Improper Authentication in LDAP / SSO Authentication (ig_ldap_sso_auth)

Release Date: January 8, 2015 Bulletin Update: January 8, 2015 (Affected Versions, Severity); February 23, 2015 (added CVE) Component Type: Third party extension. This extension is not a part of the…

This Week in TYPO3 (Week 50)

Week ending December 14 TYPO3 CMS On December 10 TYPO3 CMS 4.5.39, 6.2.9 and 7.0.2 were released containing bug and security fixes. With the release of TYPO3 CMS 7.0 fresh in the minds of the…

Press releases and articles Year-end report 2014

The press team and the PR agency Fink & Fuchs worked in 2014 together to create and publish some news in 2014. This is our list of press releases, interviews and articles in print magazines: official…

TYPO3 CMS 7.1 - Focused on cleaning the house

What happened before This is a short summary of what happened in the last months: After the TYPO3 CMS 6.2 release, the contributors agreed on having a different release cycle scheme (see our new…

Second TYPO3Camp in Poland and why you cannot miss it next year

Preparation After the big success of our first event we decided to organize a next one and make it a tradition in Poland, because there is no such place in this country, where the Polish TYPO3…

Cross-Site Scripting vulnerability in wfGallery (wf_gallery)

Release Date: December 15, 2014 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: 1.0.3 and all versions below Vulnerability…

Multiple vulnerabilities in BibTex Publications (si_bibtex)

Release Date: December 15, 2014 Bulletin Update: January 9, 2015 (added CVEs) Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions:…

Multiple vulnerabilities in Drag Drop Mass Upload (ameos_dragndropupload)

Release Date: December 15, 2014 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: 3.1.1 and all versions below Vulnerability…

TYPO3 Neos 1.2 released

TYPO3 CMS 4.5.39, 6.2.9 and 7.0.2 released

We are announcing the release of the following TYPO3 CMS updates: TYPO3 CMS 4.5.39 LTS TYPO3 CMS 6.2.9 LTS TYPO3 CMS 7.0.2 All versions are maintenance releases and contain bug and security fixes.…

November’s diary of the TYPO3 Association

6 November - TYPO3 Agency Meetup Mannheim Christian Händel from the marketing team met with 14 TYPO3 agencies' representatives in Mannheim for one of the last TYPO3 Agency Meetup Days of 2014. Even…

TYPO3 CMS 6.2.8 released

We are announcing the release of the following TYPO3 CMS update: TYPO3 CMS 6.2.8 LTS This version is a maintenance releases and contains bug fixes. For details about the release, please visit the…

Multiple vulnerabilities in extension phpMyAdmin (phpmyadmin)

Release Date: December 8, 2014 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: 4.18.x (prior to 4.18.5) Vulnerability Type:…

Neos 1.3 Sneak Preview

A while ago, while discussing the Neos roadmap, Gina Steiner, Christian Müller and me speculated about what would be possible, if we only had the funds to let 5-6 people of the core team work for a…

The TYPO3 community publishes TYPO3 CMS 7.0

For a long time our stakeholders have asked for a (new) vision of TYPO3 CMS. This seems trivial at first sight, because how do you build a product without an idea what you’re trying to achieve? But…

This Week in TYPO3 (Week 46)

Week ending November 14 TYPO3 Neos Neos code sprint Week 46 was already the second week of a big code sprint for Neos that will last for several weeks. Robert Lemke, chief developer of Neos, writes…

Octobers’ diary of the TYPO3 Association

8 - 10 October - T3CON Berlin Just like many other TYPO3 aficionados, most of the representatives of the TYPO3 Association were present at the vibrant T3CON14 in Berlin. The 10th international TYPO3…

TYPO3 Neos 1.2 beta2 released

The final release of TYPO3 Neos 1.2 is getting closer by the day. Members of the Neos team are working dedicated for the fourth week already to pump out the next version. a preview version is expected…

TYPO3 CMS 4.5.38 and 6.2.7 released

We are announcing the release of the following TYPO3 CMS updates: TYPO3 CMS 4.5.38 LTS TYPO3 CMS 6.2.7 LTS All versions are maintenance releases and contain bug fixes. For details about the releases,…

Improper Access Control in WebDav for filemounts (webdav)

Release Date: November 27, 2014 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: 2.0.0 Vulnerability Type: Improper Access…

This Week in TYPO3 (Week 45)

Week ending November 7 TYPO3 CMS Embrace & Innovate Benni Mack, one of the core team leaders of the TYPO3 CMS team, published ' Embrace and Innovate - TYPO3 CMS 7 ' in the beginning of this month,…

The TYPO3 CMS Sprint Hamburg 2014, Germany

Felix Kopp of Phorax took up the task to organize the sprint, get us booked into a hotel not far from the location that was generously sponsored by Portaltech Reply - a big Thank You! to both for…

Community Diversity at TYPO3camp Rhine Ruhr

Everyone gave feedback about his journey from beginner to the insides of the TYPO3 community. For most people TYPO3 is a big family and more than a community. That make it hard sometimes for newcomers…

From Dust 'till Dawn – An Open Source diary of the T3EE14

It is the second time “TYPO3 Eastern Europe” is organised in Romania. The event aims to bring together TYPO3 developers and agencies from the Eastern and Western Europe, creating stronger ties between…

TYPO3 Neos 1.2 Beta released

While the big November sprint is ongoing – 1.2 beta has now been released. The team is working on important features that will enable web agencies to confidently bring Neos to their clients and making…