David Ansermot Web Developer / TYPO3 Integrator

6août/101

TYPO3 4.1.15, 4.2.14, 4.3.5 and 4.4.2 announced

A small post only to say that 4 new versions of TYPO3 are available for download:

  • 4.1.15
  • 4.2.14
  • 4.3.5
  • 4.4.2

You can download packages here
Read the detailled post

16mar/100

Drupal 6.16 and 5.22 released

Drupal 6.16 and 5.22, maintenance releases which fix issues reported through the bug tracking system, as well as security vulnerabilities, are now available for download. Drupal 6.16 also fixes other smaller

Upgrading your existing Drupal 5 and 6 sites is strongly recommended.

Download Drupal 6.16
Download Drupal 5.22

Drupal website

15fév/100

Support for TYPO3 4.0 is officially over

As we can read on typo3.org, the support is now over.
So it's really time to upgrade for the turtles who are still running the 4.0 or under.

Read the full post

15fév/100

TYPO3 – New maintenance policy

The TYPO3 Core Team is pleased to announce its new official maintenance policy for TYPO3 4.x.

Today the TYPO3 Core Team published its new maintenance policy on typo3.org (see link below). This translates into a nice new version matrix (thanks to Oliver Klee) that shows at a glance what is the status of all recent TYPO3 versions.

With this new information we hope that the lifecycle of each TYPO3 version will be clear to all members of the community. It should help planning upgrades for TYPO3 administrators.

This new policy also clarifies the work of both the Core Team and the Security Team, as we had - until recently - some fuzziness about which versions to keep patching and for what kind of bugs or security fixes.

We hope that you will appreciate this increased clarity.

Original post
18déc/090

PHP 5.2.12

PHP 5.2.12 is out now. It's really important to update the production servers.

Security Enhancements and Fixes in PHP 5.2.12:

  • Fixed a safe_mode bypass in tempnam() identified by Grzegorz Stachowiak. (CVE-2009-3557, Rasmus)
  • Fixed a open_basedir bypass in posix_mkfifo() identified by Grzegorz Stachowiak. (CVE-2009-3558, Rasmus)
  • Added "max_file_uploads" INI directive, which can be set to limit the number of file uploads per-request to 20 by default, to prevent possible DOS via temporary file exhaustion, identified by Bogdan Calin. (CVE-2009-4017, Ilia)
  • Added protection for $_SESSION from interrupt corruption and improved "session.save_path" check, identified by Stefan Esser. (CVE-2009-4143, Stas)
  • Fixed bug #49785 (insufficient input string validation of htmlspecialchars()). (CVE-2009-4142, Moriyoshi, hello at iwamot dot com)

Source : php.net