Vulnerability IntelligenceVulnerability ScanningBlog - new entryCorporate InformationOnline ShopCustomer Login  
 Secunia AdvisoriesSecunia ResearchBinary Analysis  
Home > Vulnerability Intelligence > Secunia Advisories > Debian update for gallery2
Secunia Advisories
Advisories
Search
Advisories by Product
Advisories by Vendor
Historic Advisories
Mailing Lists
Report Vulnerability
Contact Form
Business Solutions Restricted
Partner Solutions Restricted
About
 
Debian update for gallery2
Secunia Advisory: SA27594
Advisory Toolbox:
Issue ticket
Save in to-do list
Mark as handled
Exploit information
Download as PDF
Review actions
Add comment
Release Date: 2007-11-09
Popularity: 4,006 views

Critical:
Moderately critical
Impact: Manipulation of data
Where: From remote
Solution Status: Vendor Patch

OS:Debian GNU/Linux 4.0
Debian GNU/Linux unstable alias sid
Subscribe: Instant alerts on relevant vulnerabilities

CVE reference:CVE-2007-4650
Description:
Debian has issued an update for gallery2. This fixes some vulnerabilities, which can be exploited by malicious users to manipulate certain data.

For more information:
SA26716

Solution:
Apply updated packages.

-- Debian GNU/Linux 4.0 alias etch --

Source archives:

http://security.debian.org/pool/updat...allery2/gallery2_2.1.2-2.0.etch.1.dsc
Size/MD5 checksum: 884 1292cd38f037d14233c50c82f2656559
http://security.debian.org/pool/updat...ry2/gallery2_2.1.2-2.0.etch.1.diff.gz
Size/MD5 checksum: 17103 96a6d2095129554de20e23203ff07cfa
http://security.debian.org/pool/updat...g/gallery2/gallery2_2.1.2.orig.tar.gz
Size/MD5 checksum: 9506000 0603fedf38581e11c27a78d451f2730f

Architecture independent components:

http://security.debian.org/pool/updat...ry2/gallery2_2.1.2-2.0.etch.1_all.deb
Size/MD5 checksum: 9623730 6292925bcfc5b35ef7c7493b0869019d

-- Debian GNU/Linux unstable alias sid --

Fixed in version 2.2.3-1.

Original Advisory:
http://www.us.debian.org/security/2007/dsa-1404

Other References:
SA26716:
http://secunia.com/advisories/26716/

Track this Secunia Advisory
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.

Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.

Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
  
Latest Advisories

Today
New advisories: 14
New vulnerabilities: 21
Updated advisories: 22

Moderately // 19 views
Gentoo update for VLC
Less // 28 views
X-Spam for SMTP Servers Insecure File Permissions
Moderately // 47 views
IBM DB2 Multiple Vulnerabilities
Less // 26 views
phpAuction "phpinfo.php" Information Disclosure
Moderately // 37 views
Zen Cart Two SQL Injection Vulnerabilities
Moderately // 97 views
NetBSD Malformed ICMPv6 "MLD-QUERY" Denial of Service
Less // 73 views
Silentum LoginSys Multiple Cross-site Scripting Vulnerabilities
Less // 92 views
Avactis Shopping Cart "checkout.php" Cross-Site Scripting
Moderately // 82 views
MemHT Portal "stats_res" SQL Injection Vulnerability
Less // 99 views
libpng "png_push_read_zTXt( )" Off-By-One Vulnerability

Solutions | More...  

Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.

Ideas, suggestions, and other feedback are most welcome.

Most Popular - 3 Hours

1. Adobe Flash Player Multiple Vulnerabilities // 58 views
2. VLC Media Player Multiple Vulnerabilities // 44 views
3. IBM DB2 Multiple Vulnerabilities // 42 views
4. Linux Kernel "listxattr" Memory Corruption and CHRP Denial of Service // 38 views
5. Sun Java JDK / JRE Multiple Vulnerabilities // 37 views
6. Microsoft Office Two Code Execution Vulnerabilities // 36 views
7. NetBSD Malformed ICMPv6 "MLD-QUERY" Denial of Service // 28 views
8. libpng "png_push_read_zTXt()" Off-By-One Vulnerability // 25 views
9. MemHT Portal "stats_res" SQL Injection Vulnerability // 25 views
10. Microsoft Word Malformed Object Pointer Vulnerability // 24 views



Contact | Terms & Conditions | Report Vulnerability | Press | Jobs | About Secunia
Copyright Secunia 2002-2008