[TYPO3-dev] [ANN] TYPO3 Security Bulletin TYPO3-20061220-1: Remote Command Execution in TYPO3

[Tom Walter]

Ingmar Schlecht schrieb:

> a critical problem has been discovered in the rtehtmlarea extension.
> 
> All users of TYPO3 versions 4.0 through 4.0.3 and/or rtehtmlarea
> versions 0.7.5 through 1.4.2 are advised to update their installations
> immediately.

I just was informed today by a customer that the security update for 
3.8.1 seems to have brought a bug in concern with links. I found bug 
4708 which confirms the problem.

I would appreciate if somebody could have a look at this bug.

Thanks !

Tom