Znuny LTS 6.5.15 (2025-04-30)

This release contains security fixes, bug fixes, and enhancements.

Type

Patchlevel

Security

Yes

Changes

Security : Fixed masking of passwords in support bundle generator for modified settings YAML file (CVE-2025-26847)
Security: Agent preferences updated via AJAX requests can now only be updated based on a list (AgentPreferences::AJAXUpdate::AllowedKeys). Thanks to Tim Püttmanns (maxence) for reporting the issue. (CVE-2025-43926)
Changed: Added the parameter ToAddressRegExp and CcAddressRegExp to the PostMaster filter ExternalTicketNumberRecognition.
Changed: GenericInterface: Additional parameter for the operations TicketCreate and TicketUpdate to control if a signature should be added to an article.
Changed: Added configurable limit to number of watched tickets per user.
Fixed: Improved performance by fixing the cache key for linked objects.
Fixed: Disabled date fields have valid input elements. Thanks for reporting to @BuilderNSV. #649
Fixed: Admin can now create AppointmentCalendars for all groups.

Read about all changes in the CHANGELOG.md. See the commits on GitHub for a list of all changes.

Download