Gallery 1.4.3-pl2 Security Release
Jay Rossiter / Signe <[email protected]> Tue, 01 Jun 2004 12:33:35 -0700
| Newsgroups | gmane.comp.web.gallery.announce |
|---|---|
| Message-ID | <[email protected]> |
--=====================_331555040==.ALT Content-Type: text/plain; charset="us-ascii"; format=flowed Notice: The affects all versions of Gallery from 1.2 to this release: We have discovered a well-hidden but potentially serious security flaw in these versions of Gallery which can allow a hacker to log in to your Gallery as an administrator and perform any actions on your albums. No risk is posed to the webserver-itself or any non-Gallery data. All Gallery users are very strongly urged to upgrade to 1.4.3-pl2 immediately, which fixes this serious problem and will secure your system. Gallery 1.4.3-pl2 can be downloaded from the <http://sourceforge.net/project/showfiles.php?group_id=7130>Gallery Download Page. http://sourceforge.net/project/showfiles.php?group_id=7130 --- Lead Developer, Gallery v1.x http://gallery.menalto.com http://www.sourceforge.net/projects/gallery --=====================_331555040==.ALT Content-Type: text/html; charset="us-ascii" <html> <body> <br> <b>Notice: The affects all versions of Gallery from 1.2 to this release</b>:<br><br> We have discovered a well-hidden but potentially serious security flaw in these versions of Gallery which can allow a hacker to log in to your Gallery as an administrator and perform any actions on your albums. No risk is posed to the webserver-itself or any non-Gallery data. All Gallery users are <i>very strongly</i> urged to upgrade to 1.4.3-pl2 immediately, which fixes this serious problem and will secure your system.<br><br> Gallery 1.4.3-pl2 can be downloaded from the <a href="http://sourceforge.net/project/showfiles.php?group_id=7130">Gallery Download Page</a>.<br><br> <a href="http://sourceforge.net/project/showfiles.php?group_id=7130" eudora="autourl">http://sourceforge.net/project/showfiles.php?group_id=7130<br><br> </a><x-sigsep><p></x-sigsep> ---<br> Lead Developer, Gallery v1.x<br> <a href="http://gallery.menalto.com/" eudora="autourl">http://gallery.menalto.com<br> </a><a href="http://www.sourceforge.net/projects/gallery" eudora="autourl">http://www.sourceforge.net/projects/gallery<br> </a></body> </html> --=====================_331555040==.ALT-- ------------------------------------------------------- This SF.Net email is sponsored by: Oracle 10g Get certified on the hottest thing ever to hit the market... Oracle 10g. Take an Oracle 10g class now, and we'll give you the exam FREE. http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click __[ g a l l e r y - a n n o u n c e ]_________________________ [ list info/archive --> http://gallery.sf.net/lists.php ] [ gallery info/FAQ/download --> http://gallery.sf.net ]