Coppermine 1.5.28 Update Released

“Coppermine 1.5.28 this is a security and maintenance release.”

Coppermine 1.5.28 is a multi-purpose fully-featured and integrated web picture gallery script written in PHP using GD or ImageMagick as image library with a MySQL backend.

CPG is so fully featured it’s not enough to fully list them.

Coppermine Photo Gallery (CPG) is an open source project released under the GNU/GPL terms.

Changes Details

The release covers a recently discovered XSS vulnerability that allows (if unpatched) a malevolent visitor to include own script routines under certain conditions.

Additionally, cpg1.5.28 includes fixes for the following non-security related issues:

• TFixed misleading template error message
• Fixed display of keywords with special characters (thread)
• Removed duplicate page header if error occurs when deleting an album
• Added hidden feature to regard upload time of linked files in album info (thread)
• Fixed reference to documentation in config
• Fixed various documentation glitches
• Optimized main page code to reduce database query count
• Fixed album and file count if category contains private albums
• Updated known issues page
• Fixed album and file count if category contains currently not displayed sub-categories (thread, thread)
• Moved config options “Horizontal/vertical padding for full-size pop-up”, “Albums can be private” and “Show private album icon to unlogged user” to other groups
• Don’t redirect to registration form after login (thread)
• Added possibility to use pictures linked to albums via album keyword as category thumbnail (thread)
• Fixed function ‘starttable’ in theme ‘curve’ to make fully compatible with plugin hook ‘search_form’
• Replaced some jQuery code with plain JavaScript code to make admin tools compatible with later jQuery versions, in case users want to upgrade (thread)
• Updated Catalan language file (user contribution)
• Added plugin hook ‘theme_thumbnails_header’
• Added plugin hooks ‘comment_update’, ‘comment_add’ and ‘comment_approve’ (thread)
• Increased character limit to allow recently released top level domains (thread)
• Added function ‘theme_album_info’ to make information which is displayed next to each album themeable
• Fixed several issues with keywords manager
• Fixed utilization of CSS class ‘middlethumb’ on film strip (thread)
• Updated packaging docs of the MediaWiki 1.19 branch.
• Changes since 1.19.14[edit | edit source]
• Fixed resetting passwords.
• (bug 58640) Fixed a compatibility issue with PCRE 8.34 that caused pages to appear blank or with missing text.

[otw_is sidebar=otw-sidebar-8]