Gallery 2.1.2 Security Fix Released

Gallery Announcements <gallery-announce-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org> Thu, 17 Aug 2006 00:56:31 -0400
Newsgroups gmane.comp.web.gallery.announce
Message-ID <[email protected]>
[ apologies for the 2nd email in 2 days -- it's unfortunate that we have
   two releases right around the same time ]

Gallery 2.1.2 is now available for download. This release adds no new 
features. It fixes a minor information leakage in Gallery 2.1 and 2.1.1a 
and a major session ID disclosure in all versions prior to Gallery 2.1. 
Note that these flaws only affect installations where Gallery's storage 
folder is accessible directly from the web, which we strongly discourage 
during the installation process.

We recommend that you upgrade to Gallery 2.1.2 ASAP.  For more 
information including a quick security fix (that'll save you from having 
to upgrade) please refer to:

      http://gallery.menalto.com/2.1.2_release

regards,
-Bharat

-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
__[ g a l l e r y - a n n o u n c e ]_________________________

[ UNSUBSCRIBE? --> http://lists.sourceforge.net/lists/listinfo/gallery-announce ]
[ list info/archive --> http://gallery.sourceforge.net/lists.php ]
[ gallery info/FAQ/download --> http://gallery.sourceforge.net ]