Advanced search  

News:

cpg1.5.46 Security release - upgrade mandatory!
The Coppermine development team is releasing a security update for Coppermine in order to counter recently discovered vulnerabilities. It is important that all users who run version cpg1.5.44 or older update to this latest version as soon as possible.
[more]

Pages: [1]   Go Down

Author Topic: cpg1.4.25 maintenance release - upgrade recommended  (Read 57363 times)

0 Members and 1 Guest are viewing this topic.

Αndré

  • Administrator
  • Coppermine addict
  • *****
  • Country: de
  • Offline Offline
  • Gender: Male
  • Posts: 15415
cpg1.4.25 maintenance release - upgrade recommended
« on: June 22, 2009, 08:26:53 am »

The Coppermine development team is releasing an update for Coppermine in order to fix an issue with the http upload feature. The fix is not security critical, so if your gallery is running fine with cpg1.4.24 you don't need to upgrade. If you are running an older version than cpg1.4.23, you must update to this latest version as soon as possible because of the security impact (the past few releases before cpg1.4.23 all were security related).

How to update:
Users running versions prior to 1.4.25 should update by downloading the latest version from the download page and following the upgrade steps in the documentation.

Manual patch:
For those who want to apply the fix manually to their Coppermine 1.4.24 installation, edit include/init.inc.php with a plain text editor (notepad.exe is fine), find:
Code: [Select]
$keysToSkip = array('_POST', '_GET', '_COOKIE', '_REQUEST', '_SERVER', 'HTML_SUBST', 'keysToSkip', 'register_globals_flag', 'cpgdebugger', 'key');and replace with:
Code: [Select]
$keysToSkip = array('_POST', '_GET', '_COOKIE', '_REQUEST', '_SERVER', '_FILES', 'HTML_SUBST', 'keysToSkip', 'register_globals_flag', 'cpgdebugger', 'key');
Support:
If you have problems with this update, please use the Update support board. Do not post your issues to this announcement thread - your post will be deleted without notice.

Why was cpg1.4.25 released?
The release covers a bug that crept in when fixing the vulnerability that lead to the release of cpg1.4.23.

Additionally, cpg1.4.25 includes fixes for the following non-security related issues:
  • Additional PHP 5.3 compat fix
  • Updated Danish language file
  • Updated Turkish language file

Thanks to Nibbler for coming up with the fix.


Thanks,
The Coppermine Team
Logged

Pascal YAP

  • Dev Team member
  • Coppermine addict
  • ****
  • Country: fr
  • Offline Offline
  • Gender: Male
  • Posts: 13833
  • Hello World :-)
    • CPG 1.5.x ExperiMental website
Re: cpg1.4.25 maintenance release - upgrade recommended
« Reply #1 on: June 22, 2009, 10:09:00 am »

Logged
Pages: [1]   Go Up
 

Page created in 0.016 seconds with 22 queries.