Gallery 2.1.2 Security Fix Released
Gallery Announcements <gallery-announce-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org> Thu, 17 Aug 2006 00:56:31 -0400
| Newsgroups | gmane.comp.web.gallery.announce |
|---|---|
| Message-ID | <[email protected]> |
[ apologies for the 2nd email in 2 days -- it's unfortunate that we have
two releases right around the same time ]
Gallery 2.1.2 is now available for download. This release adds no new
features. It fixes a minor information leakage in Gallery 2.1 and 2.1.1a
and a major session ID disclosure in all versions prior to Gallery 2.1.
Note that these flaws only affect installations where Gallery's storage
folder is accessible directly from the web, which we strongly discourage
during the installation process.
We recommend that you upgrade to Gallery 2.1.2 ASAP. For more
information including a quick security fix (that'll save you from having
to upgrade) please refer to:
http://gallery.menalto.com/2.1.2_release
regards,
-Bharat
-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
__[ g a l l e r y - a n n o u n c e ]_________________________
[ UNSUBSCRIBE? --> http://lists.sourceforge.net/lists/listinfo/gallery-announce ]
[ list info/archive --> http://gallery.sourceforge.net/lists.php ]
[ gallery info/FAQ/download --> http://gallery.sourceforge.net ]