Download Gallery 2.1.2

The developers behind Gallery have released an important security update of their program that raises the version number to 2.1.2. Gallery is an advanced program written in PHP that can be used to create online photo albums. For example, unlike JAlbum, the photos are stored in a database and a web server is needed to run the whole thing. Others features are, for example, the Photo Management option that can, among other things, automatically create thumbnails, rotate and resize photos, it is possible to assign read and/or write permissions to the albums and there are numerous modules to further expand the possibilities or the appearance to adjust. The main problem that has been fixed in this release is that the session ID could not be retrieved. This was only the case when Gallery’s storage folder was directly accessible on the Internet, which is strongly discouraged during installation. The full release notes are as follows:

This release adds no new features. It fixes a minor information leakage in Gallery 2.1 and 2.1.1a and a major session ID disclosure in all versions prior to Gallery 2.1. Note that these flaws only affect installations where Gallery’s storage folder is accessible directly from the web, which we strongly discouraged during the installation process.[break]