ArcticDesk v1.1.2 Maintenance Release

We hope everyone is having a good new year so far. The team has been working hard on the next major version of ArcticDesk, for which we hope to release a preview shortly.

In the meantime, we have published v1.1.2 which is our first maintenance release for ArcticDesk. Whilst it contains no new feature, it addresses a few reported bugs and patches a minor security flaw described below, as such we recommend that all users upgrade as soon as possible. The update is available in an incremental form for updates from v1.1.1 and a full form for fresh installs, both can be downloaded immediately from our client area.

As mentioned above, v1.1.2 addresses a minor security flaw that was identified that affects all previous versions of ArcticDesk. The flaw gives the potiential for php code to be executed that resides outside of the ArcticDesk installation folder.  We have no reason to believe that this was ever exploited on a customer installation, the flaw was identified internally as part of a routine code review.

Changelog

Bug Fixes

(AD-416) - Fixed issue that prevented ArcticDesk announcements posting to widget
(AD-417) - Fixed issue that prevented 'Submit Ticket' from working correctly in some situations when Force SSL was enabled
(AD-420) - Selecting 0 or 1 tickets and pressing Merge results in a success message
(AD-421) - Fixed issue that caused ticket subjects to display incorrectly when special characters were used
(AD-422) - Fixed security flaw that had the potiential to execute php files located outside of the ArcticDesk installation folder