FreeScout - Package Updates

[Package Updates]

[1.15.24]

• Update freescout to 1.8.200
• Full Changelog
• PHP 8.5 compatibility (#​5114)
• Sanitize email length before saving (#​5106)
• Set last_reply_at when email conversation with single Note thread is created (#​5105)
• Delete attachments when mailbox is deleted (#​5108)
• Fixed CacheBasedSessionHandler error on PHP >= 8.1 (#​5120)

[Package Updates]

[1.15.25]

• Update freescout to 1.8.201
• Full Changelog
• Send email to correct customer when customer is changed (#​5121)
• Collapse email history in Gmail (#​5136)
• Improved PHP 8.5 compatibility.

[Package Updates]

[1.15.26]

• Fix OIDC login with provider names containing umlauts

[Package Updates]

[1.15.27]

• Update freescout to 1.8.202
• Full Changelog
• Added command.after_app_update hook (#5147)
• Show customer email in the conversations list (#5066)
• Update folders counters when deleting conversations forever.
• Fixed "http_response_header" error in Guzzle (#5137)
• Show scroll when some customer has many social profiles (#4644)
• Rename "Headers" tab to "Email Headers" in the "Show Original" dialog (#5146)

[Package Updates]

[1.15.28]

• Update freescout to 1.8.203
• Full Changelog
• Fixed "Invalid byte sequence for encoding UTF-8" error on PostgreSQL on fetching (#​5159)
• Make customer email in the conversation list more compact (#​5066)
• Revert changes made to "Collapse email history in Gmail" to avoid problems with replies separation in FreeScout (#​5136)

[Package Updates]

[1.15.29]

• Update freescout to 1.8.204
• Full Changelog
• Remove Australia/Queensland timezone (#​5175)
• Add base-uri rule to CSP tag.
• Use PHP library to fetch via POP3 instead of IMAP extension.

[Package Updates]

[1.15.30]

• Update freescout to 1.8.205
• Full Changelog
• Fixed wrong customer name after recipient change (#​5199)
• Do now show CC and BCC fields when editing chat message draft (#​5196)
• Fixed styles for folders having .alert class (#​5216)
• Improved PHP 8.5 compatibility.
• Set max letngth for conversation subject (#​5201)

[Package Updates]

[1.15.31]

• Update freescout to 1.8.206
• Full Changelog
• Improved PHP 8.5 compatibility (#​5227)
• Improved Helper::sanitizeUploadedFileName() function.
• Improved TokenAuth middleware algorithm.
• Extended Helper::$restricted_extensions list.
• Remove role from fillable User model fields.
• Set allowed_classes parameter for unserialize() functions.
• Update Customer addChannel() method (#​5224)

[Package Updates]

[1.15.32]

• Update freescout to 1.8.207
• Full Changelog
• Allow to Fetch and Send emails via Goole Workspace OAuth (#​5241)
• Fixed array_filter() in DB config (#​5230)
• Fixed checking user authorization when changing conversation customer (#​5232)
• Check user access to mailbox in empty_folder ajax action (Security).
• Check customer visibility when merging customers (Security).
• Add PDO::MYSQL_ATTR_SSL_VERIFY_SERVER_CERT to DB config (#​5230)
• Fixed parsing email part's Content-Type ending with semicolon.
• Fixed "Undefined array key" error on sending reply to a Phone conversation (#​5236)
• Perform sanitizing of the file name at the beginning of Helper::sanitizeUploadedFileName() (Security).

[Package Updates]

[1.15.33]

• Update freescout to 1.8.208
• Full Changelog
• Adjust Message-ID for outgoing emails to minimize matching by Apache SpamAssassin patterns (#​5245)
• Show errors on Status page when shell_exec() funciton can not be executed (#​5250)
• Reduced Cc and Bcc in languages where the text does not fit nicely (#​5247)
• Do not show Cc and Bcc fields by default when replying (#​5247)
• Fixed incomplete object error on Status page (#​5246)
• Check access to mailbox when emptying a folder.
• Improved sanitizing uploaded PDF files.
• Fixed permissions check when Following/Unfollowing conversation (Security)
• Fixed in dependency: Symfony's incorrect parsing of PATH_INFO can lead to limited authorization bypass (Security: CVE-2025-64500)
• Fixed in dependency: PHPUnit Vulnerable to Unsafe Deserialization in PHPT Code Coverage Handling (Security: CVE-2026-24765)