The TYPO3 Security Team has started a new procedure for publishing bulletins on security issues in some extensions. This procedure only covers TYPO3 third party software.
Within Security Bulletin TYPO3-20080611-1, the Security Team has informed the public about the dangers of a wrong value of fileDenyPattern in combination with the Apache module mod_mime. This topic is quite complex, so Security...
Lately, numerous reports have been discussing a new scheme of attacks that affect all kinds of web servers. This wave has now reached TYPO3 (and other CMS systems).
Dear reader,Welcome to the opening post of the TYPO3 Security Team on the buzz.Until now the security team has worked in a very close forum. That will continue, but we have started this blog to give us one more communication...