[TYPO3-UG Russia] Fwd: [TYPO3-announce] Multiple vulnerabilities found in TYPO3 Core

[Michael Shigorin]

----- Forwarded message from Lars Houmark <lars/houmark.com> -----

Date: Tue, 20 Jan 2009 11:36:52 -0500
From: Lars Houmark <lars/houmark.com>
To: TYPO3 Announce List <typo3-announce/lists.netfielders.de>
Subject: [TYPO3-announce] Multiple vulnerabilities found in TYPO3 Core

Dear users of TYPO3,

It has been discovered that TYPO3 Core is vulnerable to Broken  
Authentication and Session Management, Cross-Site Scripting, Insecure  
Randomness and Remote Command Execution.

All of these security issues have been fixed in the recent released  
packages.

Please see this page for a descriptions and solutions on all the above  
mentioned issues:

http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-001/

Regards,

Lars Houmark
Member of the TYPO3 Security Team
lars/typo3.org
_______________________________________________
TYPO3-announce mailing list
TYPO3-announce/lists.netfielders.de
http://lists.netfielders.de/cgi-bin/mailman/listinfo/typo3-announce

----- End forwarded message -----

-- 
 ---- WBR, Michael Shigorin <mike at altlinux.ru>
  ------ Linux.Kiev http://www.linux.kiev.ua/