Znuny 7.3.5 (2026-07-22)

Type

Patchlevel

Security

Yes

Features

• Added delete-by-status option for the Maint::Log::CommunicationLog console command.

Changes

• Changed: Margin around paragraphs is now smaller in RTE content and ticket details article preview.
• Changed: Password reset now sends a one-time link to change the password instead of a random password via email. Thanks to @besendorf for suggesting this feature. (#56)
• Changed: The "Out-of-office enabled" notification can now be dismissed for the remainder of the current session without being shown again.

Bugfixes

Security Fixes

• CVE-2026-6659: Fixed weak, predictable salt generation in bundled CPAN module Crypt::PasswdMD5 by updating from 1.40 to 1.44.
• CVE-2026-8368: Fixed exposure of Authorization and Proxy-Authorization headers on cross-origin redirects in bundled CPAN module LWP by updating from 6.53 to 6.83.

Bug Fixes

• Fixed documentation links in config options. Thanks to @bjinthahouse for reporting. (#763)
• Fixed submenus not visible in the customer interface.
• Fixed console root execution hint to suggest the detected application user instead of a hard-coded user.
• Fixed CKEditor full-screen mode not working after switching to full-screen 3 times. Thanks to @LuBroering (Lukas Bröring, Sector Nord AG) for reporting. (#747)
• Fixed erroneous green background color on .MainBox. Thanks to @LuBroering (Lukas Bröring, Sector Nord AG). (PR#824)
• Fixed swapped sn and givenName default mapping in znuny.SyncLDAP2DB.pl. Thanks to @LuBroering (Lukas Bröring, Sector Nord AG). (PR#825)
• Fixed main form width expanding over boundaries when the RTE line width is greater than the width of the RTE.
• Fixed agent ticket move dialog: the "create article" checkbox not being automatically enabled when the communication section is expanded.
• Fixed content overflow in the date picker when week numbers are shown.
• Fixed ticket being unnecessarily locked again when the owner stays the same in dialogs based on the AgentTicketActionCommon module.
• Fixed applying CKEditor width via the system configuration option Frontend::RichText::Settings###Width or module-specific options, e.g. Ticket::Frontend::AgentTicketEmail###RichTextWidth.
• Fixed errors executing ticket search in AgentTicketService if the user has no queues or services assigned. Thanks to Paweł Bogusławski for reporting. (#803)
• Fixed command Maint::Ticket::ArchiveCleanup not deleting article flags correctly. Thanks to @parkingups69-netizen for reporting. (#780)
• Fixed dialog to resend an email (AgentTicketEmailResend), which is now only usable for articles in channel Email with a previous transmission failure.

Read about all changes in the CHANGES.md. See the commits on GitHub for a list of all changes.

Download