Gallery 3.0.8

Chris Kelly — Sun, 02 Jun 2013 21:34:50 -0000

Gallery 3.0.8 is now available! We're hard at work on 3.1, but in the meantime two security researchers identified small security vulnerabilities in the 3.0.7 release. We've patched them and recommend that you upgrade to 3.0.8 ASAP. Thanks to Mala and Dhaval Chauhan for their responsible disclosure. We'll be rewarding them cash bounties as part of our Security Bounty Program.

http://galleryproject.org/gallery_3_0_8
http://downloads.sourceforge.net/gallery/gallery-3.0.8.zip

Gallery 3.0.7

Chris Kelly — Mon, 22 Apr 2013 13:20:25 -0000

Gallery 3.0.7 is now available! Yes, we were hoping that 3.0.6 would be the last release in the 3.0 line.. but thanks to Dhiraj Ranka and Shad Laws (a new Gallery core developer - woot!) we've uncovered two small security vulnerabilities that we'd like to patch up, because safety first! Please go ahead and update to 3.0.7 and then sit back and enjoy while we work hard behind the scenes to get 3.1 ready for you.

http://galleryproject.org/gallery_3_0_7
http://downloads.sourceforge.net/gallery/gallery-3.0.7.zip

Gallery 3.0.6 bug fix release available!

Chris Kelly — Wed, 20 Mar 2013 13:13:57 -0000

Gallery 3.0.6 is now available! This is likely to be the last release in the 3.0 branch of Gallery - next up we're going to 3.1 and making a lot of big improvements. But before we do that, we wanted to iron out a few kinks and update a few last libraries before we stop working on the 3.0.x code base. This upgrade will be fast and painless, go on.. do it!

http://galleryproject.org/gallery_3_0_6
http://downloads.sourceforge.net/gallery/gallery-3.0.6.zip

Gallery 3.0.5 Security Release Available

Chris Kelly — Fri, 22 Feb 2013 14:50:06 -0000

Gallery 3.0.5 is now available for download. It contains several security fixes as well as a handful of new features. The only major security issue involves someone malicious accessing a copy of Gallery 3 that is not yet installed, so if you already have Gallery 3.0.4 installed and configured there are no known major issues. However, as always we strongly recommend that you upgrade to the latest code. Go on, do it. It's fast and painless.

We'd like to thank the following individuals for responsibly reporting these security issues: Michael T. Boos, AMol NAik, Johannes Dahse, Sergey Markov, James 'albino' Kettle, and Johannes Dahse. For their efforts, they will each be receiving bounties of between $100 and $1000 for their help in making Gallery more secure.

http://gallery.menalto.com/gallery_3_0_5
http://downloads.sourceforge.net/gallery/gallery-3.0.5.zip

Gallery 3.0.4 Security Release Available

Chris Kelly — Tue, 12 Jun 2012 18:34:27 -0000

After several extensive internal and external security audits which discovered 22 distinct vulnerabilities, we are releasing Gallery 3.0.4 as a security release. All of the issues require that someone with malicious intent either have an account with edit permissions, or trick a user with edit permissions into clicking on a malicious link. In most cases, this can only lead to a possible XSS vulnerability, but in several instances it allows arbitrary PHP code execution.

We thank the following individuals for reporting these issues: Chalk, Mateusz Goik, James 'albino' Kettle, Emanuel Bronshtein, and Sergey Markov. Due to their efforts, they will each be receiving bounties of $1000 for their help in making Gallery more secure.

http://gallery.menalto.com/gallery_3_0_4
http://downloads.sourceforge.net/gallery/gallery-3.0.4.zip

Gallery 3.0.3 and Gallery 2.3.2 Security Rele

Chris Kelly — Wed, 11 Apr 2012 15:24:29 -0000

Gallery is an online photo album organizer. Whether for small personal sites or large community sites, Gallery provides an intuitive way to blend photo management seamlessly into any website. Serving millions worldwide, Gallery is the most widely used system of its kind. Gallery is free to download and use.

We're releasing both Gallery 3.0.3 and Gallery 2.3.2 as security releases. Several researchers, working independently, discovered possible encryption-related vulnerabilities. Low-risk XSS vulnerabilities limited to the administration area were also reported. We thank the following individuals for reporting these issues: James 'albino' Kettle, George Argyros & Aggelos Kiayias, and Emanuel Bronshtein. The CVE id for these issues is CVE-2012-1113.

http://gallery.menalto.com/gallery_3_0_3_and_gallery_2_3_2
http://downloads.sourceforge.net/gallery/gallery-3.0.3.zip

Gallery 3.0.2 bugfix release available

Chris Kelly — Wed, 25 May 2011 16:12:46 -0000

Gallery 3.0.2 is available, woot! This is a bug and stability fix release, but it adds a few new usability features. You should upgrade to Gallery 3.0.2 when you can. Upgrading is quick and easy!

http://gallery.menalto.com/gallery_3.0.2_released
http://downloads.sourceforge.net/gallery/gallery-3.0.2.zip

Gallery 3.0.1 security and bugfix release is

Chris Kelly — Sun, 23 Jan 2011 17:02:35 -0000

Gallery 3.0.1 is available! This is a bug and stability fix release, but it also includes an important security fix. We strongly advise that you upgrade to Gallery 3.0.1 as soon as possible. Upgrading is quick and easy — don't put it off!

http://gallery.menalto.com/gallery_3.0.1_released
http://downloads.sourceforge.net/gallery/gallery-3.0.1.zip

Gallery 3.0 is here!

Chris Kelly — Tue, 05 Oct 2010 13:46:51 -0000

Gallery 3.0 is here! It's been two years since Bharat sent out the original call to arms email that started the ball rolling. Since then we've had multiple coding sprints, 9 intermediate releases and seen over 6000 changes from 18+ developers. The final product has gone through many design and coding iterations and has had tremendous feedback from you, the community. Get ready to have a great experience!

Download it now:

http://downloads.sourceforge.net/gallery/gallery-3.0.zip

Get all the details:

http://gallery.menalto.com/gallery_3.0_released

Gallery 3.0 Release Candidate 2 is here!

Chris Kelly — Tue, 06 Jul 2010 13:37:21 -0000

The second and final release candidate of Gallery 3.0 (code named Santa Fe) is here! Your feedback in our beta and release candidate phases has been priceless. Now we're just going to make sure that there are no last minute showstoppers before we release the final version and our real journey with Gallery 3 starts!
Download it now!

http://downloads.sourceforge.net/gallery/gallery-3.0-rc-2.zip

read on for more details

http://gallery.menalto.com/gallery_3.0_rc2_released

Recent posts to news