This repository was archived by the owner on Feb 1, 2026. It is now read-only.
Release: v1.5.0-RC1
Pre-release
Pre-release
- Fix NNTP injection vulnerability (reported by Brendan Coles, itsecuritysolutions.org) (@heino)
- Fix XXS vulnerability in demo (reported by Brendan Coles, itsecuritysolutions.org) (@heino)
- Fix usage of deprecated split() (bug #17417 and #17783) (@heino)
- Fix for large groups on 32 bit systems: Article numbers are no longer cast into integers, but passed on directly from the server as strings (bug #17689). This could possibly have implications and should considered a possible backward compatibility breakage, but is thought to be acceptable, since PHP is expected to cast into integers/floats as needed... (@heino)
(Released: 2011-08-15)