Advanced search  

News:

CPG Release 1.6.26
Correct PHP8.2 issues with user and language managers.
Additional fixes for PHP 8.2
Correct PHP8 error with SMF 2.0 bridge.
Correct IPTC supplimental category parsing.
Download and info HERE

Pages: [1]   Go Down

Author Topic: cpg1.5.44 Security release - upgrade mandatory!  (Read 32438 times)

0 Members and 1 Guest are viewing this topic.

Αndré

  • Administrator
  • Coppermine addict
  • *****
  • Country: de
  • Offline Offline
  • Gender: Male
  • Posts: 15764
cpg1.5.44 Security release - upgrade mandatory!
« on: September 23, 2016, 04:56:17 pm »

The Coppermine development team is releasing a security update for Coppermine in order to counter recently discovered vulnerabilities. It is important that all users who run version cpg1.5.42 or older update to this latest version as soon as possible.

How to update:
Users running versions prior to 1.5.44 should update immediately by downloading the latest version from the download page and following the upgrade steps in the documentation.

Support:
If you have problems with this update, please use the Update support board. Do not post your issues to this announcement thread - your post will be deleted without notice.

Why was cpg1.5.44 released?
The release covers a recently discovered SQL injection vulnerability that allows (if unpatched) a malevolent visitor to include own script routines under certain conditions. Furthermore, a possible arbitrary shell command execution has been fixed.

Additionally, cpg1.5.44 includes fixes for the following non-security related issues:
  • Fixed zip upload of plugins for 64 bit PHP (thread, thread)
  • Updated link in credits page (thread)
  • Added new options to hidden feature "sort order of albums" (thread)
  • Replaced hard-coded number "10000" with constant "FIRST_USER_CAT" (thread, thread)
Thanks to Hendrik Buchwald and his team at RIPS Tech for discovering the vulnerabilities.


The Coppermine Team
Logged

Αndré

  • Administrator
  • Coppermine addict
  • *****
  • Country: de
  • Offline Offline
  • Gender: Male
  • Posts: 15764
Re: cpg1.5.44 Security release - upgrade mandatory!
« Reply #1 on: September 23, 2016, 04:57:51 pm »

Users running PHP 4, please read this.
Logged

pols1337

  • Coppermine frequent poster
  • ***
  • Country: us
  • Offline Offline
  • Gender: Male
  • Posts: 244
Re: cpg1.5.44 Security release - upgrade mandatory!
« Reply #2 on: December 16, 2016, 03:57:12 am »

Dear all,

It's been a long time since I checked on the Coppermine project, but I wanted to wish you all happy holidays and the very best as you keep this worthwhile project alive for so many users.  :)
Logged
Pages: [1]   Go Up
 

Page created in 0.018 seconds with 20 queries.