v1.2.3 of Gallery, the popular photo album software, is now available on SourceForge. This release contains a security bugfix and we recommend that you upgrade to it as soon as possible. Gallery is installed on thousands of websites. Install it on yours today!

Over the weekend, I was made aware of a security hole in Gallery that can allow malicious users to read files on your system by hand crafting a URL. This means that if a hacker has the ability to upload a text file to your box, they can then use this exploit to execute the code (as the webserver user).

Version 1.2.2 contains many small useability fixes, as well as several more serious album corruption issues. The new version will automatically find and upgrade your existing albums as well as fix any corrupted albums it finds.

I've released Gallery v1.2.1-p1 (patch level 1) for public consumption. This release fixes a race condition that causes album data files to get corrupted on servers that are heavily loaded (and/or have high traffic).

This is a patch release to v1.2 containing many small and large bug fixes. It also contains fixes to some fairly serious security vulnerabilities, so we highly recommend that you upgrade from older releases to this one.

Gallery v1.2 is released. This is a major improvement over earlier versions. Many additions and improvements have been made, including click counters, keyword searching, public picture commenting, Win32 support, image sorting, and an improved config wizard. We've fixed many bugs, large and small.