FreeScout - Package Updates

[Package Updates]

[1.16.18]

• Update freescout to 1.8.229
• Full Changelog
• Fixed "Undefined variable $addressString" (#5487)
• Fixed "Undefined array key 10004" on outbound Guzzle request without a proxy (#5486)
• Fixed "Undefined variable $ensureAddressesAreSafe" (#5487)
• Fixed permissions check when merging conversations (Security: GHSA-v8vc-cmf9-gg2c)
• Patched security issues in dependency libraries: GHSA-vm85-hxw5-5432, GHSA-hq7v-mx3g-29hw, GHSA-34xg-wgjx-8xph, GHSA-cwxw-98qj-8qjx, GHSA-wpwq-4j6v-78m3, GHSA-h5x3-xfc9-m39h, GHSA-5vg9-5847-vvmq

[Package Updates]

[1.16.19]

• Update freescout to 1.8.230
• Full Changelog
• Save conversation subject when pressing Enter in the subject field (#5492)
• Do not send notifications to users when customer replies to a Spam conversation.
• Improved showing bell notifications (#5491)
• Enabled Core.EscapeNonASCIICharacters in Purifier (#5481)
• Improved remote URL sanitizing (Security: GHSA-6w8v-qp43-vg2h)
• Send CSP header in /ajax-html/ URLs (Security: GHSA-2g42-f97q-973x)
• Fixed real time bell notifications (#5499)
• Fixed separating replies from Outlook (#5504)

[Package Updates]

[1.16.20]

• Update description

[Package Updates]

[1.16.21]

• Update freescout to 1.8.231
• Full Changelog
• Check customer visibility in load_customer_info ajax action (Security: GHSA-cr68-27qv-p5m4)
• Restricted access to Assigned Conversations option in user profiles (GHSA-m4hc-rc98-38jc)
• Change customer when received a reply to a conversation from completely new email address (Security: GHSA-j49f-9g94-3wh4)
• Tighten throttling in Forgot Password requests (GHSA-jvmv-2qcp-7855)
• Allow to define PHP path via PHP_PATH .env parameter for tools.php script (#5507)
• Update customer in threads when merging customers (#5505)
• Do not allow to send reply till all uploads finished (#5515)
• Create a new conversation for email notifications forwarded to another mailbox (#4515)
• Fixed missing space in browser push notifications (#5520)
• Show warning on Status page when HTTPS is used but SESSION_SECURE_COOKIE=true is not set.

[Package Updates]

[1.16.22]

• Update freescout to 1.8.232
• Full Changelog
• Use salt in tools.php auth.
• Return empty value in Helper::decrypt() when decryption fails.
• Tighten throttling Forgot Password requests (Security: GHSA-jvmv-2qcp-7855)
• Throttle ResetPasswordController controller.
• Escape title in symfony ExceptionHandler.
• Purify mailbox signature HTML on saving.
• Sanitize module alias on activating a license.
• Use hash_equals() when checking attachment token.
• Revert changing last_reply_at field update logic #5501
• Restrict file extensions uploaded by support agents.

[Package Updates]

[1.16.23]

• add white list ip ranges and store mail password encrypted fixing #15783

[Package Updates]

[1.16.24]

• Update freescout to 1.8.233
• Full Changelog
• Sound notifications for chat messages.
• Allow to switch "Waiting Since" field into the "Time of the last customer activity" via WAITING_SINCE_AS_FIRST_UNANSWERED_CUSTOMER_MESSAGE .env parameter (#5225)
• Fixed CTRL+Z after loading draft in the editor (#4837)
• Do not insert <hr> tag on CTRL+ENTER click (#4909)
• Create forward-note for each recipient when forwarding conversation to multiple recipients (#5441)
• Fixed too long References header in emails to customers (#5542)
• Fixed Outlook reply separator for incoming emails (#5544)
• Strip Outlook reply header from the body of replies sent to email notifications (#5545)
• Allow style attribute in inline elements in Purifier config (#5547)

[Package Updates]

[1.16.25]

• Update freescout to 1.8.234
• Full Changelog
• Custom modules now should use the following functions when working with Conversation statuses:
• Check conversation status: $conversation->isActive(), $conversation->isPending(), $conversation->isClosed(), $conversation->isSpam()
• Check if conversation has one of the listed statuses: $conversation->hasStatus() and Conversation::compareStatus()
• Checking "status" field in a query: Conversation::addStatusCondition()
• Allow <code> and <kbd> tags in Purifier config (#5556)
• Allow to extend conversation statuses via hooks.
• Fixed conversation ID in BroadcastNotification::fetchPayloadData() (#5553)
• Use Helper::hashEquals() instead of hash_equals().
• Fixed path to PostTooLargeException (#5560)
• Check Curl HTTP Code in Helper::getRemoteFileContents() (#5552)

[Package Updates]

[1.16.26]

• Update freescout to 1.8.235
• Full Changelog
• Fixed icon tags in the editor (#5564)
• Fixed variables in mailbox signatures (#5565)
• Check checkIsOnlyAssigned() when editing or deleting user threads (GHSA-89fj-jcr7-2c68)
• Perform user->canSeeOnlyAssignedConversations() check in ConversationsController->conversationsFilterQuery() and Conversation::getChats() (GHSA-c83g-9f2m-9cmw)
• Check HTTP_CF_CONNECTING_IP in Request and escape values in Logs Monitor emails (GHSA-9cm3-qvj2-8hg4)
• Check user access to the conversation when processing reply to email notification (GHSA-83xx-8c27-gq78)
• Fixed actor in web notifications (#5566)
• Removed folder_id_state index from Conversations table.

[Package Updates]

[1.16.27]

• Update freescout to 1.8.236
• Full Changelog
• Remove temporary SwiftMailer files in freescout:clean-tmp command (#5558)
• Store conversation number in "Send Errors" log (#5571)
• Trigger user notifications when moving conversations (#5580)
• Improved PHP 8.5 compatibility (#5568,#5567)
• Fixed CTRL+ keyboard shortcuts on Mac (#5572)
• Apply module migrations when the Modules folder resolves outside the app folder (#5574)
• Allow text/rfc822-headers Content Type when processing incoming bounce messages (#5584)
• Improve error message check in FetchEmail when sleep time between connections is increased (#5584)
• Check folder type in empty_folder action (GHSA-6mhr-m8m9-6q6h)
• Check access to mailboxes when non-admin creates users (GHSA-w36p-9vhj-x273)