Notice: This affects all versions of Gallery from 1.2 to 1.4.3-pl1:

We have discovered a well-hidden but potentially serious security flaw in these versions of Gallery which can allow a hacker to log in to your Gallery as an administrator and perform any actions on your albums. No risk is posed to the webserver-itself or any non-Gallery data. All Gallery users are very strongly urged to upgrade to 1.4.3-pl2 immediately, which fixes this serious problem and will secure your system.

Gallery 1.4.3-pl2 can be downloaded from the Gallery Download Page.

Please use the Discussion Forums for any issues or questions. This topic is now locked to further comments to prevent confusion and to make sure no questions are lost.

With the recent Gallery 1.4.3 release, Gallery Remote was included in Gallery in the form of the upload and slideshow applets.

While Gallery Remote has been lagging behind Gallery for internationalization and localization, we feel it's important for Gallery Remote to also be available in multiple languages, especially for the user interface used in the applets (image upload and full-screen slideshow).

For this reason, I have recently modified Gallery Remote to make it easier for less technically inclined translators to create a new language file for it, and documented the process.

Please feel free to send suggestions to make the process easier and smoother. Thanks very much in advance for volunteering your time and effort to help us make Gallery and Gallery Remote better and more usable.

Gallery 1.4.3 is included in the new release of YellowTip Web Server 2.0. YellowTip Web Server is an Open Source server package for Windows and we are happy to see Gallery become a part of it. This package allows easy installation of lots of Open Source server components on Windows with one installer. Try out their new release and let them and us know what you think!

To read more about YellowTip Web Server 2.0:
http://www.yellowtip.com/products/yellowtipws.php

To download YellowTip Web Server 2.0:
http://www.yellowtip.com/downloads/index.php

UPDATE:YellowTip Web Server 2.0.2 is out which now includes the Gallery License and also fixes some configuration problems with MySQL when the medium or large memory sizes were selected.

UPDATE:YellowTip Web Server 2.0.1 has been released which addresses a few issues, some of them relating specifically to Gallery. If you tried 2.0 and had some problems, 2.0.1 should resolve the common ones.

Read more for their release notes.

We recently switched mail servers and as a result, website email wasn't getting sent for a few days (from sometime on May 5th, until about 10 minutes ago). This includes password emails for new account registrations. This has affected a lot of people and we apologize. If you tried to register and didn't get a password, you can go to the Lost Password page and get a new password. If you registered for a couple of accounts because you were trying different options before asking for help (you get a gold star!) then go ahead and let us know which ones to delete.

Thanks for your patience and sorry about the hassle.

Gallery v1.4.3-pl1 is an update to Gallery 1.4.3 to resolve several issues found after the release. It is recommended that all users upgrade to this from 1.4.3, or if upgrading from an older version users should use this in place of the original 1.4.3 release.

• Watermarking no longer fails when trying to center a watermark on an image with odd dimensions.
• Config Wizard option to disable the applets and option to set user preference for default slideshow. Default is to include the applets but have the "Modern Browser" JavaScrip slideshow as the default.
• Fix for some situations where an album upgrade would try to set the highlight from an empty album.
• Updated documentation to include changes to permissions, csv import,and watermarking. (update docs from donw - "alindeman, updated the docs, but it was after the 1.4.3 branch. I think they should be updated in a patch. It would include the changes to permissions, as well as document csv import and watermarking.")
• Fixed a possible problem where users could be lost by directly upgrading to 1.4.3 from a version of Gallery before 1.4 (upgrade path issue with users.
• Fixed old problem that occured when the index of an album being moved was larger than the number of photos inside of it.
• Various small fixes to Gallery Remote, 14.3-pl1 ships with Gallery Remote 1.3.3-b

Download 1.4.3-pl1 from the Gallery Download Page

Gallery v1.4.3 is now available for download. It is a combination of lots of bug fixes and several new features. Some of these include:

• Compatibility with register_globals turned off
• GeekLog, phpBB2, MamboServer, and NSNnuke integration
• Image watermarking
• Fullscreen fit-to-screen slideshow Java applet
• Java applet for uploading
• Various security enhancements

Gallery Remote v1.3.2 is also available now with some important fixes:

• Fixed bug on Linux where the list of albums would be hidden.
• Added support for username and password to be embedded in URLs, such as http://user:pass@example.com/path/
• No longer resizing up (upsampling) images that are smaller than the album maximum size on upload.

This release also comes several days after a new release of our precompiled NetPBM binaries.
Download Gallery v1.4.3, Gallery Remote 1.3.2, and the new NetPBM binaries from the Gallery Download Page on SourceForge now!