This version comes with a lot of changes and enhancements for the MSI packaging for Windows:
first of all, a huge work has been done to provide the windows installer with Perl 5.38.2 using latest essential libraries version for more security, like OpenSSL 3.2.1 and libssh2 1.11.0.
the patch for the CVE-2024-28240 security advisory is now based on a DLL library.
only 64 bits packaging for windows is provided.
the “Typical” installation no more includes Deploy and Collect tasks.
7-zip provided command is now v23.01 version.
GLPI-AgentMonitor tool is provided in 1.3.0 version and now the installer supports AGENTMONITOR_NEWTICKET_URLto configure the GLPI url for the open new ticket option.
On the inventory side, a new feature will help you reduce the carbon footprint of your GLPI system: the full inventory postpone
now, by default, and if your server is a GLPI 10, GLPI Agent can decide to postpone the upload of a full inventory up to 14 times, so about 2 weeks using the default configuration. Until then, the agent will upload partial inventories only containing detected changes.
full-inventory-postpone is a new configuration parameter which value is 14 by default. Setting it to 0, it is still possible to disable this feature coming back to previous normal running.
glpi-agent script is also supporting --full option to temporary disable the feature.
The MacOSX package only activates Inventory task by default now. You’ll have to explicitly activate any other tasks you need in a dedicated configuration file.
A lot of fixes and enhancement have also been included. Inventory, RemoteInventory, NetworkDiscovery et NetInventory tasks, but also Proxy and ToolBox plugins, are concerned. We encourage you to check all changes details in the official online Changelog available here: https://github.com/glpi-project/glpi-agent/blob/1.8/Changes
We encourage you to update your agents as soon as possible to take advantage of these improvements.
Join us on our social networks so you don’t miss any of our news!
This version essentially fixes a regression introduced in the MSI packaging for Windows in the 1.7.2 version:
the LOCAL parameter was forced to the agent installation folder when not used. After that, local inventory was also generated even if this wasn’t required. This LOCAL configuration will be removed during this update.
CVE-2024-28241 patch was modified to not be enabled if the installation folder and (if used) the LOCAL parameter remain under the default system folder as there’s not security issue in that case.
These updates only impact Windows installation performed with MSI packaging.
We invite you to upgrade your agents on Windows as soon as possible.
You don’t need to upgrade to 1.7.3 GLPI Agents that were not installed on Windows and which are at least in 1.7 version.
Stay connected! Follow us on our social media platforms!
This version specifically fixes 2 critical security issues related to MSI packaging on windows:
CVE-2024-28240: A local user could modify the GLPI Agent configuration to gain higher privileges.
CVE-2024-28241: A local user could modify the GLPI-Agent installation to gain higher privileges, but only when GLPI Agent is not installed in the default installation folder.
These security issues impact all Windows installation performed with MSI packaging.
We encourage you to upgrade all these agents as soon as possible!
Anyway you don’t need to upgrade to 1.7.2 after updating to 1.7.1 if your GLPI Agent was not installed on windows with the MSI package.
The 1.7.1 version specifically fixes SSL connections problems introduced with 1.7 version update for windows and MacOSX agents but only when you’re using windows keystore or macosx keychain to publish the ssl chain validation for your GLPI server.
You don’t need to update to 1.7.1 after updating to 1.7 if you’re not in that case.
GLPI Agent 1.7 has been released. You’re encouraged to upgrade your GLPI agents or migrate if you’re still using FusionInventory agents. You can download it on the GLPI Agent github project: https://github.com/glpi-project/glpi-agent/releases/tag/1.7 Here...
We use cookies to ensure that we give you the best experience on our website. If you continue to use this site we will assume that you are happy with it.Ok
