| |||||||||||||||||||
Fedora alert FEDORA-2012-9705 (gallery3)
-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2012-9705 2012-06-20 00:01:06 -------------------------------------------------------------------------------- Name : gallery3 Product : Fedora 17 Version : 3.0.4 Release : 1.fc17 URL : http://gallery.menalto.com Summary : Customizable photo gallery web site Description : Gallery is an open source project with the goal to develop and support leading photo sharing web application solutions. -------------------------------------------------------------------------------- Update Information: Gallery 3.0.4 was released with the following release notes: After several extensive internal and external security audits which discovered 22 distinct vulnerabilities, we are releasing Gallery 3.0.4 as a security release. All of the issues require that someone with malicious intent either have an account with edit permissions, or trick a user with edit permissions into clicking on a malicious link. In most cases, this can only lead to a possible XSS vulnerability, but in several instances it allows arbitrary PHP code execution. -------------------------------------------------------------------------------- ChangeLog: * Tue Jun 19 2012 Jon Ciesla <limburgher@gmail.com> - 3.0.4-1 - 3.0.4, BZ 833189, 833190. -------------------------------------------------------------------------------- References: [ 1 ] Bug #833189 - gallery: 3.0.4 fixes numerous security flaws [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=833189 [ 2 ] Bug #833190 - gallery: 3.0.4 fixes numerous security flaws [epel-6] https://bugzilla.redhat.com/show_bug.cgi?id=833190 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update gallery3' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list package-announce@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/package-... (Log in to post comments)
|
|||||||||||||||||||