We have released updated versions of CE4 Gallery and CE4 Client Response Gallery. These updates address a potential security exploit in the download.php file handling image downloads. We are not aware of this exploit ever having been abused. In any case, all patched up now. And download.php is the only file changed in this update.

This is the final update for CE4. We will be releasing a complete statement in a forthcoming newsletter.

If you’re still using CE4, then by all means download this update and use it to create future galleries. However, it is likely not worthwhile to spend time updating existing galleries online. Or if you’re keen to spend time updating things, isn’t it time to get on with Backlight? Because that would be an update worth making. Seriously. For serious. I’m sssooo serious. I really am. Back. Light. Backlight. Take back your light. BACKLIGHT!