Teamleader Meeting March / April 2019

Combined Sprints In 2019 we introduced the new format of “combined sprints”. In our meeting, we made a planning for sprints: Team Leader Meeting (Leipzig) Sprint 1: Stuttgart - 19.5 - 22.5.2019 (lead…

TYPO3 9.5.11 and 8.7.29 maintenance releases published

We are announcing the release of the following TYPO3 updates: TYPO3 9.5.11 LTS TYPO3 8.7.29 LTS All versions are maintenance releases and contain some important bugfixes, including some regression…

Truncated passwords during authentication process on typo3.org services

Release Date: October 30, 2019 Component Type: LDAP passwort storage & authentication (via my.typo3.org ) Impact: Truncated password during authentication Serverity: critical Suggested CVSS v3:…

Press Release: TYPO3 Awards Highlight CMS Project Excellence at Industry Summit

Call for budget application ideas - TYPO3 Association Budget 2020

Total Funds available for 2020 In coordination with the Treasurer of the TYPO3 Association, the TYPO3 Association Board is releasing the available budget sum for 2020. By releasing the budget amount…

Information Disclosure in extension "Direct Mail" (direct_mail)

Release Date: October 15, 2019 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Vulnerability Type: Information Disclosure Affected Versions:…

Remote Code Execution in extension "freeCap CAPTCHA" (sr_freecap)

Release Date: October 15, 2019 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Vulnerability Type: Remote Code Execution Affected Versions: 2.4.5…

Multiple vulnerabilities in extension "SLUB: Event Registration" (slub_events)

Release Date: October 15, 2019 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Vulnerability Type: Remote Code Execution, Unrestricted File…

SQL Injection in extension "URL redirect" (url_redirect)

Release Date: October 15, 2019 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Vulnerability Type: SQL Injection Affected Versions: 1.2.1 and…

TYPO3 v9.5.10 LTS and v8.7.28 LTS released

We are announcing the releases of TYPO3 v9.5.10 LTS and v8.7.28, as scheduled. These versions are maintenance releases and contain bug fixes only. For details about the releases, please visit the…