[TYPO3-UG Russia] Fwd: [TYPO3-announce] [Ticket#2012123110000011] Vulnerabilities in third party TYPO3 extensions commerce and formhandler (late notification)

[Michael Shigorin]

----- Forwarded message from TYPO3 Security Team <security/typo3.org> -----

Date: Mon, 31 Dec 2012 09:50:36 +0100
From: TYPO3 Security Team <security/typo3.org>
To: typo3-announce/lists.typo3.org
Subject: [TYPO3-announce] [Ticket#2012123110000011] Vulnerabilities in third party TYPO3 extensions commerce and formhandler (late notification)

Dear TYPO3 users,

Due to internal misunderstandings, for the latests two extension bulletins no 
notifications have been sent so far. This notification is about to catch up with 
these bulletins. We apologize for any inconvenience this may cause.

Vulnerabilities have been found in the following third party TYPO3 extension:

commerce, formhandler


For further information on the issues in the extension formhandler, please read 
the related advisory TYPO3-EXT-SA-2012-012 that was published on October 25:

http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-
2012-012/


For further information on the issues in the extension ameos_formidable, please 
read the related advisory TYPO3-EXT-SA-2012-013 that was published on December 21:

http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-
2012-013/


In general, the TYPO3 Security Team recommends reading the following pages:

The TYPO3 Security Guide:
http://typo3.org/documentation/document-library/core-
documentation/doc_guide_security/current/

Make sure you are subscribed to the TYPO3 Announce List:
http://lists.typo3.org/cgi-bin/mailman/listinfo/typo3-announce

See all TYPO3 security advisories:
http://typo3.org/teams/security/security-bulletins/


On behalf of the whole TYPO3 Security Team, I wish you all a Happy New Year!


Thank you for your understanding.



Regards,

Marcus Krause
Member of the TYPO3 Security Team

--
TYPO3 Security Team homepage: http://typo3.org/teams/security/

E-Mail: security/typo3.org

Please note: When replying to this e-mail, please leave the header intact.
_______________________________________________
TYPO3-announce mailing list
TYPO3-announce/lists.typo3.org
http://lists.typo3.org/cgi-bin/mailman/listinfo/typo3-announce

----- End forwarded message -----

-- 
 ---- WBR, Michael Shigorin <mike at altlinux.ru>
  ------ Linux.Kiev http://www.linux.kiev.ua/