FreeScout - Package Updates

[Package Updates]

[1.15.31]

• Update freescout to 1.8.206
• Full Changelog
• Improved PHP 8.5 compatibility (#​5227)
• Improved Helper::sanitizeUploadedFileName() function.
• Improved TokenAuth middleware algorithm.
• Extended Helper::$restricted_extensions list.
• Remove role from fillable User model fields.
• Set allowed_classes parameter for unserialize() functions.
• Update Customer addChannel() method (#​5224)

[Package Updates]

[1.15.32]

• Update freescout to 1.8.207
• Full Changelog
• Allow to Fetch and Send emails via Goole Workspace OAuth (#​5241)
• Fixed array_filter() in DB config (#​5230)
• Fixed checking user authorization when changing conversation customer (#​5232)
• Check user access to mailbox in empty_folder ajax action (Security).
• Check customer visibility when merging customers (Security).
• Add PDO::MYSQL_ATTR_SSL_VERIFY_SERVER_CERT to DB config (#​5230)
• Fixed parsing email part's Content-Type ending with semicolon.
• Fixed "Undefined array key" error on sending reply to a Phone conversation (#​5236)
• Perform sanitizing of the file name at the beginning of Helper::sanitizeUploadedFileName() (Security).

[Package Updates]

[1.15.33]

• Update freescout to 1.8.208
• Full Changelog
• Adjust Message-ID for outgoing emails to minimize matching by Apache SpamAssassin patterns (#​5245)
• Show errors on Status page when shell_exec() funciton can not be executed (#​5250)
• Reduced Cc and Bcc in languages where the text does not fit nicely (#​5247)
• Do not show Cc and Bcc fields by default when replying (#​5247)
• Fixed incomplete object error on Status page (#​5246)
• Check access to mailbox when emptying a folder.
• Improved sanitizing uploaded PDF files.
• Fixed permissions check when Following/Unfollowing conversation (Security)
• Fixed in dependency: Symfony's incorrect parsing of PATH_INFO can lead to limited authorization bypass (Security: CVE-2025-64500)
• Fixed in dependency: PHPUnit Vulnerable to Unsafe Deserialization in PHPT Code Coverage Handling (Security: CVE-2026-24765)