FORMCREATOR 2.10.3

by | Oct 16, 2020 | Announcements, Blog, Formcreator

Formcreator plugin for GLPI is a plugin which allows to create custom forms of easy access and also one or more tickets or changes when the form is filled. Today we are happy to announce the release of Formcreator plugin version 2.10.3.

Want to know more about how it works? Find the answer in our blog post.

Bug Fixes

  • description: simple text may render HTML tags
  • dropdownfield: SQL error to find curent user’s groups
  • dropdownfield: bad entity restriction
  • form: bad path to css
  • form: bad sharing URL
  • glpiselectfield: missing caps un classnames

You can consult the changelog here: click

Features

  • use font awesome for all icons
  • descriptionfield: allow description field in targets
  • question,section: tip on conditions count

Performance Improvements

  • condition: conditions evaluation

Download: click

Autenticación Oauth para mail receivers

by | Oct 13, 2020 | Blog, Noticias

Hace un tiempo, Microsoft y Google anunciaron que cerrarían las conexiones básicas para los buzones de correo IMAP en sus servicios Office 365 y Google suite:

La crisis actual ha hecho que pospongan los plazos de rescisión hasta 2021, pero a partir de octubre de 2020, en particular para Azure / Office, las nuevas cuentas tendrán la autenticación “básica” desactivada por defecto (será posible volver a habilitarla hasta el año que viene).

Para superar esta próxima eol, desarrollamos un mini plugin disponible para la comunidad GLPI, que permite crear una conexión oauth a sus servicios.

Le permite declarar un cliente oauth de una lista de proveedores y luego usar este cliente en sus recolectores de correo:

mail receiver with oauth client

Ahora puede descargar este plugin a través del mercado integrado de GLPI 9.5 o desde el catálogo de complementos.

Si desea obtener soporte oficial y desea proteger su instancia GLPI, no dude en contactarnos mediante este formulario o comprar en línea aquí Servicios .

Oauth authentication for mail receivers

by | Oct 13, 2020 | Blog, GLPI releases, New plugins, News

A while ago Microsoft and Google announced they would close basic connections for IMAP mailboxes on their services Office 365 and Google suite:

The current crisis has made them to postpone the deadlines of termination to 2021, but starting from October 2020, in particular for Azure / Office, new accounts will have the “basic” authentication disabled by default (it will be possible to re-enable it until next year).

To overcome this upcoming eol, we developed a mini plugin available for GLPI community, which allows to create an oauth connection to their services.

It lets you to declare an oauth client from a list of suppliers and then use this client in your mail collectors:

mail receiver with oauth client

You can now download this plugin via integrated marketplace of GLPI 9.5 or from the plugins catalog.

If you wish to obtain official support and want to secure your GLPI instance, don’t hesitate to contact us using this form  or purchase online here: Services.

GLPI 9.5.2

by | Oct 7, 2020 | Blog, GLPI releases, News

After several weeks, Teclib’ is happy to announce the release of GLPI 9.5.2.

This release fixes several security issues that has been recently discovered. Update is strongly recommended!

You can download the GLPI 9.5.2 archive on GitHub.

Here is the list of security flaws detected and fixed in this version:

  • SQL injection with a query parameter of user form (CVE-2020-15176)
  • Removal of .htaccess file in the files folder via a plugin endpoint (CVE-2020-15175)
  • Leakage issue with knowledge base (CVE-2020-15217)
  • Stored XSS in install script (CVE-2020-15177)
  • Minor SQL Injection in Search API (CVE-2020-15226)

Note, some are present since a long time (0.68).

We also fixed a lot of issues, here are important ones:

  • mailgates issues:
    • encoding errors
    • missing images in some tickets
    • exceptions for some particular messages
  • a small notice (listTables) was visible while updating to 9.5.1.
  • in some rare cases, the encryption process of passwords could fail
  • For the dashboards:
    • fix user preferences
    • fix overlap of mini dashboard above tickets list

And we worked on improving the dashboards:

  • new summary widget
  • new articles widget
  • display labels on point and bar (with a new available option)
  • cards have now a minimum size
  • we added personnal filters. Toggle edit mode, and add filters on top of dashboards.

The full changelog is available for more details.

We would like to thank all people who contributed to this new version and all those who contributes regularly to the GLPI project!

Regards.