Zenphoto

The Zenphoto team typically works in conjunction with the Security Community to insure you, our users, can be confident in the environment we provide. The unfortunate nature of software is that bugs creep in. When some of those introduce security issues we are grateful to the Security Community for pointing them out to us.

We take any report seriously

A typical scenario is that a researcher will discover a potential flaw. He will develop an example exploit to verify his hypothesis, and then he will send a report to us describing his analysis and including the example exploit. This is proper scientific methodology consisting of a hypothesis and an experiment to validate it. The two are really integral components. A hypothesis without an experiment is simply speculation without substantiation.

We receive the report, verify that the problem still exists, and if so attempt to speedily correct the issue. The correction will always go into the current support build which you can download and install if you feel the need. Depending on the severity of the threat we may also make an immediate release as we know that users are more likely to install a release build than the support release. This deploys the fix to the maximum percent of our community. We also report back to the researcher the details of what release contains the fix and when it is to be generally available. We expect that the researcher report will include these details so that users reading it will (...)

Read more

Zenphoto 1.4.5.6 is a bugfix release. Multiple minor errors are corrected.

As usual we recommend all users upgrade for the latest updates and fixes. For more detailed info about the fixes please review the GitHub issues:https://github.com/zenphoto/zenphoto/issues list.

Zenphoto 1.4.5.5 is a bugfix release.This release fixes a problem on site closure introduced in the 1.4.4.4 support release. You will not be able to close your site unless the root index.php file from this release is first uploaded to your site.

Zenphoto 1.4.5.4 is a security update. For more detailed info about the fixes please review the GitHub issues list.

Zenphoto 1.4.5.3 is a bugfix release. Several security issues have been fixed along with the usual bug fixes.

As usual we recommend all users upgrade for the latest updates and fixes. For more detailed info about the fixes please review the GitHub issues list.