A new version of the geeklog/gallery integration has been released. You can get the file here (gallery_1.4.1_1.38.tar.gz).
This new release fixes the security bugs previously mentioned. It also integrates the newest version of gallery (version 1.4.1).
I've not yet begun the security audit I promised, but I hope to get to it some time in January. I'm confident though that this release removes the remote code execution vulnerbility.
-Vinny
Comments (0)
Geeklog
http://www.geeklog.net/article.php/20031228224244779