109255 – www-apps/gallery 2.0.1 (version bump), security fix

Bug 109255 - www-apps/gallery 2.0.1 (version bump), security fix

Summary: www-apps/gallery 2.0.1 (version bump), security fix

Status:	RESOLVED FIXED

Alias:	None

Product:	Gentoo Security
Classification:	Unclassified
Component:	Vulnerabilities (show other bugs)
Hardware:	All Linux

Importance:	High trivial
Assignee:	Gentoo Security

URL:	http://gallery.menalto.com/gallery_2....
Whiteboard:	~1? [noglsa] jaervosz
Keywords:

Depends on:
Blocks:

Reported:	2005-10-14 02:45 UTC by Tobias Sager
Modified:	2005-10-23 13:38 UTC (History)
CC List:	4 users (show)

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Tobias Sager 2005-10-14 02:45:28 UTC

<snip>
Gallery 2.0.1 is now available for download. This release adds no new features.
It fixes a security flaw that could allow remote visitors to view sensitive
files on your webserver. All releases of Gallery 2, from Alpha 1 onwards are
vulnerable to this issue and we strongly recommend that you upgrade to version
2.0.1 as soon as possible. Please follow our upgrading instructions and download
and install the latest release.
</snip>

Don't know if this is worth a security release as gallery-2.0 is not marked
stable in portage.

Comment 1 Tobias Sager 2005-10-14 04:43:24 UTC

Renamed ebuild and upgraded my installation without problems (well,
webapp-config just needs an eternity..).

Comment 2 Thierry Carrez (RETIRED) gentoo-dev

2005-10-14 09:31:30 UTC

web-apps, please bump ~ to 2.0.1

Comment 3 Renat Lumpau (RETIRED) gentoo-dev

2005-10-23 12:33:12 UTC

Bumped, apologies for the delay

Comment 4 Thierry Carrez (RETIRED) gentoo-dev

2005-10-23 13:38:30 UTC

Thx for the bump.