full-disclosure - Re: Additional bugs in gallery

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

From: bharat at menalto.com (Bharat Mediratta)
Subject: Re: Additional bugs in gallery

> # And the solution?
> Go to
>
<http://gallery.menalto.com/modules.php?op=modload&name=News&file=article&si
d=50&mode=thread&order=0&
> thold=0> to see how to solve the problem
>
> # Why do you post this problem again?
> Because the author of the announcement on the gallery website said:
> An alternative to doing a full upgrade is to patch the files that contain
> the security fix. This is relativ
> ely easy to do. All you need to do is edit these files:
> errors/configmode.php
> errors/needinit.php
> errors/reconfigure.php
> errors/unconfigured.php
>
> That's not absolutely right...you have to patch the file:
> captionator.php too!

I've updated the website article to include captionator.php.

> Hope it's fixed in new releases :).

This is fixed in CVS today, v1.3.1-cvs-b13 snapshot, and will be
in the final v1.3.1 release that we put out on Friday.

Thanks,
-Bharat