Edit File: changelog.txt
Changes from (build ranslation:) to 6.17.9 (build 260619) June 17, 2026 -Fixed issue AT-2090: [security] SQL injection vulnerability in statistics (Carsten Schmitz) #Updated translation: Portuguese (Portugal) by ricardo.santos #Updated translation: Italian by lfanfoni #Updated translation: Italian (Informal) by lfanfoni Changes from 6.17.7 (build 260610) to 6.17.8 (build 260616) June 16, 2026 -Fixed issue #20560: Automatically writing the Allowed hosts file may fail silenty (Carsten Schmitz) #Updated translation: Polish by elissa #Updated translation: Polish (Informal) by elissa #Updated translation: Czech by jelen1 Changes from 6.17.6 (build 260604) to 6.17.7 (build 260610) June 10, 2026 -Fixed issue: [security] Hardening CPDB response link deletion (Carsten Schmitz) -Fixed issue #CT-1758: Decrypting encrypted responses in the new editor (#5034) (Rami) -Fixed issue #20549: [security] SQL Injection in RemoteControl invite_participants and remind_participants (#5031) (Denis Chenu) -Fixed issue #20548: [security] Host header injection in password reset (#5032) (Carsten Schmitz) #Updated translation: Italian by c_schmitz, drsi.staff, lfanfoni, lfortunato, myliserta, ritapas #Updated translation: Italian (Informal) by c_schmitz, ciampix, lfanfoni, murya, myliserta #Updated translation: French (France) by b00z00, DenisChenu, GuillaumeZ6, jayce, pasglop #Updated translation: Dutch by Han #Updated translation: Dutch (Informal) by Han Changes from 6.17.5 (build 260527) to 6.17.6 (build 260604) June 4, 2026 -Fixed issue: updates through ComfortUpdate are no longer incorrectly marked as unstable (Patrick Teichmann) -Fixed issue: [security] Vulnerability in twig template engine and deprecated twig attribute calls - this fix requires the minimum PHP version to be raised to 8.1. (#5026) (Carsten Schmitz) -Fixed issue #20489: [security] Publicly reachable file upload via RemoteControl API (#4889) (Denis Chenu) #Updated translation: Valencian by c_schmitz, joamuran, sergarb1, valdomir, vbraque #Updated translation: Spanish (Spain) by aesteban, artasom, atavei, c_schmitz, Ignacio, ireneoh, jmlopez, jparis, larjona, naiara.maya, Nodens, oleggorfinkel, perexat, segui, valdomir, xastrefernando, xtingray #Updated translation: Portuguese (Portugal) by ricardo.santos #Updated translation: Polish by elissa #Updated translation: Polish (Informal) by elissa #Updated translation: German by actxcellence, assistedmindfulness, c_schmitz, eddylackmann, Joffm, Liam, mfaber #Updated translation: French (France) by AnneSophieB, DenisChenu, fgervais, mapage, riqcles #Updated translation: Finnish by Jmantysalo #Updated translation: Dutch by c_schmitz, Han, kpadm, L191, mdekker, MrP #Updated translation: Dutch by Han, zfocuz #Updated translation: Dutch (Informal) by atvoogt, c_schmitz, Han #Updated translation: Dutch (Informal) by Aanouk, c_schmitz, Han, zfocuz #Updated translation: Croatian by rovinj #Updated translation: Catalan by qualitatuvic Changes from 6.17.4 (build 260520) to 6.17.5 (build 260527) May 26, 2026 -Fixed issue #AT-2056: Increase pagination to 250 and 500 (#5001) (Patricia Stell) -Fixed issue #AT-1897: design fixes for CSS states (#4992) (Tim Willig) -Fixed issue #20527: Bad order of default response list for multiple text question (Carsten Schmitz) -Fixed issue #20524: [security] Unsanitized null condition key (thank you for reporting Nagarajan Selvaraj Paulmony)(#4988) (Stefan K) -Fixed issue #20507: Unclosed twig comments in vanilla/fruity_twentythree themes (Mathieu Bruyen) -Fixed issue #19824: Page size of central participant list was limited to 100 (Carsten Schmitz) -Fixed issue #19571: Text fixes for templates -> themes (Carsten Schmitz) -Fixed issue #15946: File upload question: cannot select csv file (Carsten Schmitz) #Updated translation: Portuguese (Portugal) by ricardo.santos #Updated translation: Japanese by d_inoue, nomoto #Updated translation: German by c_schmitz #Updated translation: French (France) by DenisChenu
Back