Gentoo Security Advisory GLSA 200501-45 (gallery)

Summary
The remote host is missing updates announced in advisory GLSA 200501-45.
Solution
All Gallery users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=www-apps/gallery-1.4.4_p6' Note: Users with the vhosts USE flag set should manually use webapp-config to finalize the update. http://www.securityspace.com/smysecure/catid.html?in=GLSA%20200501-45 http://bugs.gentoo.org/show_bug.cgi?id=78522 http://gallery.menalto.com/modules.php?op=modload&name=News&file=article&sid=149 http://secunia.com/advisories/13887/
Insight
Gallery is vulnerable to cross-site scripting attacks.