EDIT: There were a number of problems with pl3 so it has been pulled. Look for an updated security release some time today.

Jim Paris discovered a few security problems in Gallery which have been addressed in 1.4.4-pl3. The primary problem is a cross site scripting vulnerability which allows code to be inserted into a Gallery by using specially formed URLs. This code then appears to be part of the Gallery.

No risk is posed to the webserver-itself or any non-Gallery data, but a Gallery install could be compromised using appropriate code.

All Gallery users are very strongly urged to upgrade to 1.4.4-pl3 immediately, which fixes this serious problem and will secure your system.

Gallery 1.4.4-pl3 can be downloaded from the Gallery Download Page.

This is the third installment in the Gallery 2 alpha cycle. We've made considerable improvements in G2 in the past month and are presenting you with another technology release so that you can get an idea of how the product is maturing. As with the earlier alpha releases, G2 is stable and reliable, but does not yet have all the features that you will find in Gallery 1.4.4 and is not yet ready for a production environment.

Download the latest code and play with it! Before you ask for help, please, please read the README -- we've made an effort to answer all of your questions there. Especially read the known issues section. Then head on over to the G2 Forums and let us know what you think!

The more feedback you give us now, the better the final version of G2 will be. Thanks for your continued support!

Today we released the new language packs for Gallery 1.4.4-pl2.
Updates were made for
german, spanish, french, italian, nederlands, norsk, portugues (both), russian, slovanian, turkish and chinese.

New languages: Slovak and traditional chinese for Hongkong.

In the wake of two updates to Gallery 1.4.4, comes an update to Gallery Remote.

Fixed several bugs in the 1.4 release:
- double upload to old (pre 1.4.3) Galleries
- no ability to create new albums in the top-level album
- misc bugs on applets

Improvements:
- GR will now retry requests to the server when they fail, and if they fail again will log the error and keep uploading instead of stopping
- HTML tags in captions are no longer displayed in the slideshow
- crop area can be moved and resized
- better handling of G2
- better handling of cookies

This is the second installment in the Gallery 2 alpha cycle. We've made considerable improvements in G2 in the past month and are presenting you with another technology release so that you can get an idea of how the product is maturing. As with the Alpha-1 release, G2 is stable and reliable, but does not yet have all the features that you will find in Gallery 1.4.4 and is not yet ready for a production environment.

Download the latest code and play with it! Before you ask for help, please, please read the README -- we've made an effort to answer all of your questions there. Especially read the known issues section. Then head on over to the G2 Forums and let us know what you think!

The more feedback you give us now, the better the final version of G2 will be. Thanks for your continued support!

Almost 5000 of you read the Developer of the Month article last month, so it seems like a good thing to continue. We skipped August so now the developer will be announced before the month instead of at the end of the month. Please let us know if you have more questions you want answered! So here is the September Gallery Developer of The Month, Jens Tkotz aka Tim_j, Gallery Multilanguage/Translation Team Lead and Gallery 1.x Developer.

Read More for the details...