Author Topic: Coppermine Gallery 1.5.34 Upgrade  (Read 964 times)

Offline KaciElizabeth

  • Full Member
  • ***
  • Posts: 132
  • What a fool I've been
    • View Profile
Coppermine Gallery 1.5.34 Upgrade
« on: October 26, 2014, 16:40:01 PM »
New upgrade.

http://forum.coppermine-gallery.net/index.php/topic,77892.0.html

Quote
The Coppermine development team is releasing a security update for Coppermine in order to counter a recently discovered vulnerability. It is important that all users who run version cpg1.5.32 or older update to this latest version as soon as possible.

How to update:
Users running versions prior to 1.5.34 should update immediately by downloading the latest version from the download page and following the upgrade steps in the documentation.

Support:
If you have problems with this update, please use the Update support board. Do not post your issues to this announcement thread - your post will be deleted without notice.

Why was cpg1.5.34 released?
The release covers a recently discovered XSS vulnerability that allows (if unpatched) a malevolent visitor to include own script routines under certain conditions.

Additionally, cpg1.5.34 includes fixes for the following non-security related issues:

    Added i18n support for visiblehookpoints plugin
    Better contrast for help boxes when using the theme "curve" (thread)

Thanks to chipviled for discovering the vulnerability.


The Coppermine Team
Will you believe me that I loved you

Offline Lindsay

  • Sr. Member
  • ****
  • Posts: 294
    • View Profile
    • http://stars.bz
Coppermine Gallery 1.5.34 Upgrade
« Reply #1 on: October 26, 2014, 20:44:06 PM »
Thanks for posting this Kaci.

It would be good if they had some sort of mailing list for these sort of things. I always miss them.

Offline KaciElizabeth

  • Full Member
  • ***
  • Posts: 132
  • What a fool I've been
    • View Profile
Coppermine Gallery 1.5.34 Upgrade
« Reply #2 on: October 26, 2014, 23:37:33 PM »
You're welcome! It really would. I had just found out this morning (the 26th) about it.
Will you believe me that I loved you