Gallery 3.0.8 security release available

Gallery 3.0.8 is now available! We're hard at work on 3.1, but in the meantime two security researchers identified small security vulnerabilities in the 3.0.7 release. We've patched them and recommend that you upgrade to 3.0.8 ASAP. Thanks to Mala and Dhaval Chauhan for their responsible disclosure. We'll be rewarding them cash bounties as part of our Security Bounty Program.

Changes

  • two security fixes
  • bug fix in XCache cache driver
  • bug fix in G2 Import code
  • improve the Fix your Gallery task for speed and reliability
  • all closed tickets

Upgrading Gallery 3

Upgrading is really easy! Unpack the new version, move the var/ directory of the old version to the new version's folder and then either browse to: http://your-site.com/gallery3/index.php/upgrader or at a shell prompt: php index.php upgrade For more detailed upgrade instructions, please refer to the Gallery 3 User Guide

Got feedback?

If you have any overall feedback, please visit the Gallery 3.0.8 Feedback forum topic and let us know! If you have questions, please visit the Gallery 3 Wiki, the home for Gallery 3 documentation.

Hello bharat,
Can we already install a Beta of the version 3.1 ?
Thank you,
Raoul

bharat's picture

Raoul - you can always track the "master" branch on Github - but I don't recommend it at the moment because it's slightly broken and we're doing much of the active development in the kohana_3 branch which is really broken. In another month or so we should have something working that you can play with. If you're into pain/wizardry though I encourage you to take a peek at what's happening in kohana_3 and give us feedback!
---
Problems? Check gallery3/var/logs
file a bug/feature ticket | upgrade to the latest code! | hacking G3? join us on IRC!

Is it really necessary to install everything again? Or is a Patch/delta available?

http://reisetraeume.com

lookabit's picture

Yes. Why don't you make an upgrade via admin instead of re-installing everything and moving files around?

http://www.lookabit.com <---Nothing but Memes!

floridave's picture

G3.1 has one click upgrades planned.

Dave
_____________________________________________
Blog & G2 || floridave - Gallery Team

lookabit's picture

Can't wait for the one click upgrades!

http://www.lookabit.com <---Nothing but Memes!

Sweet!