TYPO3 4.0.12

<< Back to Administrators page

[edit]

Release Notes for TYPO3 4.0.12

This document contains information about TYPO3 version 4.0.12 which was released on February 10, 2009.

News

This release is a bugfix release. It contains important security fixes!

Download

http://typo3.org/download/packages/

MD5 checksums

2dab550ec0c6355f933249ba94a375b4  typo3_src-4.0.12.tar.gz
c698ffb8d884add10a977ae3ab7a2c91  typo3_src-4.0.12.zip
8613cffcdfbe6d32ffb1638c69c896c6  typo3_src+dummy-4.0.12.zip

Upgrading

The usual upgrading procedure applies; no database updates are necessary.

Changelog

shell script:

2009-02-10  Michael Stucki  <michael@typo3.org>
 
	* Release of TYPO3 4.0.12
	* Fixed bug #10364: Jumpurl feature allows to access arbitrary files on a server (thanks to the TYPO3 Security Team and especially Marcus Krause)
	* Fixed bug #10298: Various XSS issues in the BE user admin module (thanks to Jelmer de Hen and Dmitry Dulepov)

Past Release Notes

If you have skipped one or more versions while upgrading to this version, please make sure to read the ReleaseNotes of these versions as well.