This release includes 1 security fix for security teams reviewing exposed deployments.
Topics
+8 more
Affected surfaces
ReleasePort's take
Light signalReplies to previously received email notifications will no longer be sent to customers.
Why it matters: Affects email notification replies; update workflows before upgrade to version 1.8.220.
Summary
AI summaryReplies to previously received email notifications are no longer sent to customers.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Security | Medium |
Check hash in replies to user email notifications (Security: GHSA-6r38-6mcf-2ww3). Check hash in replies to user email notifications (Security: GHSA-6r38-6mcf-2ww3). Source: granite4.1:8b-q6_K@2026-05-21 Confidence: low |
— |
| Breaking | Medium |
Replies to previously received email notifications will not be sent to customers. Replies to previously received email notifications will not be sent to customers. Source: granite4.1:8b-q6_K@2026-05-21 Confidence: low |
— |
| Feature | Medium |
Add configurable threshold to suppress transient fetch errors in Logs Monitoring. Add configurable threshold to suppress transient fetch errors in Logs Monitoring. Source: granite4.1:8b-q6_K@2026-05-21 Confidence: high |
— |
| Bugfix | Medium |
Fixed checking trusted hosts during installation. Fixed checking trusted hosts during installation. Source: granite4.1:8b-q6_K@2026-05-21 Confidence: high |
— |
| Refactor | Medium |
Clear JS and CSS builds when clearing cache. Clear JS and CSS builds when clearing cache. Source: granite4.1:8b-q6_K@2026-05-21 Confidence: low |
— |
| Refactor | Medium |
Activate the module right after activating the license. Activate the module right after activating the license. Source: granite4.1:8b-q6_K@2026-05-21 Confidence: low |
— |
Full changelog
After installing this releases replies sent by agents to the previously received email notifications will not be sent to customers. Only replies to the newly received email notifications will be sent. This is a breaking change.
Added
- Add configurable threshold to suppress transient fetch errors in Logs Monitoring (#5399)
- Clear JS and CSS builds when clearing cache.
Fixed
- Check hash in replies to user email notifications (Security: GHSA-6r38-6mcf-2ww3)
- Fixed checking trusted hosts during installation.
Changed
- Activate the module right after activating the license.
Breaking Changes
- Replies sent by agents to previously received email notifications will not be forwarded to customers; only replies to newly received notifications are delivered.
Security Fixes
- GHSA-6r38-6mcf-2ww3 — Fixed hash check in replies to user email notifications, preventing unauthorized reply injection.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About freescout
FreeScout — Free self-hosted help desk & shared mailbox (Zendesk / Help Scout alternative)
Beta — feedback welcome: [email protected]