Advanced search  

News:

CPG Release 1.6.26
Correct PHP8.2 issues with user and language managers.
Additional fixes for PHP 8.2
Correct PHP8 error with SMF 2.0 bridge.
Correct IPTC supplimental category parsing.
Download and info HERE

Pages: [1]   Go Down

Author Topic: cpg1.5.20 Security release - upgrade mandatory!  (Read 109298 times)

0 Members and 1 Guest are viewing this topic.

Αndré

  • Administrator
  • Coppermine addict
  • *****
  • Country: de
  • Offline Offline
  • Gender: Male
  • Posts: 15764
cpg1.5.20 Security release - upgrade mandatory!
« on: March 29, 2012, 02:20:35 pm »

The Coppermine development team is releasing a security update for Coppermine in order to counter a recently discovered vulnerability. It is important that all users who run version cpg1.5.18 or older update to this latest version as soon as possible.

How to update:
Users running versions prior to 1.5.20 should update immediately by downloading the latest version from the download page and following the upgrade steps in the documentation.

Support:
If you have problems with this update, please use the Update support board. Do not post your issues to this announcement thread - your post will be deleted without notice.

Why was cpg1.5.20 released?
The release covers several path disclosure vulnerabilities. If unpatched, it's possible to generate an error that will reveal the full path of the script. A remote user can determine the full path to the web root directory and other potentially sensitive information.
Furthermore, the release covers a recently discovered XSS vulnerability that allows (if unpatched) a malevolent visitor to include own script routines under certain conditions.

Additionally, cpg1.5.20 includes fixes for the following non-security related issues:
  • Disabled possibility to move albums to root level of user category (thread)
  • Fixed broken IP address lookup (thread)
  • Fixed email validation for registration process (thread)
  • Updated Serbian language file (user contribution)
  • Changed status in credits section to 'retired'
  • Updated Italian language file (user contribution)
  • Re-added 'search by owner name' checkbox to search form (thread, thread)
  • New feature: display only the uploaded files from the last queue after flash upload (thread)
  • Fixed behavior of "Show first level album thumbnails in categories" setting (thread)
  • Added plugin hook 'theme_album_params'
  • Fixed quota bar in user manager for secondary group memberships (thread)
  • Display default groups "Administrators" and "Registered" on modify user page (thread)
  • Moved code from usermgr.php to function 'cpg_get_groups'
  • Added Opera compatibility for rounded corners to theme 'curve' (thread)
  • Fixed error message at "Edit file information" form (thread)
  • Updated EXIF library (thread)
  • Fixed clickable keywords in file information box at intermediate view (thread)
  • Fixed search results when searching for specific characters (thread)
  • Fixed error message when activating more than one user in the user manager (thread)
  • Fixed different gallery behavior for register_globals on/off setting (thread)

Thanks to Janek Vind for discovering the vulnerability.


The Coppermine Team
« Last Edit: October 09, 2012, 09:48:37 am by Αndré »
Logged

PLEG54

  • Coppermine newbie
  • Offline Offline
  • Posts: 1
Re: cpg1.5.20 Security release - upgrade mandatory!
« Reply #1 on: March 29, 2012, 07:31:08 pm »

Hello André,

there is a mistake into the file /include/picmgmt.inc.php at line 18 :
not "iif (!defined('IN_COPPERMINE')) die('Not in Coppermine...');"
but "if (!defined('IN_COPPERMINE')) die('Not in Coppermine...');"

Best regards,
PLEG54
Logged

Αndré

  • Administrator
  • Coppermine addict
  • *****
  • Country: de
  • Offline Offline
  • Gender: Male
  • Posts: 15764
Re: cpg1.5.20 Security release - upgrade mandatory!
« Reply #2 on: March 29, 2012, 08:57:27 pm »

What an annoying typo :o I'll fix it and update the package accordingly. Package updated.

Thanks for the report.
« Last Edit: March 29, 2012, 09:19:48 pm by Αndré »
Logged
Pages: [1]   Go Up
 

Page created in 0.02 seconds with 20 queries.