Advanced search  

News:

CPG Release 1.6.26
Correct PHP8.2 issues with user and language managers.
Additional fixes for PHP 8.2
Correct PHP8 error with SMF 2.0 bridge.
Correct IPTC supplimental category parsing.
Download and info HERE

Pages: [1]   Go Down

Author Topic: Maintenance release cpg1.4.15 (security-related) - upgrade mandatory  (Read 96795 times)

0 Members and 1 Guest are viewing this topic.

Joachim Müller

  • Dev Team member
  • Coppermine addict
  • ****
  • Offline Offline
  • Gender: Male
  • Posts: 47843
  • aka "GauGau"
    • gaugau.de

Coppermine 1.4.15 - Security release.

The development team is releasing a security update for Coppermine in order to counter some recently discovered  vulnerabilities. It is important that all users who run version cpg1.4.14 or older update to this latest version as soon as possible.

The following issues have been addressed in this release (changelog excerpt):
  • 2008-01-30 Release of cpg1.4.15
  • 2008-01-26 Updated file header to reflect the new year 2008
  • 2008-01-26 Updated Danish language file (user contribution)
  • 2008-01-04 Avoid possible corrupt zip files by cleaning output buffer
  • 2007-12-29 Fixed documentation that explains admin passwords (thread ID 49304)
  • 2007-12-20 Added Serbian (Cyrillic) language file (user contribution)
  • 2007-12-11 Added code to fix the shell injection security issue reported by Janek Vind via email and discussed in topic 48930
  • 2007-12-11 Fixed broken functionality of search engine query strings not being recorded because of typo (thread id 48934)
  • 2007-12-10 Added code to remove 2 security issues reported by Janek Vind via email and discussed in topic 48890
  • 2007-12-02 Adding xmlns to html tag to fix XHTML compliance
  • 2007-12-02 Fixed subcategory depth issue
  • 2007-11-30 Added Estonian language file (user contribution)
  • 2007-11-29 Populated SVN-property "HeadURL"
  • 2007-11-29 Updated version count from cpg1.4.14 to cpg1.4.15 in subversion repository as a preparation for a possible future release
  • 2007-11-29 Hiding empty IPTC fields as suggested in thread 48672
  • 2007-11-22 Added Serbian language file (user contribution)
  • 2007-11-15 Corrected spelling of 'Favourites' in British English lang file
  • 2007-11-15 British English now recognised correctly
  • 2007-11-15 Compatibility fix for MyBB 1.2.9

How to update:
To update any version of Coppermine to version 1.4.15, download the latest version from the download page and follow the upgrade steps in the documentation.

If you have problems with this update, please use the Update support board. Do not post your issues to this announcement thread - they will be deleted without notice.

Our thanks go to Janek Vind who reported the vulnerabilities and gave us the opportunity to prepare this release.

Joachim Müller (aka GauGau)
- Coppermine project manager -
« Last Edit: January 29, 2008, 06:02:08 pm by Joachim Müller »
Logged

adalat

  • Coppermine newbie
  • Offline Offline
  • Posts: 1
    • Seo
Re: Maintenance release cpg1.4.15 (security-related) - upgrade mandatory
« Reply #1 on: February 17, 2008, 06:00:30 pm »

thanks! :)
Logged

François Keller

  • Dev Team member
  • Coppermine addict
  • ****
  • Country: fr
  • Offline Offline
  • Gender: Male
  • Posts: 9094
  • aka Frantz
    • Ma galerie
Re: Maintenance release cpg1.4.15 (security-related) - upgrade mandatory
« Reply #2 on: February 17, 2008, 06:08:13 pm »

@adalat
did you see that a 1.4.16 release is avaible ? see here http://forum.coppermine-gallery.net/index.php?topic=50194.0
Logged
Avez vous lu la DOC ? la FAQ ? et cherché sur le forum avant de poster ?
Did you read the DOC ? the FAQ ? and search the board before posting ?
Mon Blog

Joachim Müller

  • Dev Team member
  • Coppermine addict
  • ****
  • Offline Offline
  • Gender: Male
  • Posts: 47843
  • aka "GauGau"
    • gaugau.de
Re: Maintenance release cpg1.4.15 (security-related) - upgrade mandatory
« Reply #3 on: February 17, 2008, 06:35:15 pm »

Locking *sigh*
Logged
Pages: [1]   Go Up
 

Page created in 0.02 seconds with 20 queries.