[TYPO3-Solr] [Fwd: [TYPO3-announce] Security issues]

[Irene Eglin]

Hi

Is this a problem for solr-2.5.0-dev as well?
And if yes is there a patch?

Thanks for the answer

Irene

-------- Original-Nachricht --------
Betreff: [TYPO3-announce] [Ticket#2012022310000055] Security issues in 
several third party TYPO3 extensions including "Frontend User 
Registration"  (sr_f [...]
Datum: Thu, 23 Feb 2012 12:30:57 +0100
Von: TYPO3 Security Team <security at typo3.org>
Antwort an: TYPO3 Announcement List, readonly 
<typo3-announce at lists.typo3.org>
Organisation: TYPO3 Security Team
An: typo3-announce at lists.typo3.org

Dear TYPO3 users,


Several vulnerabilities have been found in the following third party TYPO3
extensions:

Frontend User Registration (sr_feuser_register)

For further information on the issue in the extension "Frontend User 
Registration"
(sr_feuser_register), please read the related advisory 
TYPO3-EXT-SA-2012-002 that
was published today:
http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-002/


Crop and Square Thumbnails (tkcropthumbs)
Typo3 eXtplorer (t3extplorer)
TC BE User Admin (tc_beuser)
Predigtsammlung (an_predigten)
Apache Solr for TYPO3 (solr)
PDF Controller (pdfcontroller)
Share Your Car (cc20)
JW Player (jwplayer)

For further information on all CSB (Collective Security Bulletin) 
issues, please
read the related advisory TYPO3-EXT-SA-2012-003 that was published today:
http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-003/



In general the TYPO3 Security Team recommends to read the following pages:

The TYPO3 Security Guide:
http://typo3.org/documentation/document-library/extension-manuals/doc_guide_security/current/

Make sure you are subscribed to the TYPO3 Announce List:
http://lists.typo3.org/cgi-bin/mailman/listinfo/typo3-announce

See all TYPO3 security advisories for TYPO3 third party extensions:
http://typo3.org/teams/security/security-bulletins/typo3-extensions/

Regards,

Marcus Krause
Member of the TYPO3 Security Team

--
TYPO3 Security Team homepage: http://typo3.org/teams/security/

E-Mail: security at typo3.org

Please note: When replying to this e-mail, please leave the header intact.
_______________________________________________
TYPO3-announce mailing list
TYPO3-announce at lists.typo3.org
http://lists.typo3.org/cgi-bin/mailman/listinfo/typo3-announce

-- 
UNIVERSITÄT BASEL
Universitätsbibliothek
Irene Eglin-Müller
Wissenschaftliche Mitarbeiterin IT
Schönbeinstrasse 18-20
4056 Basel, Schweiz
Tel. +41 (0)61 267 30 48
E-Mail irene.eglin at unibas.ch
URL http://www.ub.unibas.ch/