This release fixes several critical security issues that has been recently discovered. Update is strongly recommended!
You can download the GLPI 10.0.2 archive on GitHub. Exceptionally, as we have a critical security issue on an unauthenticated page, we also release a GLPI 9.5.8 archive.
You’ll find below the list of security issues fixed in this bugfixes version:
Unauthenticated SQL injection on login page (CVE-2022-31061)
SQL injection on actor part in assistance forms (CVE-2022-31056)
Unauthenticated Sensitive Data Exposure on Refused Inventory Files (CVE-2022-31068)
Also, here is a short list of important bugfixes done in this version:
FIX adding actors to ITIL Objects (#11796, #11957)
FIX unwanted “promote to ticket” feature on self-service interface (#11834)
FIX native inventory do not inject switch information (#11864)
We are happy to announce our new silver partner in Cameroon – AVS Telecom.
A.V.S Telecom SARL Telecom is a company specialized in the field of Information and Communication Technologies offering to all of its customers a wide range of ICT solutions including various collaborative services such as telephony over IP and videoconferencing, security services such as video surveillance and network security.
A.V.S Telecom SARL’s mission is to offer its SME/SMI customers a wide range of innovative, reliable and complete IT services for its IT equipment. These services, adapted to SMEs/SMIs, are usually offered to large companies. They therefore make it possible to develop, at a lower cost, secure computer network infrastructures helping them to optimize their performance at all levels.
We are excited that GLPI ITSM solution is becoming more and more represented all over the world and GLPI Network (our support offer for on-premises – get your IT Infrastructure secured) subscription service will be available for more customers through our new partners.
Our large partnership network is always open for new collaborations. If you are interested in representing one of our products in your country, get in touch with us: https://glpi-project.org/contact/
Being a partner means:
Having an a direct access to the Teclib´s tech expertise;
Get special discounts;
Access official support,
Many other tools which will help you to gain more customers and increase reputation on the market by adding open source ITSM to your portfolio.
We are looking for a researcher interested in working on a PhD thesis in computer science that consist in studying fundamental and practical issues in designing a system that will match machines inside an IT system with vulnerabilities affecting software installed on these machines, in order to signal to system administrators the vulnerability level and the need to protect or update each machine.
What is the duration of the intership?: 3 years, Starting September 2022.
Where will it take place?: Thesis will take place mainly at INRIA-Rennes site (Beaulieu scientific campus), inside the DiverSE team, and also inside Teclib (Caen,…).
Which is the profile we are looking for?: A person with:
Master in computer science or equivalent.
Good knowledge in development and software engineering.
Good level in english.
Curiosity, motivation, autonomy, ability to work inside a team, abstraction capabilities, programming ability, interest for open source.
Knowledge in automatic classification and machine learning is appreciated.
This release includes some fixes and enhancements. Here are the most important ones:
we implemented a feature request from the community to support SSL server certificate of the GLPI server deployment with operating system deployment feature:
on windows, the glpi server certificate can be deployed through the enterprise keystore,
on macosx, the glpi server certificate can be deployed in system keychain through a MDM.
we added the support of the new ‘ssl-fingerprint’ option and it permits to trust a GLPI server certificate without the need of deploying a certificate:
you can first enable one time the ‘no-ssl-check’ option on one agent to find the related ssl fingerprint reported in agent log,
then you can set the discovered value for all your agents and disable ‘no-ssl-check’ on the first one.
the windows MSI packaging is now using Perl 5.36.0 and includes some fixes and improvements:
as it was wrongly creating firewall rules, this is fixed and wrong rules are removed,
few libraries was missing if you wanted to use SNMPv3 authentication during network discovery or inventory,
the installer was failing to create the windows task when you wanted to use windows task scheduling,
few configurations was not possible during silent installation.
the MacOSX packages has been upgraded to use Perl 5.36.0, OpenSSL 3.0.3 & zlib 1.2.12 and the installation on APFS filesystem has also been fixed.
for linux packaging, we have also few big improvements:
AppImage support for older linux like CentOS 7,
AppImage uninstallation process has been improved,
Snap packaging has been upgraded to use Perl 5.36.0,
perl linux installer has been enhanced to support installation on openSUSE.
For inventory task, we integrated:
a patch from the community which can fix monitor inventory on linux,
an Oracle database inventory support update,
an update to avoid false positive antivirus alert during software inventory on windows,
a fix on JSON format support to avoid wrongly encoded strings on macosx,
a fix against a JSON validation error while monitor serial is an integer,
a fix on generated partial inventory as the ‘partial’ property was missing,
an update for additional-content option support while using JSON format.
RemoteInventory task has been improved so remote ssh inventory of linux/unix platforms can fallback on ssh command calls when libssh2 is not available.
Netdiscovery and NetInventory tasks now includes a module from the community which enhances DefensePro support.
“Now we can manage our own problems, providing for our customer the forms created on the platform and help them to fix their problems, by local or by remote access”.
GLPI SUCCESS CASES
Drogarias Retiro
About the company
Pharmaceutical. Founded in 1974, Drogaria Retiro is a chain of pharmacies which has been serving with care and dedication for 47 years.
Today they have more than 60 stores and more than 1,000 employees, being in the commerce area one of the companies that most employs in the South Fluminense region.
Challenge
Get the control of the tickets.
Requirments
We use GLPI Helpdesk to handle with the tickets of our customers, and schedule maintenance on their sites.
GLPI solution
Italo Menezes, IT Analyst: “Now we can manage our own problems, providing for our customer the forms created on the platform and help them to fix their problems, by local or by remote access.
My GLPI experience has been so much productive, associated with the plugins Formcreator and Behavior, we can now have a better view of the issues in our Company. With some time spend in the knowledge of Plugins work, we customize totally for our use”.
This version is compatible with GLPI 10 only, and is a Release candidate version. Use it only for testing and bug report purpose.
Starting from this version, tags format will change. Previous tags were prefixed with v. This prefix is dropped. See #2376
Upgrade from a previous 2.13.0-Alpha or Beta version ⚠️ The following steps are necessary only when upgrading from a previous development, alpha or beta version. When upgrading from a old release to 2.13.0, you shall not do them.
1 removing the mini_dashboard for Formcreator (counters) The counters has been changed. You must delete the mini dashboard installed by previous alpha versions of Formcreator. If you’re upgrading from 2.13.0-beta.1 you may skip this step.
Execute the following SQL requests:
DELETE FROM glpi_dashboards_items WHERE dashboards_dashboards_id = ( SELECT id FROM glpi_dashboards_dashboards WHERE key=‘plugin_formcreator_issue_counters’ );
DELETE FROM glpi_dashboards_dashboards WHERE key=‘plugin_formcreator_issue_counters’; then proceed with the next step (forced upgrade). It will build the new version of the mini dashboard. If you miss this step, the previous dashboard will show empty cards. see #2727
2 Forced upgrade If you want to upgrade from an older 2.13.0-alpha or 2.13.0-beta version, you should do a forced upgtrade from command line. It will run the upgtrade from the previous minor version (2.12.0) to the current version, update the possible differences of schema in the tables of the plugin. Run the following in CLI : php bin/console glpi:plugin:install formcreator -u glpi -f -p force-upgrade This command exists specifically for development purpose or for active testers.
Rename of anonymous forms to public forms Some users of the plugin have been confused with the anonymous forms. Anonymous form are not a way to create tickets preventing technicians to identify requesters or authors. They are accessible by users without being logged in GLPI. Because of this confusion, anonymous forms are renamed public forms.
Help / Contribution needed Locales updates: Some languages don’t have maintainer, or are late (many untranslated content). Please contribute on Transifex. documentation review and updates
We are very proud to announce that our partner ITSM Factory has become Platinum! At Teclib we are looking forward to continue the collaboration on this new level.
ITSM Factory supports customers in their process of continuous improvement of the quality of their services while respecting their business and regulatory constraints.
ITSM Factory’s experts master the standards of good practice such as ITIL and the standards applicable to IT (ISO 20000, 27001, etc.). They manage to simplify daily management of customer’s IT services.
Our GLPI consultants offer support at each stage of the project; from auditing to training users while going through integration and specific development.
We are excited that GLPI ITSM solution is becoming more and more represented all over the world and GLPI Network (our support offer for on-premises – get your IT Infrastructure secured) subscription service will be available for more customers through our new partners.
Our large partnership network is always open for new collaborations. If you are interested in representing one of our products in your country, get in touch with us: https://glpi-project.org/contact/
Being a partner means:
Having an a direct access to the Teclib´s tech expertise;
Get special discounts;
Access official support,
Many other tools which will help you to gain more customers and increase reputation on the market by adding open source ITSM to your portfolio.
GLPI Netwok Cloud is a world-loved open source IT service management software offered as a SaaS. With GLPI on Cloud you can:
Plan and manage Helpdesk (tickets/problems/changes),
Track assets with native inventory;
Keep control of your financies and projects;
Manage users and Knowldge Base; etc.
Our hosting service allows you to use the application anywhere: at any time and from any device.
In addition to that, it is hosted by Europe’s leading web hosting providers (OVH), so your data is safe and backed up every day.
New version updates are also included, upon request in your customer area.
Technical support can be requested through a dedicated tool in your customer area.
What can you do on GLPI Network Cloud?
Manage Helpdesk: Organize your support easily with GLPI: manage incidents/requests, create forms, define SLAs, deliver the best experience to your customers.
Run inventory: Manage hardware, software and data centers. Link Asset inventory to Helpdesk and get 360° control of your IT and business infrastructure.
Manage users: Take control over users: define entities, create profiles and restrict access to information. With GLPI rules you can define roles of each member of directory and setup workflow for Helpdesk and Inventory.
Track finances: Discover the full potential of GLPI: track your expenses, contracts and suppliers, create new inventory objects, manage user database and make reports. Check the complete features description to learn more.
Customize GLPI: Explore setup features to add logo of your brans, select the palette of colors and configure plugins. In this section you can also manage SLAs and notifications.
For who is our offer?
GLPI Netwotk Cloud is a perfect solution for the company of any size. Unlike many ITSM software programs on the market, we do not sell the modules separately, so you can enjoy all-in-one platform for single price.
GLPI is a popular choice among retail, public, educational, manufacturing and services companies in all over the world.
On top of everuthing we offer the complete freedom in terms of payment: you can manage the number of users any time (decrease or increase) with no permanency obligation.
What services are included?
In the version on cLoud, backups, updates, free data migration, support L.3 unlimited are all included, unlike GLPI on-premise.
Here you can check the differences between Public Cloud, Private Basic and Private Advanced.
What plugins are included?
One of the advantages of GLPI Network Cloud is that you can try & use all exclusive plugins. Check the full list on the website: https://www.glpi-network.cloud/
Ready to try? Learn how to create an account
To create an account and enjoy GLPI Network Cloud:
