Poo!

[Virtuality]

I got really exicted by the loads of new phpbb checkins I got to my email today, because it said "prepare for new release" everywhere, and things about RC's and god knows what. Then I find this >_<

$updates_to_version = ".0.9";

Ah bleh... just another 0.x version When will those end? O_O

[lightdarkness]

wait, so we are getting a phpBB 2.0.9?

[Virtuality]

Yeah that's what it looks like.

See http://sourceforge.net/mailarchive/foru ... um_id=2657" target="_blank for details.

[lightdarkness]

I wonder what fix's 2.0.9 will bring.

[Virtuality]

Actually, I can tell you that:

l.i. Changes since 2.0.8

Fixed one vulnerability in admin_board.php - Xore
Added checking for proper session id characters to sessions and viewtopic to prevent injections - Bartlomiej Korupczynski
Fixed injection vulnerabilities possible with linked avatars
Implemented unsetting globalised variables
Limited confirm switch to POST variable in posting
Changed IP code in common.php to prevent IP spoofing
Updated visual confirmation mod [pre-edited files]
Moved obtaining word censors in modcp out of topic generation loop [increased performance/lower query count] - spotted by R45
Added the ability to link to https/ftps sites using the img bbcode tag
Fixed user online information in admin/index.php
Fixed getting group moderator in groupcp.php if running oracle backend - spotted by pakman
Fixed use of non-existing result variable in modcp (poster_id instead of user_id)
Fixed several vulnerabilities (XSS, SQL Injection and path disclosure) only possible with register_globals enabled - Matthew C. Kavanagh, Janek Vind

[q3utom]

i thought 2.08 was meant to be the last release of 2.0x ?

[Virtuality]

phpBB Group are pleased to announce the release of phpBB 2.0.5 the "Tanned and no longer furry because it's summer" Edition. This will be the last release of phpBB 2.0.x until phpBB 2.2 reaches RC-1. Note that we do not intend dropping support for 2.0.x even after 2.2 is released.

phpBB Group are pleased to announce the release of phpBB 2.0.6 the "phew, it's way to hot to be furry" Edition. This release had been made to fix a number of potential security related issues and more annoying bugs. Work continues on 2.2.0 and again we do not plan on further releases of 2.0.x except where critical issues arise.

phpBB Group are pleased to announce the release of phpBB 2.0.7 the "phew, ironed out all security issues?" Edition. This release had been made to fix a number of potential security related issues and to pack-up all minor revision [a to d] releases. Work continues on 2.2.0 and again we do not plan on further releases of 2.0.x except where critical issues arise.

phpBB Group are pleased to announce the release of phpBB 2.0.8. This release had been made to fix a number of critical security related issues. Work continues on 2.2.0 and again we do not plan on further releases of 2.0.x except where critical issues arise.

They have said that quite few times now so you never know may be the last version before 2.2 I know, I know, these releases contains important security fixes and there's no way you could know them to arrise before.

But with .9, they can't go more up, because they can't name it 2.1.0.

[A_Jelly_Doughnut]

2.0.10, 2.0.11, 2.0.32 and so forth

[Virtuality]

2.0.10, 2.0.11, 2.0.32 and so forth

Uhh... I never even thought of that. Bad me. Smart thinking

[lightdarkness]

I can't wait!