[TYPO3-announce] [Ticket#2014090210000033] Vulnerabilities in multiple third party TYPO3 CMS extensions

[TYPO3 Security Team]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Dear TYPO3 users,

Several vulnerabilities have been found in the following third party TYPO3
extensions:

cwt_feedit
eu_ldap
flatmgr
jh_opengraphprotocol
ke_dompdf
lumophpinclude
news_pack
sb_akronymmanager
st_address_ma
weeaar_googlesitemap
wt_directory


For further information on the issues, please read the related advisory TYPO3-EXT-
SA-2014-010 that was published today:
http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-
2014-010/


In general the TYPO3 Security Team recommends to read the following pages:

The TYPO3 Security Guide:
http://docs.typo3.org/typo3cms/SecurityGuide/

Make sure you are subscribed to the TYPO3 Announce List:
http://lists.typo3.org/cgi-bin/mailman/listinfo/typo3-announce

See all TYPO3 security advisories:
http://typo3.org/teams/security/security-bulletins/

Regards,

Marcus Krause
Member of the TYPO3 Security Team

- --
TYPO3 Security Team homepage: http://typo3.org/teams/security/

E-Mail: security at typo3.org

Please note: When replying to this e-mail, please leave the header intact.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iQEcBAEBAgAGBQJUBdJfAAoJEOXm4YVYTw4QzcYH/jDB583YhVrZPtrToV/P4HMM
RhWqn3Hqzw0/3p9sfaGCKcLyPJD5op9fZNS2PsbbGJZyoSBJeF86tHVIZMbyEXQa
0qO7+89pY0WVY8dN/L9XYRxj12+hOQCBjlALJntQ4744Kz3xvWPpEK2msjly8qW3
RXbrLzQ2N0+Tax43T3XtwY6AplJ6lsYTSzMUWadJFu0LT3fOt4V6c4LyFLrwztcR
0lzHiu5xVtQC1SEUlupUrfam4a7A6MDd+W1mAMPIFYegi8jEE/d2mpZoDvYt19dX
BrZH5lhRx5BcWYOqtL4l+cadLrJGKqfuaQrJNGlQsYiglwWbpFG62XIk+KgDL5o=
=HGGE
-----END PGP SIGNATURE-----