Znuny 7.1.4 (2025-02-12)

Type

Patchlevel

Security

Yes

Changes

• Removed logging of decrypted content of S/MIME emails in the communication log.
• Fixed access control when updating the ticket state via the Generic Interface.
• Restricted the excution of the backup.pl and restore.pl scripts to the application user to prevent privilege escalation.
• Added and changed HTTP headers after some finding during a penetration test.
• Fixed the missing HttpOnly flag for a cookie not set in certain situations.
• Updated bundled libraries jstree, nunjuckjs and MIME::Decoder::QuotedPrint.
• Increased the size of the columns profile_key and profile_value of database table search_profile.
• Added a filter when exporting Dynamic Fields.
• Added configurable InputFields::ModernizedSelection::MaxNumberOfOptions. Thanks to @itweserems. Pull request #576
• S/MIME verification: Added fallback option to disable verification of the signer's certificate after initial verification failed. Activated by new config option SMIME::NoVerify.
• Fixed event check of the event module TicketDynamicFieldDefault.
• ProcessManagament: fixed the error handling in activity dialogues for owner fields. Thanks to Daylton Rodrigues (@dayltonr) for reporting. Issue #627
• Sector Nord AG: Fixed module check for calendar plugin. Thanks to Sector Nord AG (@jsinagowitz). Pull request #623
• The system configuration option SendmailEncodingForce is now a selection instead of a text field.
• Fixed "From" and "To" not being expandable for an article in the ticket detail view. Thanks to Oliver Freyermuth (@olifre) for reporting. Issue #605
• Fixed multiple ticket notifications being sent for empty process tickets for the event NotificationNewTicket.
• The check modules command now lists the required Perl Module Hash::Merge as mandatory.
• Fixed user cache being cleared for all users whenever a user logs in/out.
• Fixed Bug - Added missing template toolkit translations. Translate the ticket state in PDF search result (AgentTicketSearch|CustomerTicketSearch). Thanks to @BuilderNSV for reporting the issue. Issue #615
• Fixed uninitialized value in AdminSelectBox. Thanks to Sector Nord AG (@jsinagowitz). Pull request #611
• Fixed link in INSTALL.md / UPDATING.md. Thanks to @Sidpatchy. Pull request #589
• Sector Nord AG: Fixed #571 AgentTicketProcess Mobile-View is not showing all elements of ActivityDialog. Thanks to Lukas Bröring (@LuBroering). Pull request #553
• Add-on names are no longer translated.

Read about all changes in the CHANGELOG.md. See the commits on GitHub for a list of all changes.

Download