cpg1.5.48 Security release - upgrade mandatory! cpg1.5.48 Security release - upgrade mandatory!
 

News:

CPG Release 1.6.26
Correct PHP8.2 issues with user and language managers.
Additional fixes for PHP 8.2
Correct PHP8 error with SMF 2.0 bridge.
Correct IPTC supplimental category parsing.
Download and info HERE

Main Menu

cpg1.5.48 Security release - upgrade mandatory!

Started by Αndré, December 21, 2018, 08:55:42 PM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

Αndré

The Coppermine development team is releasing a security update for Coppermine in order to counter a recently discovered vulnerability. It is important that all users who run version cpg1.5.46 or older update to this latest version as soon as possible.

How to update:
Users running versions prior to 1.5.48 should update immediately by downloading the latest version from the download page and following the upgrade steps in the documentation.

Support:
If you have problems with this update, please use the Update support board. Do not post your issues to this announcement thread - your post will be deleted without notice.

Why was cpg1.5.48 released?
The release covers a recently discovered reflected XSS vulnerability.

Additionally, cpg1.5.48 includes fixes for the following non-security related issues:

  • Added support for custom MySQL server port to vBulletin bridge (thread)
  • Updated Japanese language file (user contribution)
  • Fixed white screens with low privileged users clicking into open albums when using theme "curve" (thread)
Thanks to the Netsparker team for discovering the vulnerability.


The Coppermine Team

Αndré


John Zelada


phill104

The current project is the 1.6.x line. The 1.5.x line is maintenance only.
It is a mistake to think you can solve any major problems just with potatoes.