TYPO3 Conference “T3CON16,” October 26-27 in Munich - Call for Speakers and Papers

International experts who are interested in acting as speakers at T3CON16 can register up until July 15 under http://t3con.eu/become-speaker/-speaker/ . TYPO3 awards will be presented again this year.…

Information Disclosure in "MMC directmail subscription" (mmc_directmail_subscription)

Release Date: May 31, 2016 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: 0.9.6 and below Vulnerability Type: Information…

Multiple vulnerabilities in extension "http:BL Blocking" (mh_httpbl)

Release Date: May 31, 2016 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: 1.1.7 and below Vulnerability Type: SQL injection,…

Non-Persistent Cross-Site Scripting in extension "Static Methods since 2007" (div2007)

Release Date: May 31, 2016 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 1.6.8 and below Vulnerability Type:…

Information Disclosure in extension "Questionnaire" (ke_questionnaire)

Release Date: May 31, 2016 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 2.5.8 and below Vulnerability Type:…

This Week in TYPO3 (2016, Week 20)

T3Rookies Summer Camp 2016 During this year’s summer camp T3Rookies build a website for Romanian orphanage . The organisation is currently planning the TYPO3 Summer Camp 2016! Save the date: 22–31…

Path Traversal in extension "Media management" (media)

Release Date: May 27, 2016 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 4.0.3 and below Vulnerability Type: Path…

Cross-Site Scripting in extension "Formhandler" (formhandler)

Release Date: May 27, 2016 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 2.3.0 and below Vulnerability Type:…

TYPO3 CMS 6.2.25, 7.6.9 and 8.1.2 released

We are announcing the release of the following TYPO3 CMS updates: TYPO3 CMS 6.2.25 LTS TYPO3 CMS 7.6.9 LTS TYPO3 CMS 8.1.2 These versions are regression fix releases for TYPO3 CMS 6.2.24, TYPO3 CMS…

Missing Access Check in extension "Frontend User Registration" (sf_register)

Release Date: May 24, 2016 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 6.2.7 and below Vulnerability Type: Missing…

Missing Access Check in TYPO3 CMS

Component Type: TYPO3 CMS Release Date: May 24, 2016 Vulnerable subcomponent: Extbase Vulnerability Type: Missing access check Affected Versions: Versions 4.3.0 up to 8.1.0 Severity: Critical…

TYPO3 CMS 6.2.24, 7.6.8 and 8.1.1 released

UPDATE: Due to one regression in these packages, TYPO3 CMS 6.2.25, 7.6.9 and 8.1.2 have been released . We are announcing the release of the following TYPO3 CMS updates: TYPO3 CMS 6.2.24 LTS TYPO3 CMS…

TYPO3 CMS 6.2.23 and 7.6.7 released

We are announcing the release of the following TYPO3 CMS updates: TYPO3 CMS 6.2.23 LTS TYPO3 CMS 7.6.7 LTS All versions are maintenance releases and contain bug fixes only. For details about the…

typo3.org code sprint Rosenheim

The last very rainy days gave as perfect conditions, to meet and nerd for a weekend. Our main focus was the improvement of the professional service listing (PSL). Due to changes at the Google Maps API…

TYPO3Camp Venlo 2016

TYPO3camp Venlo is an international camp that is conveniently situated on the Dutch German border and thus brings together both nationalities and even some from Belgium, France and Switzerland. Just…

Critical vulnerabilities in ImageMagick

For image manipulation TYPO3 CMS makes use of either one of the third party tools GraphicsMagick or ImageMagick. Recently it has been discovered, that ImageMagick exposes multiple vulnerabilities ,…

TYPO3 CMS 6.2.22 and 7.6.6 released

We are announcing the release of the following TYPO3 CMS updates: TYPO3 CMS 6.2.22 LTS TYPO3 CMS 7.6.6 LTS All versions are maintenance releases and contain bug fixes only. For details about the…

Protocol of the General Assembly 2016

Regular maintenance release schedule

The TYPO3 Core team has a fixed roadmap for sprint releases of the current development cycle. This makes it transparent and plannable for everybody in the TYPO3 Community to know when to expect a next…

TYPO3 Inc. – What is next?

In many ways, the GA 2016 felt a bit like the GA 2015, we have been in doubt if the members will be in favor of our idea for a commercial leg of the TYPO3 Association. And as in 2015 we have been…

TYPO3 CMS 6.2.21 released

We are announcing the release of the following TYPO3 CMS updates: TYPO3 CMS 6.2.21 LTS This release is a regression fix release for TYPO3 CMS 6.2.20 which contained important security fixes . For…

TYPO3 CMS 6.2.20, 7.6.5 and 8.0.1 released

We are announcing the release of the following TYPO3 CMS updates: TYPO3 CMS 6.2.20 LTS TYPO3 CMS 7.6.5 LTS TYPO3 CMS 8.0.1 All versions are maintenance releases and contain bug and security fixes.…

Privilege Escalation in TYPO3 CMS

Component Type: TYPO3 CMS Release Date: April 12, 2016 Vulnerable subcomponent: Version Vulnerability Type: Privilege Escalation Affected Versions: Versions 6.2.0 to 6.2.19, 7.6.0 to 7.6.4 and 8.0.0…

Authentication Bypass in TYPO3 CMS

Component Type: TYPO3 CMS Release Date: April 12, 2016 Vulnerable subcomponent: Authentication Vulnerability Type: Authentication Bypass Affected Versions: Versions 6.2.0 to 6.2.19, 7.6.0 to 7.6.4 and…

Arbitrary File Disclosure in Form Component

Component Type: TYPO3 CMS Release Date: April 12, 2016 Vulnerable subcomponent: Form Vulnerability Type: Arbitrary File Disclosure Affected Versions: Versions 6.2.0 to 6.2.19 Severity: High Suggested…