Hébergement osTicket

1.10.4
 (version de sécurité)
21 Juillet - 30MB1.10.4



Security

Fix Multiple XSS Vulnerabilities



Highlights

Auto-Assignment Log

Language Pack Locale Mismatch

CLI Deploy Missing Bootstrap

User Import No Email

Ticket Lock On Disable



1.10.3



Security

Prevent Click Jacking



Highlights

Org. User Account Status

Flush Cache On Upgrade

Outlook _MailEndCompose

Files - deleteOrphans()

Fix imap_open Disable Authenticator

Check permissions before displaying Close Task

Information Page Performance

queryset: Fix circular reference error



1.10.2



Security

Prevent Account Takeover

Prevent Agent Directory XSS

Httponly Cookies

Only allow image attachments to be opened in the browser window

CSRF in users.inc.php URL

AJAX Reflected XSS

File Upload Bypass

Lire la suite: https://github.com/osTicket/osTicket/releases






1.10.1

27 Octobre 2017 - 20MBEnhancements

Users: Support search by phone number

i18n: Fix getPrimaryLanguage() on non-object (#3799)

Add TimezoneField (#3786)

Chunk long text body (#3757, 7b68c99)

Spyc: convert hex strings to INTs under PHP 7 (#3621)

forms: Proper Field Deletion

Move orphaned tasks on department deletion to the default department (42e2c55)

List: Save List Item Abbreviation (8513f13)



Performance and Security

XSS: Encode html entities of advanced search title (#3919)

XSS: Encode html entities of cached form data (#3960, bcd58e8)

ORM: Addresses an SQL injection vulnerability in ORM lookup function (#3959, 1eaa691)






1.10
 (version majeure)
4 Novembre 2016 - 20MBEnhancements

Support Passive Email Threading (#3276)

Introduce the concept of Trusted Proxies and Local Networks (4396f91)

* Account for agents' name format setting when sorting agents (#3274, 5c548c7)

Ticket Filters: Support Lookup By Name (#3274, ef9b743)

Enable preloaded canned responses by default (#3274, 7267531)



Improvements

Task: Missing Description on create (#3274, 865db9)

Save task due date on create (#3438)

Show overlay on forms submit (#3426, #3391)

upgrader: Fix crash on SequenceLoader (#3421)

upgrader: Fix undefined js function when upgrading due to stale JS file (#3424)

Use help topic as the subject line when issue summary is disabled (#3274, 74bdc02)

PEAR: Turn off peer name verification by default (SMTP) (#3274, 4f68aeb)

Cast orm objects to string when doing db_real_escape (#3274, e63ba58)

Save department on __create (#3274, c664c93)

Limit records to be indexed per cron run to 500 (#3274, 9174bab)






1.9.15
 (version de sécurité)
2 Novembre 2016 - 20MBEnhancements

Introduce the concept of Trusted Proxies and Local Networks (4396f91)


Performance and Security

Fix memory leak when applying 'Use Reply-To Email' ticket filter action (8ca6bc3)
XSS: Sanitize and validate HTTP_X_FORWARDED_FOR header (#3439, 4396f91)
XSS: Encode html chars on help desk title/name (#3439, 2fb47bd)



Afficher plus de versions




1.9.14

13 Juin 2016 - 20MBEnhancements

alerts: Do not include the manager with the members (#2974)


Improvements

Only change SLA if target department has an SLA
Unify ticket source and preserve original (e.g Web) source on ticket edit
filedrop: Use jQuery to remove filenode
pjax: Do not assume href attribute is set
Default to system default, if staff does not have page limit set, thanks @antriver (#2951)
plugins: Assume plugins might not have configuration
oops: Make sure __toString returns a string
autoresponse: Do not send out new message auto-response to ticket owner as well as collaborators on new ticket (#2639)
auth: Consider the destination clicked prior to SSO authentication, thanks @jdelhome3578 (#2916)
config: Add error message and default for max_open_tickets setting (#2914)
auth: This issue only impacts SSO auth plugins, @thanks kevinoconnor7 (#2641)
i18n: Support language pack compilation with new support for parallel releases with v1.10.x






1.9.12
 (version de sécurité)
20 Août 2015 - 20MBImprovements

Fix missing search box adding user to organization (#2431)
Fix incorrect update time on FAQ view in staff portal (194f890)
Fix incorrect parsing of some multi-part MIME messages (fe62226)
Fix auto-claim for new ticket by staff if a filter added a canned response (eca531f)
Fix malformed results on remote user search when adding users (#2335)
Fix search by ticket number on client portal (#2294)
Fix association of user email without a domain to an organization without an email domain setting (#2293)


Performance and Security

Revert poor performing ticket stats query (#2318)






1.9.11
 (version de sécurité)
22 Juillet 2015 - 20MBEnhancements

Log to syslog on php mail() error (#2128)
Full path of help topics shown in filter management (3d98dff)
Auto rebuild the search index if %_search table is dropped (#2250)
New version available message in system information (c1b5a33)


Improvements

Fix appearance of <div> in user names (regression in v1.9.9) (be2f138)
Out-of-office notification does not clear closing agent (#2181)
Fix check for departments limiting assignees to members only (#2143)
Fix signal data pass by reference (#2195)
Fix template variables not rendering in href attributes (#2223)
Fix missing custom data for new users (#2203)
Fix incorrect cli option expansion (#2199)
Properly encode To header for php mail() sends (857dd22)
Fix incorrect message body when fetching TNEF emails (0ec7cf6)
Fix layout of some tables in PDF export (cef3dd3)


Performance and Security

Fix XSS issue on choices field type (#2271)






1.9.9

25 Juin 2015 - 20MBEnhancements

Properly balance stripped and invalid HTML (#2145)
Add MANIFEST file to deployment process and retire duplicate code for packaging (#2052)


Improvements

Fix inability to configure LDAP and S3 plugins (regression) (59337b3)
Fix incorrect whitespace in search indexed HTML content (#2111)
Add support for invalid multipart/relative content type (aaf1b74)
Force line breaks for very long HTML lines (56cc709)


Performance and Security

Fix slow query for ticket counts for large datasets (c4ace2d)
Fix slow thread load query (thanks @torohill) (7b7e855)






1.9.8.1

18 Mai 2015 - 20MB
Add option to disable email address verification
Fix crash upgrading from osTicket v1.6






1.9.8

15 Mai 2015 - 20MBEnhancements

Update user information for existing users when importing CSV (#1993)
Agent names are consistently formatted and sorted throughout the system (#1972)
Memcache session backend support. (See include/ost-sampleconfig.php) (#2031)
Email domain validation includes DNS record verification (#2042)
Make ticket queue selection sticky (aa2dc85)


Improvements

Fix incorrect mapping of ISO charsets to ISO-8859-1, thanks @nerull7
Fix unnecessary drop of ticket CDATA table because of update to deleted field (#1932)
Fix inability to create or update organization custom data (#1942)
Fix inability to update some fields of user custom data (#1942)
Fix filtering user custom data for email tickets (#1943)
Fix missing email headers resulting in incorrectly threaded emails when delivered (#1947)
Cleanup file data when removing custom file uploads (#1942)
Fix crash when exporting PDF and PHAR extension is not enabled
Fix crash processing some TNEF documents (89f3ed7, #1956)
Fix handling of GBK charset when gb2312 is advertised (#2000)
Fix link to client ticket listing when logged in, thanks @neewy (#1952)
Disambiguate staff and collaborators when processing a some emails (#1983)
Fix several i18n phrase and layout issues (#1958, #1962, #2039)
Improve detection of some bounce notices with alternative content (#1994)
Fix image URL rewrite when pasting existing images, from a KB article for instance (#1960)
Preserve internal note formatting on new ticket by staff if HTML is disabled (#2001)
Touch organization updated timestamp on custom data update (#2007)
Fix deployment on Windows® platforms, thanks @yadimon (#2033)
Fix upgrade crash if retrying an old, failed upgrade from v1.6 (#1995)
Fix corruption of some html content (9ae01bf)






1.9.7
 (version de sécurité)
3 Avril 2015 - 20MBEnhancements

Remote IP is logged for staff replies (#1846)
Add option to require client login to view knowledge base (#1851)
Internal activity alert, replacing the internal note alert, includes alerts of responses made by other agents (#1865)
Email system now uses LF instead of CRLF as the default (#1909)
Mass actions for user directory (#1924)
Unassign tickets on transfer if current assignee is not a member of the new department and the department has "Restrict assignment to members" enabled (#1923)


Improvements

Clear overdue flag when a ticket is closed, thanks @A-Lawrence (#1739)
Clear attached file listing on client post (regression) (#1845)
Delete ticket custom data on delete (#1840)
Trim whitespace from filter match data on update (#1844)
Fix dropping of custom data on API post (#1839)
Fix advanced search on create date (#1848)
Fix initial load and pagination of dashboard page (#1856)
Fix incorrect internal/public category setting in drop down for new FAQ (#1867)
Add UTF-8 BOM to CSV export for correct Unicode detection (#1869)
Fix not considering the setting for alert assigned on new message (#1850)
Skip new activity notice if collaborator(s) included in email To or Cc header (#1871)
Fix inability to uncheck a custom data checkbox (#1866)
Fix advanced search for unassigned tickets (#1857)
Fix navigation warning if not using the lock feature (#1898)
Fix detection of message of some bounce notices (#1914)
Fix SQL alert with multiple Message-ID headers (#1920)
Add a warning if attempting to configure archiving for POP accounts (#1921)
Fix missing UTF-8 output encoding header for staff control panel (#1918)
Fix z-index issue between popup previews and modal dialogs (#1919)
Record imported file backend when importing files (f1e31ba)


Performance and Security

Fix XSS vulnerability in sequence management (88bedbd)
Defer loading of thread email header information when loading ticket thread (#1900)






1.9.6
 (version de sécurité)
16 Mars 2015 - 20MBEnhancements

New Message-Id system allowing for better threading in mail clients (#1549, #1730)
Fix forced session expiration after 24 hours (#1677)
Staff panel logo is customizable (#1718)
Priority fields have a selectable default (instead of system default) (#1732)
Import/Export support for file contents via cli (#1661)


Improvements

Fix broken links in documentation, thanks @Chefkeks (#1675)
Fix handling of some Redmond-specific character set encoding names (#1698)
Include the user's name in the "To" field of outbound email (#1549)
Delete collaborators when deleting tickets (#1709)
Fix regression preventing auto-responses for staff new tickets (#1712)
Fix empty export if ticket details form has multiple priority fields (#1732)
Fix filtering by list item properties in ticket filters (#1741)
Fix missing icon for "add new filter", thanks @Chefkeks (#1735)
Support Firefox v6 - v12 on the file drop widget (#1776)
Show update errors on access templates (#1778)
Allow empty staff login banner on update (#1778)
Fix corruption of text thread bodies for third-party collaborator email posts (#1794)
Add some hidden template variables to pop out content (#1781)
Fix missing validation for user name and email address (#1816, eb8858e)
Turn off search indexing when complete, disable incorrectly implemented work breaking, squelch error 1062 email from search backend (afa9692)
Fix possible out of memory crash in custom forms (#1707, 0440111)


Performance and Security

Fix generation of random data on Windows® platforms (#1672)
Fix possible DoS and brute force on login pages (#1727)
Fix possible redirect away from HTTPS on client login page, thanks @ldrumm (#1782)






1.9.5.1
 (version de sécurité)
13 Janvier 2015 - 2MBImprovements

Fix file.php to serve files added to system before osTicket v1.9.1 (e02ab9a)
Fix file.php to serve files if client panel or system is offline (6bb7843)
Fix popover download of inline images (8d3a130)
Avoid de-duplicating zero-length files (98caa70)
Send new message alert to team members if not assigned to an agent (b7e75b1)
Fix import of users to organization not setting the organization (1220238)
Fix redactor toolbar showing over the date picker (#1450, thanks @Chefkeks)


Performance and Security

Fix XSS vulnerability in client language selection (b38b3ca)






1.9.5
 (version de sécurité)
9 Janvier 2015 - 2MBEnhancements

Add support for organization vars in templates (%{ticket.user.organization...}) (#1561)
Canned responses feature can now be disabled (#1562)
Drop link redirection through l.php (#1640)
Use unified file download script (#1641). Links can now be shared with external users and accessed without authenticating.
Ticket filters support matching and banning based on the Reply-To user information (#1645)


Improvements

Remove custom data when users are deleted (#1492)
Fix matching of ticket number in subject (regression in v1.9.4) (#1486)
Several minor translatable strings (#1441, #1489, #1560), thanks @Chefkeks
Fix invalid UTF-8 chars PDF error for empty thread title (regression in v1.9.4) (#1512)
Consider auto response checkbox and department setting for new ticket by staff (#1509)
Fix PHP crash if finfo extension is missing (#1437)
Fix export of choice field items (#1436)
Properly handle alert and auto response flags from API (#1435), thanks @stevepacker
Fix current value of choice fields if set to boolean false (#1466)
Do not reopen tickets for automated responses (#1529)
Properly handle uppercase file extensions in file field configuration (#1549)
Fix release of ticket lock when navigating away from ticket view (#1552)
Display FAQ article consistently on client portal (#1553)
Avoid wrapping password reset URLs on text emails (#1558)
Fix field requirement for clients when only required for agents (#1559)
Fix language selection for new email template group (#1563)
Fix incorrect status of new ticket if opened as closed and assigning to an agent (#1565)
Forbid disabling the only active administrator (#1569)
Searching for tickets searches to midnight of the end date (#1572), thanks @grintor
Fix rejection of tickets by filter, even if a previous matching filter would stop on match (#1644)
Fix matching of User / Email Address in ticket filters (#1644)
Properly HTML escape thread bodies when quoting (#1637)
Use department email for agent alerts (#1555)
Skip team assignment alert on new ticket if assigned to an agent (fddb3c7)
Use custom form name as the page title when editing (#1646)


Performance and Security

Fix possible XSS vulnerability in sortable table view pages (#1639)






1.9.4
 (version majeure) (version de sécurité)
27 Octobre 2014 - 2MBThis release introduces a variety of new awesome features and enhancements.



Major New Features

New ticket states (resolved, archived, and deleted) (#1094, #1159)
Custom ticket statuses (#1159)
Custom ticket number formats (#1128)
Full text search capabilities (beta)
Multiselect for choice fields and custom list selections
Phase II Multi-Lingual Support (User Interface) (see http://i18n.osticket.com and http://jipt.i18n.osticket.com) (#1096)
Active interface translations of 46 languages currently
Popup help tip documentation in all languages
Flags displayed on client portal for manual switch of UI language by endusers
Automatic detection of enduser and agent language preference as advertised by the browser
Improved PDF ticket printing support, including greater support for eastern characters such as Thai, Korean, Chinese, and Japanese
Proper support for searching, including breaking words for languages which do not use word breaks, such as Japanese
Proper user interface layout for right-to-left languages such as Hebrew, Arabic, and Farsi
Right-to-Left support for the HTML text editor, regardless of the viewing user’s current language setting
Proper handling of bidirectional text in PDF output and in the ticket view


Enhancements

Plugins can have custom configurations (#1156)
Upgrade to mPDF to v5.7.3 (#1356)
Add support for PDF fonts in language packs (#1356)
Advanced search improved to support multiple selections, custom status and flags


Improvements

Fix display of text thread entries with HTML characters (