GLPI Agent 1.7.2 available!

GLPI Agent 1.7.2 has been released!

GLPI Agent Release 1.7.2

You can download it on the GLPI Agent github project: https://github.com/glpi-project/glpi-agent/releases/tag/1.7.2

This version specifically fixes 2 critical security issues related to MSI packaging on windows:

  • CVE-2024-28240: A local user could modify the GLPI Agent configuration to gain higher privileges.
  • CVE-2024-28241: A local user could modify the GLPI-Agent installation to gain higher privileges, but only when GLPI Agent is not installed in the default installation folder.

These security issues impact all Windows installation performed with MSI packaging.

We encourage you to upgrade all these agents as soon as possible!

Anyway you don’t need to upgrade to 1.7.2 after updating to 1.7.1 if your GLPI Agent was not installed on windows with the MSI package.

New silver Partner in Colombia: Systesol SAS

Congratulations ! We are happy to announce our new Silver GLPI Network partner in Colombia: Systesol SAS.

SYSTESOL – SYSTEMS & TECHNOLOGY SOLUTIONS SAS, is a company that integrates technological services and solutions; We offer solutions that adapt to the needs of our clients. Supply, administration and configuration of technological infrastructure.

Website: https://bit.ly/3TCVsSk

We are excited that GLPI ITSM solution is becoming more and more represented all over the world and GLPI Network (our support offer for on-premises – get your IT Infrastructure secured) subscription service will be available for more customers through our new partners.

Our large partnership network is always open for new collaborations. If you are interested in representing one of our products in your country, get in touch with us: https://glpi-project.org/contact_us/

Being a partner means:

  • Having an a direct access to the Teclib´s tech expertise;
  • Get special discounts;
  • Access official support,
  • Many other tools which will help you to gain more customers and increase reputation on the market by adding open source ITSM to your portfolio.

Discover all benefits of being a partner here: https://glpi-project.org/partners/

GLPI Release 10.0.14

A new GLPI version is available.

Due to a few regressions in the last (10.0.13), an early release is available.

You can download the GLPI 10.0.14 archive on GitHub.

Here is the list of corrections made in this version:

  • Fix assign field when suppliers assign is available
  • Switching entities issues

Regards.

GLPI Release 10.0.13

A new GLPI version is available!

This release fixes a few security issues that have been recently discovered. Update is recommended!

You can download the GLPI 10.0.13 archive on GitHub.

You will find below the list of security issues fixed in this bugfixes version:

  • SQL Injection in through the search engine (CVE-2024-27096)
  • Blind SSRF using Arbitrary Object Instantiation (CVE-2024-27098)
  • Stored XSS in dashboards (CVE-2024-27104)
  • Reflected XSS in debug mode (CVE-2024-27914)
  • Sensitive fields access through dropdowns (CVE-2024-27930)
  • Users emails enumeration (CVE-2024-27937)

Also, here is a short list of main changes done in this version:

  • Error when creating a Ticket with SLA/OLA.
  • Weekly recurrent reservations creation does not work.

The full changelog is available for more details.

We would like to thank all people who contributed to this new version and all those who contributes regularly to the GLPI project!

Regards.

Teclib’ is proud to support and serve as the official sponsor for Christian during the Paris-Nice Challenge!

Teclib’​ keeps supporting Christian. This time, in the “Challenge Paris – Nice” 🚴‍♂️ 
After only some days since the last race, our associate Christian Osorio Bernal, member of the Club Sardines Triathlon Marseille, is embarking himself, supported by Teclib’​, into a new goal: “Challenge Paris – Nice“.

We wanted to know how Christian was feeling previous to the race and he shared with us:

“A week after running the Grande-Motte Half-Marathon, here we are with Teclib on the eve of the Paris – Nice Challenge. Race which resumes the last stage of the “Race to the Sun” starting in cold conditions in Paris and ending with warmer temperatures in Nice. However, this year, cold, rain and snow are on the horizon! Another work of resilience, resistance and determination in sight!

I’m looking forward to being able to do a long outing with a lot of elevation gain, certainly not like the EmbrunMan, but the 140km and the 2800D+ will be felt 7 days after the Half-Marathon! This will allow me to take stock of the state of fitness at 5 months of the Alpe d’Huez triathlon!

So, despite the almost certain absence of sun, let’s keep smiling to warm the heart and enjoy the legs with unique landscapes and astonishing views.

Paris – Nice, Teclib’ and I are happy to be part of this challenge this Saturday March 9, See you tomorrow 😀”

Here are some flashback images from the race!

Today, March 11th, Christian has completed his race, and we are eagerly awaiting his initial impressions of this significant challenge! We were thrilled to accompany and support him throughout this journey, which held great importance for him.

Here’s what he shares with us:

“Rainy race… happy race… that was the attitude to adopt on Saturday, March 9th, at the 2024 Paris-Nice Challenge. Cold, rain, and slippery ground are never conducive conditions for achieving top results, but they do allow for a work of resilience, resistance, and determination. Essential qualities for the major goals of this year in July and September!

Good vibes and self-deprecation quickly took over, turning this course into a real challenge!

At the finish line, there was a taste of victory over oneself.

The body sends negative signals to stop being in uncomfortable conditions, but the mind only thinks about reaching the finish line. The landscapes and villages crossed were splendid… La Turbie, Col d’Eze, the great corniches, Villefranche sur Mer…

The fitness level was there, promising for the coming months as we begin triathlon and marathon preparations. I have fond memories of the last two climbs of this Paris-Nice, where a 14% slope for 2km almost made me put my foot down, especially the Col de Quatre Chemins segment!


See you soon for the next races with Teclib’ – the official editor of GLPI software.

Christian has arrived in Nice!

Keep track of the race calendar and remember to support Christian by following us on social media!

Unlocking the Power of Impact Analysis with GLPI

Every service change or incident may cause disruptions in organizations, and understanding the ripple effects of these possibilities is crucial for maintaining stability, efficiency, and continuity.

Impact analysis emerges as a pivotal process, enabling organizations to foresee and mitigate potential interferences. A comprehensive ITSM tool with the possibility to visualize and manage effectively the impact analysis is key for a compliance team.

Understanding Impact Analysis

Impact analysis is a critical ITSM process aimed at identifying the potential consequences of proposed changes or unforeseen incidents on business operations and IT services. It involves assessing the severity, extent, and repercussions of these changes or incidents, helping organizations prioritize actions and allocate resources efficiently. By conducting thorough impact analysis, businesses can ensure that their IT infrastructure remains resilient, responsive, and aligned with their strategic objectives.

GLPI as an open-source software tool designed for inventory management, issue tracking, and comprehensive Information Technology Service Management, provides a robust platform to manage assets from small to huge companies, including hardware, software, networking equipment, and devices of all kinds, facilitating the correlation between incidents, problems and change management processes.

Leveraging GLPI for Impact Analysis

GLPI’s asset management functionality serves as a foundation for effective impact analysis. After a detailed inventory of IT and non-IT assets is performed, GLPI allows organizations to map out the interdependencies between assets.

This visibility is important and crucial, not just to understand how far an incident can go, but also to assess how a service change, or problem can affect the whole company and services, for example.

Using GLPI, companies are able to:

  • Collect, comprehend maintain the asset inventory;
  • Map out their interdependency and;
  • Keep historical data on asset performance and incidents.

The incident management capabilities of GLPI enable organizations to log, track, and manage incidents efficiently. After the inventory collecting and data updating, analysts may create the dependencies between the assets and make sure everyone knows which assets may be affected when an incident occurs to one of these assets.

Furthermore, when discussing incident management and its impact on environments, IT teams should never forget about changes that usually need to be made in networking and servers. Every system that needs a new feature, workflow or upgrade, for example, can bring positive or negative impact for the running state of a company, so impact analysis is not just useful for incidents. But also for change management.

Change management is also a crucial process for planning and implementing changes systematically. Any company that aims to ensure that changes are being made with a clear understanding of risks and advantages must have documentation of proposed changes, scopes, potential impacts, checklists, and roll-back plans.

GLPI Asset management and Change Management modules, alongside Impact Analysis feature may deliver tools for small or big teams to create committees and discuss actions with clear information about expected positive and negative impacts

Imagine a scenario where the Rack 1 is down due to any reason — let’s say the uplink from Switch A3 and Rack 1 is down.

Any technical analyst knowing the team is working to make sure this uplink is reestablished as soon as possible may have the information that any user reporting incidents directed to any of the services hosted on SRV-GLPI will have the same ‘root cause’ — Rack 1 and Switch A3 uplink down.

  • The red arrow, by the perspective of the Rack 1, tells the team that any issue or change — yes, changes too — may impact SRV-GLPI;
  • By the perspective of the Rack 1, tells the team that any issue or change on any of the assets connected to it through a blue arrow may impact Rack 1 and the services that depends on the Rack 1;
  • The black arrows mean that, by the perspective of the Rack 1, none of those assets should suffer or cause impact for Rack 1 or its services.

And when I talk about perspectives, look at the image above:

When we look at the same topology from the perspective of the Router EDGE-51, any incident or change on any of the Routers will have impact at the whole network. But not just the network, but also on the Router EDGE-51 (slave). These two are dependent on each other. It does not mean that if one fails, the other will fail too.

The purple arrows mean that they are dependent on each other and that they would both be affected if one of them were to encounter a problem. They are therefore both dependent and impacted.

You can find more documentation here.

Best Practices for Impact Analysis with GLPI

To maximize the benefits of GLPI for impact analysis, consider the following best practices:

  1. Maintain an Up-to-Date Inventory: Ensure that all assets are accurately cataloged in GLPI, with up-to-date information on their configurations, dependencies, and historical performance.
  2. Integrate ITSM Processes: Leverage GLPI’s ITSM capabilities to manage incidents, problems, and changes comprehensively. This integration provides a holistic view of the IT environment and its dynamics.
  3. Customize According to Needs: Tailor GLPI’s settings and workflows to fit your organization’s specific requirements for impact analysis. Custom fields, severity levels, and reports can enhance the relevance and effectiveness of the tool.
  4. Train Your Team: Ensure that your IT and business teams are well-versed in using GLPI for impact analysis. Regular training sessions can help maximize the tool’s utility and ensure effective adoption.

Impact analysis is essential for navigating the complexities of modern environments. By leveraging GLPI, organizations can gain a comprehensive understanding of the potential impacts of changes and incidents on their operations. This insight tool enables informed decision-making, efficient resource allocation, and enhanced service resilience. As GLPI continues to evolve, its role in facilitating it.

Resources

Impact Analysis on FAQ