Znuny LTS 6.5.23 (2026-07-22)

Type

Patchlevel

Security

Yes

Bugfixes

Security Fixes

• CVE-2026-6659: Fixed weak, predictable salt generation in bundled CPAN module Crypt::PasswdMD5 by updating from 1.40 to 1.44.
• CVE-2026-8368: Fixed exposure of Authorization and Proxy-Authorization headers on cross-origin redirects in bundled CPAN module LWP by updating from 6.53 to 6.83.

Bug Fixes

• Fixed documentation links in config options. Thanks to @bjinthahouse for reporting. (#763)
• Fixed swapped sn and givenName default mapping in znuny.SyncLDAP2DB.pl. Thanks to @LuBroering (Lukas Bröring, Sector Nord AG). (PR#825)
• Fixed errors executing ticket search in AgentTicketService if the user has no queues or services assigned. Thanks to Paweł Bogusławski for reporting. (#803)
• Fixed command Maint::Ticket::ArchiveCleanup not deleting article flags correctly. Thanks to @parkingups69-netizen for reporting. (#780)
• Fixed dialog to resend an email (AgentTicketEmailResend), which is now only usable for articles in channel Email with a previous transmission failure.

Read about all changes in the CHANGES.md. See the commits on GitHub for a list of all changes.

Download