Re: [SECURITY] [DSA 879-1] New gallery packages fix privilege escalation

2005-11-02 Thread Michael Schultheiss
Norbert Tretkowski wrote: > * Martin Schulze wrote: > > A bug in gallery has been discoverd that grants all registrated > > postnuke users full access to the gallery. > > Huh? This bugs is with regards to the integration of Gallery into a Postnuke site. --

Re: [SECURITY] [DSA 879-1] New gallery packages fix privilege escalation

2005-11-02 Thread Jose Marrero
Why every gallery update breaks the customizations one has done to it? I am referring to skins, headers, etc. On Wed, November 2, 2005 6:01 am, Norbert Tretkowski said: > * Martin Schulze wrote: >> A bug in gallery has been discoverd that grants all registrated >> postnuke users full access to th

Re: [SECURITY] [DSA 879-1] New gallery packages fix privilege escalation

2005-11-02 Thread Emmanuel Lacour
On Wed, Nov 02, 2005 at 03:01:54PM +0100, Norbert Tretkowski wrote: > * Martin Schulze wrote: > > A bug in gallery has been discoverd that grants all registrated > > postnuke users full access to the gallery. > > Huh? > Gallery can be easily embedded in postnuke, phpnike, mambo, ... --

Re: [SECURITY] [DSA 879-1] New gallery packages fix privilege escalation

2005-11-02 Thread Norbert Tretkowski
* Martin Schulze wrote: > A bug in gallery has been discoverd that grants all registrated > postnuke users full access to the gallery. Huh? Norbert -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]