Znuny 7.1.3#

Release Information:

Release Date

02-OCT-2024

Release Type

Patchlevel with security fixes

Download

https://download.znuny.org/releases/znuny-7.1.3.tar.gz

GitHub

znuny/Znuny

Security Vulnerabilities Fixed#

  • Added HTML filter to prevent XSS in the SLA description field of Process Management Activity Dialogues. Thanks for reporting to Tim Püttmanns, Maxcence.

  • Mitigating a ReDos via email when parsing HTML of Microsoft Word. Thanks for reporting to Emin Yazi (@eyazi), Efflux.

Changes#

  • Improvement for MySQL/MariaDB user for the bundler backup script backup.pl by using the –single-transaction.

  • Updated the CKEditor to 4.25.1-znuny.

  • Improved error logging and visibility for OAuth2 token requests.

Fixed Issues#

  • Fixed overflow of dynamic field groups in AgentTicketZoom process widget. Thanks to Sector Nord AG (@jsinagowitz). #553 <https://github.com/znuny/Znuny/issues/553>

  • Improved Dark skin. #584 <https://github.com/znuny/Znuny/issues/584>

  • Fixed the console command to import PostMaster Filter. Existing filters will now be updated instead of creating a new. Thanks to @meisterheister for reporting the issue. #527 <https://github.com/znuny/Znuny/issues/527>

  • Fixed a bug in ArticleStorageSwitch to prevent wrong file names during export.

  • Fixed the console command to add services that failed to work when ITSMCore is installed.

  • Fixed duplicate database record insert attempts for ticket flags. Thanks to @lukasdebaum for reporting. #5531 <https://github.com/znuny/Znuny/issues/531>

Read about all changes in the CHANGES.md. See the commits on GitHub for a list of all changes.