Debian update for gallery2 - Advisories

Software Inspectors

	Scan Online

	Personal (PSI)

	Network (NSI 2.0)

Solutions For

	Security Professionals

	Security Vendors

Free Solutions For

	Open Communities

	Journalists & Media

Secunia Advisories

	Search

	Historic Advisories

	Listed By Product

	Listed By Vendor

	Statistics / Graphs

	Secunia Research

	Report Vulnerability

	About Advisories

Virus Information

	Chronological List

	Last 10 Virus Alerts

	About Virus Information

Secunia Customers

	Customer Area

Debian update for gallery2

Secunia Advisory:	SA27594
Release Date:	2007-11-09

Critical:	Moderately critical
Impact:	Manipulation of data
Where:	From remote
Solution Status:	Vendor Patch

OS:	Debian GNU/Linux 4.0 Debian GNU/Linux unstable alias sid


CVE reference:	CVE-2007-4650 (Secunia mirror)

	Want to know the next time vulnerabilities are fixed in this product? - Companies can be alerted via email and SMS!

Description: Debian has issued an update for gallery2. This fixes some vulnerabilities, which can be exploited by malicious users to manipulate certain data. For more information: SA26716 Solution: Apply updated packages. -- Debian GNU/Linux 4.0 alias etch -- Source archives: http://security.debian.org/pool/updat...allery2/gallery2_2.1.2-2.0.etch.1.dsc Size/MD5 checksum: 884 1292cd38f037d14233c50c82f2656559 http://security.debian.org/pool/updat...ry2/gallery2_2.1.2-2.0.etch.1.diff.gz Size/MD5 checksum: 17103 96a6d2095129554de20e23203ff07cfa http://security.debian.org/pool/updat...g/gallery2/gallery2_2.1.2.orig.tar.gz Size/MD5 checksum: 9506000 0603fedf38581e11c27a78d451f2730f Architecture independent components: http://security.debian.org/pool/updat...ry2/gallery2_2.1.2-2.0.etch.1_all.deb Size/MD5 checksum: 9623730 6292925bcfc5b35ef7c7493b0869019d -- Debian GNU/Linux unstable alias sid -- Fixed in version 2.2.3-1. Original Advisory: http://www.us.debian.org/security/2007/dsa-1404 Other References: SA26716: http://secunia.com/advisories/26716/



Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise. Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.

1201 Related Secunia Security Advisories, displaying 10

1. Debian update for ruby1.8

2. Debian update for libgd2

3. Debian update for afuse

4. Debian update for gaim

5. Debian update for lighttpd

6. Debian update for iceweasel

7. Debian update for mysql-dfsg-5.0

8. Debian update for poppler

9. Debian bind DNS Cache Poisoning Vulnerability

10. Debian update for bind9

Show all related advisories

Send Feedback to Secunia

If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com. Ideas, suggestions, and other feedback are most welcome.

Secunia PSI
Scan | Patch | Track
Free Download

Secunia Poll

Most Popular Advisories

1.	Apple Safari Cross-Domain Cookie Injection Vulnerability

2.	YouTube Blog Multiple Vulnerabilities

3.	dnsmasq Denial of Service and DNS Cache Poisoning

4.	Moodle Script Insertion and Cross-Site Request Forgery

5.	Asterisk Two Denial of Service Vulnerabilities

6.	Ubuntu update for dnsmasq

7.	IPCop update for various packages

8.	SocialEngine SQL Injection and Code Execution

9.	Geeklog Forum Plugin Search Cross-Site Scripting Vulnerability

10.	Claroline Multiple Cross-Site Scripting Vulnerabilities