Gallery before 1.5.9, and 2.x before 2.2.6, does not set the secure
flag for the session cookie in an https session, which can cause the
cookie to be sent in http requests and make it easier for remote
attackers to capture this cookie.
Gallery before 1.5.9, and 2.x before 2.2.6, does not properly handle
ZIP archives containing symbolic links, which allows remote
authenticated users to conduct directory traversal attacks and read
arbitrary files via vectors related to the archive upload (aka zip
Cross-site scripting (XSS) vulnerability in Gallery 2.x before 2.2.6
allows remote attackers to inject arbitrary web script or HTML via a
crafted Flash animation, related to the ability of the animation to
"interact with the embedding page."
*** Bug 238773 has been marked as a duplicate of this bug. ***
Bumped in the tree. Arch teams, please, stabilize.
gallery-2.2.6: alpha amd64 hppa ppc ppc64 sparc x86
gallery-1.5.9: alpha amd64 hppa ppc sparc x86
Thx, seem to work fine on my amd64 (intel) platform.
Both stable for HPPA.
amd64 stable, all arches done.
time for GLSA decision, I vote yes.
Removed vulnerable versions. webapps done.
YES too, request filed.
GLSA 200811-02, thanks everyone, sorry about the delay.