cpg1.5.46 Security release - upgrade mandatory!

[Αndré]

The Coppermine development team is releasing a security update for Coppermine in order to counter recently discovered vulnerabilities. It is important that all users who run version cpg1.5.44 or older update to this latest version as soon as possible.

How to update:
Users running versions prior to 1.5.46 should update immediately by downloading the latest version from the download page and following the upgrade steps in the documentation.

Support:
If you have problems with this update, please use the Update support board. Do not post your issues to this announcement thread - your post will be deleted without notice.

Why was cpg1.5.46 released?
The release covers a recently discovered directory traversal vulnerability that allows (if unpatched) a malevolent visitor to access restricted directories under certain conditions.

Thanks to Matthew Hickey from My Hacker House for discovering the vulnerability.


The Coppermine Team

[Αndré]

Users running PHP 4, please read this.