 to 6.2.38 ELTS, TYPO3 7.0.0 to 7.1.0 Severity: Medium Suggested CVSS…

This Month in TYPO3 - December 2018 - Issue #9

TYPO3 Developer Days 2019: Save the Date!

Edited to add: You can now Submit your talk and buy your ticket for TYPO3 Dev Days! T3DD19 will take place from August 1-4, 2019 in Karlsruhe, Germany. Please save the date! The T3DD train will come…

Result of the budget poll 2018

The maximum average approval a budget idea could reach is six. The average of the approval rate is 3.5. So if a budget idea earns more then 3.5 on average approval, our member are supporting the idea…

TYPO3 v9.5.3 LTS and v8.7.22 LTS released

We are announcing the releases of TYPO3 v9.5.3 LTS and v8.7.22 LTS. These versions are a maintenance releases and contain bug fixes and regression fixes from this week's security release. For details…