Gallery is a very active project, meaning that security holes are quickly closed, and all you have to do is just to apt-get update/yum update.
I wouldn't define neither Gallery v1 or v2 as a software with "serious security holes" (unless you decide to install old versions). Moshe is probably talking about evil bugs from the past. PhpBB also had evil bugs in the past, and even Apache. I believe that the Linux kernel too. Of course, web application (which is open to the public) will always be more vulnerable than non-web software. But non-web software belongs to the 90s :) I'm using Gallery (v1 & v2) for more than two years. - Oren > On 08/08/07, Moshe Leibovitch <[EMAIL PROTECTED]> wrote: >> >> Note though that there serious security holes in Gallery >> and is a constant target for attacks. > > > Is this still true for Gallery 2? From reading its docs I got the > impression > one of its main goals was a complete re-design to avoid the security holes > in Gallery 1. > > --Amos > ================================================================= To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]