Changelog - Versionsgeschichte

Chriz90 am 3. Mai 2013 um 18:03 Uhr

2013-05-03T18:03:03Z

← Nächstältere Version		Version vom 3. Mai 2013, 18:03 Uhr
Zeile 47:		Zeile 47:


			[[de:Changelog]]
	~~<!--~~ [[en:Changelog]] ~~-->~~		[[en:Changelog]]

	__NOTOC__		__NOTOC__
	__NOEDITSECTION__		__NOEDITSECTION__

Bollin am 4. September 2007 um 06:18 Uhr

2007-09-04T06:18:23Z

← Nächstältere Version		Version vom 4. September 2007, 06:18 Uhr
Zeile 48:		Zeile 48:


	[[en:Changelog]]		<!-- [[en:Changelog]] -->

	__NOTOC__		__NOTOC__
	__NOEDITSECTION__		__NOEDITSECTION__

Bollin am 22. August 2007 um 06:42 Uhr

2007-08-22T06:42:41Z

← Nächstältere Version		Version vom 22. August 2007, 06:42 Uhr
Zeile 3:		Zeile 3:

	=== Version 3.4 ===		=== Version 3.4 ===
	* ''released 2007-05-15''		* released 2007-05-15
	{\| style="width:100%;border:0px solid green;padding:0em; color: black;"		{\| style="width:100%;border:0px solid green;padding:0em; color: black;"
	\|-		\|-
Zeile 18:		Zeile 18:
	\|-		\|-
	\| style="padding-left:2em"\|		\| style="padding-left:2em"\|
	* Fixed ~~CR07~~-C-01, Timeouts im Client durch Datenbank Deadlocks (Pohl)		* Fixed CR-C07-01, Timeouts im Client durch Datenbank Deadlocks (Pohl)
	* Fixed ~~CR07~~-C-02, Falsche Synchronisation der Client Hilfskomponenten (Pohl)		* Fixed CR-C07-02, Falsche Synchronisation der Client Hilfskomponenten (Pohl)
	* Fixed ~~CR06~~-C-13, Sonderzeichen in der Befehlsauswahlliste (Bollin)		* Fixed CR-C06-13, Sonderzeichen in der Befehlsauswahlliste (Bollin)
	* Fixed ~~CR06~~-D-02, Alte DB-Initialisierungtsscripts (Pohl)		* Fixed CR-C06-02, Alte DB-Initialisierungtsscripts (Pohl)
	\|}		\|}

Zeile 30:		Zeile 30:
	\|-		\|-
	\| style="padding-left:1em"\|		\| style="padding-left:1em"\|
	''~~BUGs~~''		''NEW FEATUREs''
	\|-		\|-
	\| style="padding-left:2em"\|		\| style="padding-left:2em"\|
	* ~~Fixed CVE~~-~~2007~~-~~1001~~, ~~GD wbmp used with invalid image size (by Ivan Fratric)~~ (~~Pierre~~)		* New REQ-C06-05, Die Simulatorrückmeldungen im Client sind als HTML Text formatiert (Pohl)
	* ~~Fixed a header injection via Subject and To parameters to the mail() function (MOPB~~-~~34 by Stefan Esser) (Ilia)~~		* New REQ-C06-06, Zeilenumbrüche im Client zur besseren Texterkennung eingefügt (Pohl)
	* Fixed asciiz byte truncation inside mail() (MOPB-~~33 by Stefan Esser)~~ (~~Ilia~~)		* New REQ-S06-06, Modellumstellung, um das Studienjahr 2007 abzudecken (Bollin)
	* ~~Fixed wrong length calculation in unserialize S type (MOPB~~-~~29 by Stefan Esser) (Stas)~~
	* Fixed a bug in mb_parse_str() that can be used to activate register_globals (MOPB-~~26 by Stefan Esser) (Ilia)~~
	* Fixed unallocated memory access/double free in in array_user_key_compare() (MOPB-24 by Stefan Esser) (Stas)
	* Fixed a double free inside session_regenerate_id() (MOPB-22 by Stefan Esser) (~~Ilia~~)
	\|-		\|-
	\| style="padding-left:1em"\|		\| style="padding-left:1em"\|
	''~~NEW FEATUREs~~''		''BUGs''
	\|-		\|-
	\| style="padding-left:2em"\|		\| style="padding-left:2em"\|
	* Fixed ~~CVE~~-~~2007~~-~~1001~~, ~~GD wbmp used with invalid image size~~ (~~by Ivan Fratric) (Pierre~~)		* Fixed CR-C06-04, AORTA Handout vermischt bei einigen Diagrammen Simulationen (Pohl)
	* Fixed ~~a header injection via Subject and To parameters to the mail() function (MOPB~~-~~34 by Stefan Esser) (Ilia)~~		* Fixed CR-C06-03, Simulationskernabsturz aufgrund eines SESAM Bugs (Bollin)
	* Fixed asciiz byte truncation inside mail() (MOPB-~~33 by Stefan Esser) (Ilia)~~
	* Fixed wrong length calculation in unserialize S type (MOPB-29 by Stefan Esser) (Stas)
	* Fixed a bug in mb_parse_str() that can be used to activate register_globals (MOPB-26 by Stefan Esser) (Ilia)
	* Fixed unallocated memory access/double free in in array_user_key_compare() (MOPB-24 by Stefan Esser) (Stas)
	* Fixed a double free inside session_regenerate_id() (MOPB-22 by Stefan Esser) (~~Ilia~~)
	\|}		\|}




	[[en:Changelog]]		[[en:Changelog]]

Bollin am 22. August 2007 um 06:37 Uhr

2007-08-22T06:37:49Z

← Nächstältere Version		Version vom 22. August 2007, 06:37 Uhr
Zeile 3:		Zeile 3:

	=== Version 3.4 ===		=== Version 3.4 ===
	* released 2007-05-15		* ''released 2007-05-15''
	{\| style="width:100%;border:0px solid green;padding:0em; color: black;"		{\| style="width:100%;border:0px solid green;padding:0em; color: black;"
	\|-		\|-

Bollin am 22. August 2007 um 06:37 Uhr

2007-08-22T06:37:30Z

@@ Zeile 5: / Zeile 5: @@
 * released 2007-05-15
 {| style="width:100%;border:0px solid green;padding:0em; color: black;"
 |-
 | style="padding-left:1em"|
@@ Zeile 14: / Zeile 22: @@
 * Fixed CR06-C-13, Sonderzeichen in der Befehlsauswahlliste (Bollin)
 * Fixed CR06-D-02, Alte DB-Initialisierungtsscripts (Pohl)
 |}

Bollin am 22. August 2007 um 06:36 Uhr

2007-08-22T06:36:46Z

Änderungen zeigen

WikiSysop am 14. Juni 2007 um 10:51 Uhr

2007-06-14T10:51:19Z

← Nächstältere Version		Version vom 14. Juni 2007, 10:51 Uhr
Zeile 298:		Zeile 298:



			[[en:Changelog]]

			__NOTOC__
	__NOEDITSECTION__		__NOEDITSECTION__

WikiSysop: 1 Versionen

2007-06-14T08:00:59Z

1 Versionen

← Nächstältere Version	Version vom 14. Juni 2007, 08:00 Uhr
(kein Unterschied)

WikiSysop: Die Seite wurde neu angelegt: == Client == === Version 3.4 === * released 2007-02-15 {| style="width:100%;border:0px solid green;padding:0em; color: black;" |- | style="padding-left:1em"| ''BUGs'...

2007-06-05T11:38:04Z

Die Seite wurde neu angelegt: == Client == === Version 3.4 === * released 2007-02-15 {| style="width:100%;border:0px solid green;padding:0em; color: black;" |- | style="padding-left:1em"| ''BUGs'...

← Nächstältere Version	Version vom 5. Juni 2007, 11:38 Uhr
(kein Unterschied)

143.205.140.170: New page: == Client == === Version 3.4 === * released 2007-02-15 {| style="width:100%;border:0px solid green;padding:0em; color: black;" |- | style="padding-left:1em"| ''BUGs'' |- | style="paddin...

2007-05-30T14:09:20Z

New page: == Client == === Version 3.4 === * released 2007-02-15 {| style="width:100%;border:0px solid green;padding:0em; color: black;" |- | style="padding-left:1em"| ''BUGs'' |- | style="paddin...

Neue Seite

== Client ==

=== Version 3.4 ===
* released 2007-02-15
{| style="width:100%;border:0px solid green;padding:0em; color: black;"
|-
| style="padding-left:1em"|
''BUGs''
|-
| style="padding-left:2em"|
* Fixed CVE-2007-1001, GD wbmp used with invalid image size (by Ivan Fratric) (Pierre)
* Fixed a header injection via Subject and To parameters to the mail() function (MOPB-34 by Stefan Esser) (Ilia)
* Fixed asciiz byte truncation inside mail() (MOPB-33 by Stefan Esser) (Ilia)
* Fixed wrong length calculation in unserialize S type (MOPB-29 by Stefan Esser) (Stas)
* Fixed a bug in mb_parse_str() that can be used to activate register_globals (MOPB-26 by Stefan Esser) (Ilia)
* Fixed unallocated memory access/double free in in array_user_key_compare() (MOPB-24 by Stefan Esser) (Stas)
* Fixed a double free inside session_regenerate_id() (MOPB-22 by Stefan Esser) (Ilia)
|-
| style="padding-left:1em"|
''NEW FEATUREs''
|-
| style="padding-left:2em"|
* Fixed CVE-2007-1001, GD wbmp used with invalid image size (by Ivan Fratric) (Pierre)
* Fixed a header injection via Subject and To parameters to the mail() function (MOPB-34 by Stefan Esser) (Ilia)
* Fixed asciiz byte truncation inside mail() (MOPB-33 by Stefan Esser) (Ilia)
* Fixed wrong length calculation in unserialize S type (MOPB-29 by Stefan Esser) (Stas)
* Fixed a bug in mb_parse_str() that can be used to activate register_globals (MOPB-26 by Stefan Esser) (Ilia)
* Fixed unallocated memory access/double free in in array_user_key_compare() (MOPB-24 by Stefan Esser) (Stas)
* Fixed a double free inside session_regenerate_id() (MOPB-22 by Stefan Esser) (Ilia)
|}

=== Version 3.3 ===
{| style="width:100%;border:0px solid green;padding:0em; color: black;"
|-
| style="padding-left:1em"|
''BUGs''
|-
| style="padding-left:2em"|
* Fixed CVE-2007-1001, GD wbmp used with invalid image size (by Ivan Fratric) (Pierre)
* Fixed a header injection via Subject and To parameters to the mail() function (MOPB-34 by Stefan Esser) (Ilia)
* Fixed asciiz byte truncation inside mail() (MOPB-33 by Stefan Esser) (Ilia)
* Fixed wrong length calculation in unserialize S type (MOPB-29 by Stefan Esser) (Stas)
* Fixed a bug in mb_parse_str() that can be used to activate register_globals (MOPB-26 by Stefan Esser) (Ilia)
* Fixed unallocated memory access/double free in in array_user_key_compare() (MOPB-24 by Stefan Esser) (Stas)
* Fixed a double free inside session_regenerate_id() (MOPB-22 by Stefan Esser) (Ilia)
|-
| style="padding-left:1em"|
''NEW FEATUREs''
|-
| style="padding-left:2em"|
* Fixed CVE-2007-1001, GD wbmp used with invalid image size (by Ivan Fratric) (Pierre)
* Fixed a header injection via Subject and To parameters to the mail() function (MOPB-34 by Stefan Esser) (Ilia)
* Fixed asciiz byte truncation inside mail() (MOPB-33 by Stefan Esser) (Ilia)
* Fixed wrong length calculation in unserialize S type (MOPB-29 by Stefan Esser) (Stas)
* Fixed a bug in mb_parse_str() that can be used to activate register_globals (MOPB-26 by Stefan Esser) (Ilia)
* Fixed unallocated memory access/double free in in array_user_key_compare() (MOPB-24 by Stefan Esser) (Stas)
* Fixed a double free inside session_regenerate_id() (MOPB-22 by Stefan Esser) (Ilia)
|}

=== Version 3.2 ===
{| style="width:100%;border:0px solid green;padding:0em; color: black;"
|-
| style="padding-left:1em"|
''BUGs''
|-
| style="padding-left:2em"|
* Fixed CVE-2007-1001, GD wbmp used with invalid image size (by Ivan Fratric) (Pierre)
* Fixed a header injection via Subject and To parameters to the mail() function (MOPB-34 by Stefan Esser) (Ilia)
* Fixed asciiz byte truncation inside mail() (MOPB-33 by Stefan Esser) (Ilia)
* Fixed wrong length calculation in unserialize S type (MOPB-29 by Stefan Esser) (Stas)
* Fixed a bug in mb_parse_str() that can be used to activate register_globals (MOPB-26 by Stefan Esser) (Ilia)
* Fixed unallocated memory access/double free in in array_user_key_compare() (MOPB-24 by Stefan Esser) (Stas)
* Fixed a double free inside session_regenerate_id() (MOPB-22 by Stefan Esser) (Ilia)
|-
| style="padding-left:1em"|
''NEW FEATUREs''
|-
| style="padding-left:2em"|
* Fixed CVE-2007-1001, GD wbmp used with invalid image size (by Ivan Fratric) (Pierre)
* Fixed a header injection via Subject and To parameters to the mail() function (MOPB-34 by Stefan Esser) (Ilia)
* Fixed asciiz byte truncation inside mail() (MOPB-33 by Stefan Esser) (Ilia)
* Fixed wrong length calculation in unserialize S type (MOPB-29 by Stefan Esser) (Stas)
* Fixed a bug in mb_parse_str() that can be used to activate register_globals (MOPB-26 by Stefan Esser) (Ilia)
* Fixed unallocated memory access/double free in in array_user_key_compare() (MOPB-24 by Stefan Esser) (Stas)
* Fixed a double free inside session_regenerate_id() (MOPB-22 by Stefan Esser) (Ilia)
|}

=== Version 3.1 ===
{| style="width:100%;border:0px solid green;padding:0em; color: black;"
|-
| style="padding-left:1em"|
''BUGs''
|-
| style="padding-left:2em"|
* Fixed CVE-2007-1001, GD wbmp used with invalid image size (by Ivan Fratric) (Pierre)
* Fixed a header injection via Subject and To parameters to the mail() function (MOPB-34 by Stefan Esser) (Ilia)
* Fixed asciiz byte truncation inside mail() (MOPB-33 by Stefan Esser) (Ilia)
* Fixed wrong length calculation in unserialize S type (MOPB-29 by Stefan Esser) (Stas)
* Fixed a bug in mb_parse_str() that can be used to activate register_globals (MOPB-26 by Stefan Esser) (Ilia)
* Fixed unallocated memory access/double free in in array_user_key_compare() (MOPB-24 by Stefan Esser) (Stas)
* Fixed a double free inside session_regenerate_id() (MOPB-22 by Stefan Esser) (Ilia)
|-
| style="padding-left:1em"|
''NEW FEATUREs''
|-
| style="padding-left:2em"|
* Fixed CVE-2007-1001, GD wbmp used with invalid image size (by Ivan Fratric) (Pierre)
* Fixed a header injection via Subject and To parameters to the mail() function (MOPB-34 by Stefan Esser) (Ilia)
* Fixed asciiz byte truncation inside mail() (MOPB-33 by Stefan Esser) (Ilia)
* Fixed wrong length calculation in unserialize S type (MOPB-29 by Stefan Esser) (Stas)
* Fixed a bug in mb_parse_str() that can be used to activate register_globals (MOPB-26 by Stefan Esser) (Ilia)
* Fixed unallocated memory access/double free in in array_user_key_compare() (MOPB-24 by Stefan Esser) (Stas)
* Fixed a double free inside session_regenerate_id() (MOPB-22 by Stefan Esser) (Ilia)
|}

=== Version 3.0 ===
{| style="width:100%;border:0px solid green;padding:0em; color: black;"
|-
| style="padding-left:1em"|
''BUGs''
|-
| style="padding-left:2em"|
* Fixed CVE-2007-1001, GD wbmp used with invalid image size (by Ivan Fratric) (Pierre)
* Fixed a header injection via Subject and To parameters to the mail() function (MOPB-34 by Stefan Esser) (Ilia)
* Fixed asciiz byte truncation inside mail() (MOPB-33 by Stefan Esser) (Ilia)
* Fixed wrong length calculation in unserialize S type (MOPB-29 by Stefan Esser) (Stas)
* Fixed a bug in mb_parse_str() that can be used to activate register_globals (MOPB-26 by Stefan Esser) (Ilia)
* Fixed unallocated memory access/double free in in array_user_key_compare() (MOPB-24 by Stefan Esser) (Stas)
* Fixed a double free inside session_regenerate_id() (MOPB-22 by Stefan Esser) (Ilia)
|-
| style="padding-left:1em"|
''NEW FEATUREs''
|-
| style="padding-left:2em"|
* Fixed CVE-2007-1001, GD wbmp used with invalid image size (by Ivan Fratric) (Pierre)
* Fixed a header injection via Subject and To parameters to the mail() function (MOPB-34 by Stefan Esser) (Ilia)
* Fixed asciiz byte truncation inside mail() (MOPB-33 by Stefan Esser) (Ilia)
* Fixed wrong length calculation in unserialize S type (MOPB-29 by Stefan Esser) (Stas)
* Fixed a bug in mb_parse_str() that can be used to activate register_globals (MOPB-26 by Stefan Esser) (Ilia)
* Fixed unallocated memory access/double free in in array_user_key_compare() (MOPB-24 by Stefan Esser) (Stas)
* Fixed a double free inside session_regenerate_id() (MOPB-22 by Stefan Esser) (Ilia)
|}

== Server ==

=== Version 3.4 ===
{| style="width:100%;border:0px solid green;padding:0em; color: black;"
|-
| style="padding-left:1em"|
''BUGs''
|-
| style="padding-left:2em"|
* Fixed CVE-2007-1001, GD wbmp used with invalid image size (by Ivan Fratric) (Pierre)
* Fixed a header injection via Subject and To parameters to the mail() function (MOPB-34 by Stefan Esser) (Ilia)
* Fixed asciiz byte truncation inside mail() (MOPB-33 by Stefan Esser) (Ilia)
* Fixed wrong length calculation in unserialize S type (MOPB-29 by Stefan Esser) (Stas)
* Fixed a bug in mb_parse_str() that can be used to activate register_globals (MOPB-26 by Stefan Esser) (Ilia)
* Fixed unallocated memory access/double free in in array_user_key_compare() (MOPB-24 by Stefan Esser) (Stas)
* Fixed a double free inside session_regenerate_id() (MOPB-22 by Stefan Esser) (Ilia)
|-
| style="padding-left:1em"|
''NEW FEATUREs''
|-
| style="padding-left:2em"|
* Fixed CVE-2007-1001, GD wbmp used with invalid image size (by Ivan Fratric) (Pierre)
* Fixed a header injection via Subject and To parameters to the mail() function (MOPB-34 by Stefan Esser) (Ilia)
* Fixed asciiz byte truncation inside mail() (MOPB-33 by Stefan Esser) (Ilia)
* Fixed wrong length calculation in unserialize S type (MOPB-29 by Stefan Esser) (Stas)
* Fixed a bug in mb_parse_str() that can be used to activate register_globals (MOPB-26 by Stefan Esser) (Ilia)
* Fixed unallocated memory access/double free in in array_user_key_compare() (MOPB-24 by Stefan Esser) (Stas)
* Fixed a double free inside session_regenerate_id() (MOPB-22 by Stefan Esser) (Ilia)
|}

=== Version 3.3 ===
{| style="width:100%;border:0px solid green;padding:0em; color: black;"
|-
| style="padding-left:1em"|
''BUGs''
|-
| style="padding-left:2em"|
* Fixed CVE-2007-1001, GD wbmp used with invalid image size (by Ivan Fratric) (Pierre)
* Fixed a header injection via Subject and To parameters to the mail() function (MOPB-34 by Stefan Esser) (Ilia)
* Fixed asciiz byte truncation inside mail() (MOPB-33 by Stefan Esser) (Ilia)
* Fixed wrong length calculation in unserialize S type (MOPB-29 by Stefan Esser) (Stas)
* Fixed a bug in mb_parse_str() that can be used to activate register_globals (MOPB-26 by Stefan Esser) (Ilia)
* Fixed unallocated memory access/double free in in array_user_key_compare() (MOPB-24 by Stefan Esser) (Stas)
* Fixed a double free inside session_regenerate_id() (MOPB-22 by Stefan Esser) (Ilia)
|-
| style="padding-left:1em"|
''NEW FEATUREs''
|-
| style="padding-left:2em"|
* Fixed CVE-2007-1001, GD wbmp used with invalid image size (by Ivan Fratric) (Pierre)
* Fixed a header injection via Subject and To parameters to the mail() function (MOPB-34 by Stefan Esser) (Ilia)
* Fixed asciiz byte truncation inside mail() (MOPB-33 by Stefan Esser) (Ilia)
* Fixed wrong length calculation in unserialize S type (MOPB-29 by Stefan Esser) (Stas)
* Fixed a bug in mb_parse_str() that can be used to activate register_globals (MOPB-26 by Stefan Esser) (Ilia)
* Fixed unallocated memory access/double free in in array_user_key_compare() (MOPB-24 by Stefan Esser) (Stas)
* Fixed a double free inside session_regenerate_id() (MOPB-22 by Stefan Esser) (Ilia)
|}

=== Version 3.2 ===
{| style="width:100%;border:0px solid green;padding:0em; color: black;"
|-
| style="padding-left:1em"|
''BUGs''
|-
| style="padding-left:2em"|
* Fixed CVE-2007-1001, GD wbmp used with invalid image size (by Ivan Fratric) (Pierre)
* Fixed a header injection via Subject and To parameters to the mail() function (MOPB-34 by Stefan Esser) (Ilia)
* Fixed asciiz byte truncation inside mail() (MOPB-33 by Stefan Esser) (Ilia)
* Fixed wrong length calculation in unserialize S type (MOPB-29 by Stefan Esser) (Stas)
* Fixed a bug in mb_parse_str() that can be used to activate register_globals (MOPB-26 by Stefan Esser) (Ilia)
* Fixed unallocated memory access/double free in in array_user_key_compare() (MOPB-24 by Stefan Esser) (Stas)
* Fixed a double free inside session_regenerate_id() (MOPB-22 by Stefan Esser) (Ilia)
|-
| style="padding-left:1em"|
''NEW FEATUREs''
|-
| style="padding-left:2em"|
* Fixed CVE-2007-1001, GD wbmp used with invalid image size (by Ivan Fratric) (Pierre)
* Fixed a header injection via Subject and To parameters to the mail() function (MOPB-34 by Stefan Esser) (Ilia)
* Fixed asciiz byte truncation inside mail() (MOPB-33 by Stefan Esser) (Ilia)
* Fixed wrong length calculation in unserialize S type (MOPB-29 by Stefan Esser) (Stas)
* Fixed a bug in mb_parse_str() that can be used to activate register_globals (MOPB-26 by Stefan Esser) (Ilia)
* Fixed unallocated memory access/double free in in array_user_key_compare() (MOPB-24 by Stefan Esser) (Stas)
* Fixed a double free inside session_regenerate_id() (MOPB-22 by Stefan Esser) (Ilia)
|}

=== Version 3.1 ===
{| style="width:100%;border:0px solid green;padding:0em; color: black;"
|-
| style="padding-left:1em"|
''BUGs''
|-
| style="padding-left:2em"|
* Fixed CVE-2007-1001, GD wbmp used with invalid image size (by Ivan Fratric) (Pierre)
* Fixed a header injection via Subject and To parameters to the mail() function (MOPB-34 by Stefan Esser) (Ilia)
* Fixed asciiz byte truncation inside mail() (MOPB-33 by Stefan Esser) (Ilia)
* Fixed wrong length calculation in unserialize S type (MOPB-29 by Stefan Esser) (Stas)
* Fixed a bug in mb_parse_str() that can be used to activate register_globals (MOPB-26 by Stefan Esser) (Ilia)
* Fixed unallocated memory access/double free in in array_user_key_compare() (MOPB-24 by Stefan Esser) (Stas)
* Fixed a double free inside session_regenerate_id() (MOPB-22 by Stefan Esser) (Ilia)
|-
| style="padding-left:1em"|
''NEW FEATUREs''
|-
| style="padding-left:2em"|
* Fixed CVE-2007-1001, GD wbmp used with invalid image size (by Ivan Fratric) (Pierre)
* Fixed a header injection via Subject and To parameters to the mail() function (MOPB-34 by Stefan Esser) (Ilia)
* Fixed asciiz byte truncation inside mail() (MOPB-33 by Stefan Esser) (Ilia)
* Fixed wrong length calculation in unserialize S type (MOPB-29 by Stefan Esser) (Stas)
* Fixed a bug in mb_parse_str() that can be used to activate register_globals (MOPB-26 by Stefan Esser) (Ilia)
* Fixed unallocated memory access/double free in in array_user_key_compare() (MOPB-24 by Stefan Esser) (Stas)
* Fixed a double free inside session_regenerate_id() (MOPB-22 by Stefan Esser) (Ilia)
|}

=== Version 3.0 ===
{| style="width:100%;border:0px solid green;padding:0em; color: black;"
|-
| style="padding-left:1em"|
''BUGs''
|-
| style="padding-left:2em"|
* Fixed CVE-2007-1001, GD wbmp used with invalid image size (by Ivan Fratric) (Pierre)
* Fixed a header injection via Subject and To parameters to the mail() function (MOPB-34 by Stefan Esser) (Ilia)
* Fixed asciiz byte truncation inside mail() (MOPB-33 by Stefan Esser) (Ilia)
* Fixed wrong length calculation in unserialize S type (MOPB-29 by Stefan Esser) (Stas)
* Fixed a bug in mb_parse_str() that can be used to activate register_globals (MOPB-26 by Stefan Esser) (Ilia)
* Fixed unallocated memory access/double free in in array_user_key_compare() (MOPB-24 by Stefan Esser) (Stas)
* Fixed a double free inside session_regenerate_id() (MOPB-22 by Stefan Esser) (Ilia)
|-
| style="padding-left:1em"|
''NEW FEATUREs''
|-
| style="padding-left:2em"|
* Fixed CVE-2007-1001, GD wbmp used with invalid image size (by Ivan Fratric) (Pierre)
* Fixed a header injection via Subject and To parameters to the mail() function (MOPB-34 by Stefan Esser) (Ilia)
* Fixed asciiz byte truncation inside mail() (MOPB-33 by Stefan Esser) (Ilia)
* Fixed wrong length calculation in unserialize S type (MOPB-29 by Stefan Esser) (Stas)
* Fixed a bug in mb_parse_str() that can be used to activate register_globals (MOPB-26 by Stefan Esser) (Ilia)
* Fixed unallocated memory access/double free in in array_user_key_compare() (MOPB-24 by Stefan Esser) (Stas)
* Fixed a double free inside session_regenerate_id() (MOPB-22 by Stefan Esser) (Ilia)
|}

__NOEDITSECTION__