You are not logged in. (Register / Login)


#1 2017-01-02 14:59:07

Piwigo Team
Location: Nantes, France, Europe
Registered: 2002-04-05
Posts: 13071

Piwigo 2.8.4 + 2.8.5

Happy new year 2017!

Holiday season has been a bit disturbed by security issues discovered in the email library we use on Piwigo (PHP Mailer). This is why we've released an "emergency" release 2.8.4 on December 27th and then release 2.8.5 on January 1st 2017.

Thanks to teekay (Thomas Kuther on Github), author of the excellent Bootstrap Darkroom theme, PHP Mailer embedded in Piwigo is now in version 5.2.21. Thank you very much for your help.

2 days ago, 3 "vulnerabilities" have been published about Piwigo 2.8.3/2.8.4 on Twitter and various security focused websites. They were reported by Shinkurt on Github a few days before and he helped to fix them. I don't consider these security issues as "major" because only an administrator can exploit them. But anyway, it's good to have them fixed :-)

Happy 1-click update

Latest blog post (March 23th 2017) Piwigo.com Enterprise plans, now official!


#2 2017-01-03 08:26:25

Registered: 2013-06-12
Posts: 283

Re: Piwigo 2.8.4 + 2.8.5

Thanks for the fast release(s), plg!

Unfortunately I didn't properly test sending out mails using direct SMTP transfer (so, $conf['smtp_host'] present in local/config/config.inc.php). This looks broken now, see [Forum, topic 27499] Email notification problems

Possible fix from [Github] PHPMailer issue #113

Seems to work fine on my server, both sendmail and direct SMTP are working. Preparing a pull request.


#3 2017-01-03 10:32:34

Location: suisse
Registered: 2016-11-20
Posts: 30

Re: Piwigo 2.8.4 + 2.8.5

in the Backend it says •Piwigo 2.8.3 is the newest and now update avaiable. ;-(
have a nice day

Piwigo version: 2.8.2/2.8.6 / PHP: 5.6.27-0+deb8u1 /  MySQL: 5.5.5-10.0.27-MariaDB-0+deb8u1
Piwigo URL:              http://www.kocher.photos/piwigo/
Lightroom --> Piwigo extensions: https://alloyphoto.com/plugins/piwigo/


Board footer

Powered by FluxBB

github twitter facebook google+ newsletter Donate Piwigo.org © 2002-2017 · Contact