Security Vulnerabilities Fixed#

  • Added removal of protocol-relative URLs to Kernel::System::HTMLUtils::Safety.

  • Added security relevant check for the content type of articles and attachments to generic interface operations TicketCreate and TicketUpdate.

Issues Fixed#

  • Fixed not correct shown priority and state colors #443.

  • Added missing scope filter for transition actions in the process management.

  • Updated bundled CPAN library Sisimai to version 4.25.16 #391.

  • Fixed event handling for DBCRUD history entries.

  • Updated article action “Note to linked ticket” to be only available in the agent ticket detail view (AgentTicketZoom).

Read about all changes in the For the complete list of all changes, see the commits on GitHub.