Gallery is a very active project, meaning that security holes are quickly
closed, and all you have to do is just to apt-get update/yum update.

I wouldn't define neither Gallery v1 or v2 as a software with "serious
security holes" (unless you decide to install old versions). Moshe is
probably talking about evil bugs from the past. PhpBB also had evil bugs
in the past, and even Apache. I believe that the Linux kernel too.

Of course, web application (which is open to the public) will always be
more vulnerable than non-web software. But non-web software belongs to the
90s :)

I'm using Gallery (v1 & v2) for more than two years.

 - Oren

> On 08/08/07, Moshe Leibovitch <[EMAIL PROTECTED]> wrote:
>>
>> Note though that there serious security holes in Gallery
>> and is a constant target for attacks.
>
>
> Is this still true for Gallery 2? From reading its docs I got the
> impression
> one of its main goals was a complete re-design to avoid the security holes
> in Gallery 1.
>
> --Amos
>



=================================================================
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]

Reply via email to