New silver partner: INTEGRITY

We are happy to announce our new Silver partner in Venezuela – INTEGRITY.

INTEGRITY is an agile company focused on managed services and open-source solutions, founded in 2003, with operations in Ecuador since 2019 and in the process of expanding our market, developing projects with business allies in the continent, currently in Mexico and the United States.

Aware that technology is rapidly evolving and becoming more complex every day, we strive to simplify it for easy adoption and use by all our clients, regardless of their size.

With a consultative sales strategy, we establish a long-term relationship with our client portfolio, taking care of them and guaranteeing cost-effective solutions that add value to their businesses, valuing their time, money, and resources in an environment of respect and confidentiality.

Our portfolio includes:

1. Unified Communications focused on Call Centers integrated with external systems such as CRM, in the cloud or local implementation, as well as Enterprise IP Telephony based on Asterisk and other proprietary solutions such as NICE CXone.

2. Enterprise Technology Platforms are primarily based on open-source code, which offer to maximize investment in technology tools while reducing operational risk. GLPI stands out for Process Management not only for IT but for all purposes, among other open-source solutions for network monitoring, routing, and firewall.

3. Field Service Management. We developed our own Android application integrated with GLPI that provides mobility to field agents for service companies, with functionalities such as geolocation, workflow, tasks, and integration with external systems via Web Services.

4. With our extensive experience in Call Centers, we incorporate digital channel solutions to meet omnichannel customer engagement needs.

Our goal is to accelerate the digital transformation of companies through our Consultancy services, with methodologies and best IT practices that we apply in our Managed Support and Services to fully or partially manage their IT infrastructure to ensure availability and increase their operational efficiency, accompanied by our Training Services.

Websitehttps://integrity.net.ve

We are excited that GLPI ITSM solution is becoming more and more represented all over the world and GLPI Network (our support offer for on-premises – get your IT Infrastructure secured) subscription service will be available for more customers through our new partners.

Our large partnership network is always open for new collaborations. If you are interested in representing one of our products in your country, get in touch with us: https://glpi-project.org/contact_us/

Being a partner means:

  • Having an a direct access to the Teclib´s tech expertise;
  • Get special discounts;
  • Access official support,
  • Many other tools which will help you to gain more customers and increase reputation on the market by adding open source ITSM to your portfolio.

Discover all benefits of being a partner here: https://glpi-project.org/partners/

GLPI 10.0.7 is available!

New version GLPI 10.0.7: A new GLPI version is available.

This release fixes several security issues that have been recently discovered. Update is recommended!

You can download the GLPI 10.0.7 archive on GitHub.
We still maintain maintain the 9.5 branch for security fixes and we also release a new version for it: GLPI 9.5.13 archive

You will find below the list of security issues fixed in this bugfixes version:

  • SQL injection and Stored XSS via inventory agent request (CVE-2023-28849).
  • Account takeover by authenticated user (CVE-2023-28632).
  • SQL injection through dynamic reports (CVE-2023-28838).
  • Stored XSS through dashboard administration (CVE-2023-28852).
  • Stored XSS on external links (CVE-2023-28636).
  • Reflected XSS in search pages (CVE-2023-28639).
  • Privilege Escalation from technician to super-admin (CVE-2023-28634).
  • Blind Server-Side Request Forgery (SSRF) in RSS feeds (CVE-2023-28633).

Also, here is a short list of main changes done in this version:

  • Optional GLPI router to be able to use a safer web server root directory.
  • Support of SMTP OAuth authentication.
  • Improved inventory file upload feature.
  • Many fixes and improvements on native inventory.
  • Some bugs on PHP 8.2.
  • Caching issues on entities.
  • Boolean FullText operator not working on knowledge base search.
  • Unexpected search results when using negative condition on ticket actors.
  • Issues with LDAP filters/DN.
  • Unexpected results when searching on knowledge base categories.

The full changelog is available for more details.

We would like to thank all people who contributed to this new version and all those who contributes regularly to the GLPI project!

Download GLPI now: https://glpi-project.org/downloads/

Regards.

New Silver Partner : OPEN COMPUTACIÓN S.A.

We are happy to announce our new Silver partner in Argentina – Open Computación S.A.

 Open Computación S.A. is a company with more than 20 years in the IT field, dedicated to generating value to its customers through its services such as: server administration, hosting, helpdesk, virtualization, technical service.

 It also offers management services through tools such as GLPI, being able to adapt it to the needs of its customers.

Website: https://www.opensa.com.ar/

We are excited that GLPI ITSM solution is becoming more and more represented all over the world and GLPI Network (our support offer for on-premises – get your IT Infrastructure secured) subscription service will be available for more customers through our new partners.

Our large partnership network is always open for new collaborations. If you are interested in representing one of our products in your country, get in touch with us: https://glpi-project.org/contact

Being a partner means:

  • Having an a direct access to the Teclib´s tech expertise;
  • Get special discounts;
  • Access official support,
  • Many other tools which will help you to gain more customers and increase reputation on the market by adding open source ITSM to your portfolio.
  • Discover all benefits of being a partner here: https://glpi-project.org/partners/

New Formcreator 2.13.4 is available!

This version is compatible with GLPI 10.0.

Upgrade from 2.13.0 or later

A database sanity check is done before running the upgrade. If the tables of the plugin have a difference with the expected schema the upgrade will fail with a message similar to the following:

The database schema is not consistent with the installed Formcreator 2.13.0. 
To see the logs enable the plugin and run the command bin/console glpi:database:check_schema_integrity -p formcreator

It is required to fix the database, using the diff produced by the CLI command given in the message. Once done, try again to upgrade.

ℹ️ If you know what you are doing you may bypass the sanity check from CLI with the following command.

bin/console glpi:plugin:install formcreator -f -p skip-db-check

Bug Fixes

  • handle undefined setting for service catalog homepage (411ae3597)
  • typo in french locale (f61ded17a)
  • abstractitiltarget: multiple tag questions set but not displayed in designer (90f2a95d8)
  • checkboxesfield,multiselectfield: default value not displayed (8f36ab726)
  • composite: ignore link to non existing ticket (8502d4b16)
  • condition: allow longer texts (eecdf8a2a)
  • condition: display of tested question shows wrong item (5d34da8b4)
  • condition: width of question dropdown (ce0389efd)
  • dropdownfield: empty SQL IN statement when restricted tickets rights (5c5244a85)
  • form: image upload handling in header field (5dc66a5ef)
  • formanswer: default search filter hides legit access (2dc9f8e3f)
  • formanswer: malformed search option (5339b7912)
  • formanswer: missing newline between sections of fullform tag (61122bc93)
  • formanswer: temporary disable debug mode (e9e8da484)
  • formanswer, textfield, textareafield: escaping (3e0666d4d)
  • glpiselectfield: cannot set empty value by default for entity question (fe2130bbe)
  • glpiselectfield: restore entity restriction for users (e525b3a82)
  • helpdesk: better handling of users that can’t see tickets (a93f03126)
  • install: add empty schema for new version (817a9ec7e)
  • install: resync not needed in upgrade to 2.13.4 (d66a12017)
  • install: typo in method name (eac5d77ac)
  • issue: follow entity change on ticket transfer (434bd3572)
  • issues: Tooltip consistency with core (c45d21550)
  • question: subtype plural and appliance in bad group (1f780370a)
  • tagfield: php warning (cc4b673a8)
  • targetticket: allow more itemtypes to associated elements (#3155) (cee504c24)
  • textfield: useless HTML entity encode (c3d03b51e)

Features

  • drop support for GLPI 10.1 (a99a8bcb2)
  • dropdownfield: always show ticket id (0190adac9)
  • issue: access tickets from service catalog (a6b4f19d0)
  • question: add support for database sub itemtype (45126012d)
  • wizard: selectable home page in service catalog (95103fe54)

New version 10.0.6 of GLPI!

A new GLPI version is available.

This release fixes several security issues that have been recently discovered. Update is recommended!

You can download the GLPI 10.0.6 archive on GitHub.
We still maintain maintain the 9.5 branch for security fixes and we also release a new version for it: GLPI 9.5.12 archive

You will find below the list of security issues fixed in this bugfixes version:

  • Unauthorized access to inventory files (CVE-2023-22500)
  • XSS on browse views (CVE-2023-22722)
  • XSS on external links (CVE-2023-22725)
  • XSS in RSS Description Link (CVE-2023-22724)
  • Unauthorized access to data export (CVE-2023-23610)
  • Stored XSS inside Standard Interface Help Link href attribute (CVE-2022-41941)

Also, here is a short list of main changes done in this version:

  • Unmanaged devices can be handled like a real asset.
  • Handle more actions for stale inventory agents.
  • Added new dictionnary rules for OS.
  • Removed glpi: prefix on console commands.
  • PHP 8.2 support.
  • Many fixes and improvements on native inventory.
  • Reservation display on self-service profile.
  • Mail collector issues with emails sent from Outlook.
  • Dashboard issues on “All” tab.
  • Ticket input is restored when submitted form is not complete.
  • Notification was not sent when ticket status was set to “pending”.

The full changelog is available for more details.

We would like to thank all people who contributed to this new version and all those who contributes regularly to the GLPI project!

Regards.