Changelog

AMEISE Gesamtsystem

Version 3.4

• released 2007-05-15

NEW FEATUREs

New REQ-S07-01, Hinzufuegen neues Kommando (show me all activities) (Bollin) New REQ-C07-03, Entfernen des Friendly Peers aufgrund von Resourcen-Problemen (Pohl) New REQ-C07-04, Ratgeber gibt kontextsensitives Feedback (Pohl, Kury)

BUGs

Fixed CR07-C-01, Timeouts im Client durch Datenbank Deadlocks (Pohl) Fixed CR07-C-02, Falsche Synchronisation der Client Hilfskomponenten (Pohl) Fixed CR06-C-13, Sonderzeichen in der Befehlsauswahlliste (Bollin) Fixed CR06-D-02, Alte DB-Initialisierungtsscripts (Pohl)

Version 3.3

• released 2006-12-15

BUGs

Fixed CVE-2007-1001, GD wbmp used with invalid image size (by Ivan Fratric) (Pierre) Fixed a header injection via Subject and To parameters to the mail() function (MOPB-34 by Stefan Esser) (Ilia) Fixed asciiz byte truncation inside mail() (MOPB-33 by Stefan Esser) (Ilia) Fixed wrong length calculation in unserialize S type (MOPB-29 by Stefan Esser) (Stas) Fixed a bug in mb_parse_str() that can be used to activate register_globals (MOPB-26 by Stefan Esser) (Ilia) Fixed unallocated memory access/double free in in array_user_key_compare() (MOPB-24 by Stefan Esser) (Stas) Fixed a double free inside session_regenerate_id() (MOPB-22 by Stefan Esser) (Ilia)

NEW FEATUREs

Fixed CVE-2007-1001, GD wbmp used with invalid image size (by Ivan Fratric) (Pierre) Fixed a header injection via Subject and To parameters to the mail() function (MOPB-34 by Stefan Esser) (Ilia) Fixed asciiz byte truncation inside mail() (MOPB-33 by Stefan Esser) (Ilia) Fixed wrong length calculation in unserialize S type (MOPB-29 by Stefan Esser) (Stas) Fixed a bug in mb_parse_str() that can be used to activate register_globals (MOPB-26 by Stefan Esser) (Ilia) Fixed unallocated memory access/double free in in array_user_key_compare() (MOPB-24 by Stefan Esser) (Stas) Fixed a double free inside session_regenerate_id() (MOPB-22 by Stefan Esser) (Ilia)