2.18 is a reliability and security update rather than a feature release. Here is what has changed:

Security

• A full security review of the source corrected 325 potential problems, the great majority of them buffer overruns, across every part of the program: the main program, all the panels, packet loading, the ARexx interface and the QWK code.
• Every unsafe string operation now uses a bounds-checked equivalent, and path names, packet names, ARexx arguments, message headers and subject lines are length-checked before use.
• Blue Wave and QWK packet data is validated as it is loaded, so a damaged packet is treated as damaged instead of being trusted.
• The settings, offline configuration and command files that AmyBW reads are parsed with limits on the number of keywords, filters and macros.

• Saves that reported success when the disk write had failed now check every write and the close, and show a DOS error requester when something goes wrong. This covers the settings, reply lists, read and reply marks, the QWK reply packet, the offline configuration, file requests and edited reply text.
• AmyBW no longer packs your replies and clears the work directory if writing the reply files failed - that used to lose the replies.
• The build is now free of compiler warnings.

• The message header now shows the time zone a message was written in, taken from its FidoNet TZUTC kludge, and the time it was written in your own zone, taken from ENV:TZ. It understands both FACTS-style zones and POSIX zones with summer-time rules, and is shown the same way in saved and printed messages.
• Messages without the kludge are shown exactly as before. AmyBW only reads the kludge; it does not add one to your replies, as the Blue Wave specification forbids readers from doing so.
• The kludge is only in your packet if the door includes kludge lines

AmyBW 2.18 is available for download -- see the Downloads page, or read more on the AmyBW page. If you'd like to support Zeus Developments, you can also register as a Zeus supporter.