forum.coppermine-gallery.net

No Support => Announcements => Topic started by: Αndré on January 10, 2012, 11:38:48 am

Title: cpg1.5.18 Security release - upgrade mandatory!
Post by: Αndré on January 10, 2012, 11:38:48 am
The Coppermine development team is releasing a security update for Coppermine in order to counter a recently discovered vulnerability. It is important that all users who run version cpg1.5.16 or older update to this latest version as soon as possible.

How to update:
Users running versions prior to 1.5.18 should update immediately by downloading (https://sourceforge.net/projects/coppermine/files/Coppermine/1.5.x/cpg1.5.18.zip/download) the latest version from the download page (http://sourceforge.net/project/showfiles.php?group_id=89658) and following the upgrade steps in the documentation (http://documentation.coppermine-gallery.net/en/upgrading.htm).

Support:
If you have problems with this update, please use the Update support board (http://forum.coppermine-gallery.net/index.php?board=90.0). Do not post your issues to this announcement thread - your post will be deleted without notice.

Why was cpg1.5.18 released?
The release covers a path disclosure vulnerability. If unpatched, it's possible to generate an error that will reveal the full path of the script. A remote user can determine the full path to the web root directory and other potentially sensitive information.

Additionally, cpg1.5.18 includes fixes for the following non-security related issues:

The Coppermine Team
Title: Re: cpg1.5.18 Security release - upgrade mandatory!
Post by: pols1337 on January 12, 2012, 09:47:39 pm
Nice work on the upgrade
Title: Re: cpg1.5.18 Security release - upgrade mandatory!
Post by: oleredeye on January 14, 2012, 03:51:19 pm
Smooth upgrade to Coppermine 1.5.18 - just followed the documentation:  no problems!

Many thanks from The Helmsley Archive http://www.helmsleyarchive.org.uk/ (http://www.helmsleyarchive.org.uk/)
Title: Re: cpg1.5.18 Security release - upgrade mandatory!
Post by: François Keller on January 15, 2012, 08:23:25 am
French announcement thread http://forum.coppermine-gallery.net/index.php/topic,74231.0.html (http://forum.coppermine-gallery.net/index.php/topic,74231.0.html)
Title: Re: cpg1.5.18 Security release - upgrade mandatory!
Post by: bilder on January 16, 2012, 12:22:48 pm
Nice work on the upgrade, I am loking forward to trying it out.
Title: Re: cpg1.5.18 Security release - upgrade mandatory!
Post by: Mikaelft on March 02, 2012, 04:14:37 pm
Thanks, updating now. Are there any language changes?
Title: Re: cpg1.5.18 Security release - upgrade mandatory!
Post by: Αndré on March 02, 2012, 04:28:07 pm
Have a look at the changelog.


Locking.