“Coppermine 1.5.28 this is a security and maintenance release.”

Coppermine 1.5.28 is a multi-purpose fully-featured and integrated web picture gallery script written in PHP using GD or ImageMagick as image library with a MySQL backend.

CPG is so fully featured it’s not enough to fully list them.

Coppermine Photo Gallery (CPG) is an open source project released under the GNU/GPL terms.

Changes Details

The release covers a recently discovered XSS vulnerability that allows (if unpatched) a malevolent visitor to include own script routines under certain conditions.

Additionally, cpg1.5.28 includes fixes for the following non-security related issues:

• TFixed misleading template error message
• Fixed display of keywords with special characters (thread)
• Removed duplicate page header if error occurs when deleting an album
• Added hidden feature to regard upload time of linked files in album info (thread)
• Fixed reference to documentation in config
• Fixed various documentation glitches
• Optimized main page code to reduce database query count
• Fixed album and file count if category contains private albums
• Updated known issues page
• Fixed album and file count if category contains currently not displayed sub-categories (thread, thread)
• Moved config options “Horizontal/vertical padding for full-size pop-up”, “Albums can be private” and “Show private album icon to unlogged user” to other groups
• Don’t redirect to registration form after login (thread)
• Added possibility to use pictures linked to albums via album keyword as category thumbnail (thread)
• Fixed function ‘starttable’ in theme ‘curve’ to make fully compatible with plugin hook ‘search_form’
• Replaced some jQuery code with plain JavaScript code to make admin tools compatible with later jQuery versions, in case users want to upgrade (thread)
• Updated Catalan language file (user contribution)
• Added plugin hook ‘theme_thumbnails_header’
• Added plugin hooks ‘comment_update’, ‘comment_add’ and ‘comment_approve’ (thread)
• Increased character limit to allow recently released top level domains (thread)
• Added function ‘theme_album_info’ to make information which is displayed next to each album themeable
• Fixed several issues with keywords manager
• Fixed utilization of CSS class ‘middlethumb’ on film strip (thread)
• Updated packaging docs of the MediaWiki 1.19 branch.
• Changes since 1.19.14[edit | edit source]
• Fixed resetting passwords.
• (bug 58640) Fixed a compatibility issue with PCRE 8.34 that caused pages to appear blank or with missing text.

[otw_is sidebar=otw-sidebar-8]

The post Coppermine 1.5.28 Update Released appeared first on Orange Internet Solutions.

Coppermine Update 1.5.24 fix several minor issues. All fixes are not security critical. 

Coppermine is a multi-purpose fully-featured and integrated web picture gallery script written in PHP using GD or ImageMagick as image library with a MySQL backend. CPG is so fully featured it’s not enough to fully list them. Coppermine Photo Gallery (CPG) is an open source project released under the GNU/GPL terms.

Changes Details

Since the last release of the cpg1.5.x series a couple of improvements have been added to the SVN repository.

Note:
If your gallery is running fine with cpg1.5.20 or cpg1.5.22 you don’t need to upgrade. If you are running an older version than cpg1.5.20, you must update to this latest version as soon as possible because of the security impact!

• More precise database query times in debug output
• Fixed album drop-down box options for guests
• Display maximum allowed file size when using the Flash-driven uploader
• Updated packaging docs
• Fixed edit files button next to public albums if user isn’t allowed to create albums, but can upload files
• Fixed registration process if “personal_album_on_registration” is enabled
• Added Persian language file (user contribution)
• Fixed possible missing parameter error during registration process
• Fixed PHP notices during install
• Don’t check unsupported/disallowed file types at the batch-add upload form
• Merged missing code changes of error message support for the batch add process
• Added Windows 8 support to statistic details page
• Added support for Internet Explorer 9 & 10 to statistic details page
• Fixed accent issues on keyword manager
• Added IP address to security log
• Added missing plugin hooks to theme ‘curve’

More Information

• Try Online Demo:
  Coppermine (Softaculous external link)
  Coppermine Changelog (Official website, external link)

• Start Coppermine:
  In order to use Coppermine you need a domain name (ex. yoursite.com) and web hosting service.
  If you don’t have a domain name Register a Domain Name.
  To install Coppermine choose one of our hosting plans. (all our packages includes Softaculous).

• Hosted Coppermine
  Contact us if you don’t need a domain or hosting service, and want to use Coppermine anyway.

[otw_is sidebar=otw-sidebar-8]

The post Coppermine Update 1.5.24 released appeared first on Orange Internet Solutions.