New version GLPI 10.0.10

A new GLPI version is available.

This release fixes a critical security issue that have been recently discovered. Update is strongly recommended!

You can download the GLPI 10.0.10 archive on GitHub.

You will find below the list of security issues fixed in this bugfixes version:

  • Unallowed PHP script execution (CVE-2023-42802).
  • Account takeover via SQL Injection in UI layout preferences (CVE-2023-41320).
  • Account takeover via Kanban feature (CVE-2023-41326).
  • Account takeover through API (CVE-2023-41324).
  • File deletion through document upload process (CVE-2023-42462).
  • Sensitive fields enumeration through API (CVE-2023-41321).
  • Privilege Escalation from technician to super-admin (CVE-2023-41322).
  • Users login enumeration by unauthenticated user (CVE-2023-41323).
  • Phishing through a login page malicious URL (CVE-2023-41888).
  • SQL injection in ITIL actors (CVE-2023-42461).

Also, here is a short list of main changes done in this version:

  • PHP 8.3 and MySQL 8.1 support.
  • Enable usage of images in rich text of followups/tasks/solution templates.
  • Improve ticket timeline rendering performances.
  • Fix issues with usage of LDAP bind options.
  • Fix some issues on SLA/OLA escalation levels computation.
  • Fix some issues on search on numeric and dates fields.

The full changelog is available for more details.

Download GLPI 10.0.10

We would like to thank all people who contributed to this new version and all those who contributes regularly to the GLPI project!

Regards.

Success story: Ddosoft

Ddosoft

Meet Ali Burak, the co-founder of DDOSOFT, a dynamic software development company. Ali’s journey with GLPI began a couple of years ago when his team was facing the challenge of expensive agents in their ticket management software, Jira. Seeking an open source solution, Ali discovered GLPI while browsing the internet:

ddosoft success story

Ali’s Journey with GLPI: Streamlining Business with Open Source

It was a couple of years ago. I was working with the Jira software and the agents were getting expensive, so we were looking for an open source solution. I came across GLPI on the internet. I think the first version I tried was 9.3.”

At DDOSOFT, they opted to use GLPI on-premise, managing it through their own virtual data center where they’ve set up Linux and Windows servers. For their business, Asset Management and Assistance features proved to be crucial:

“When I was looking for a ticket management software, I saw GLPI that apart from being a ticket management software could also take care of the assets and assistance. So I said “let’s give it a try”. And, I have installed it and am still using it. We have seen the effects both in Asset management and Assistance. We are now aware of how many devices we actually have in real numbers, and can monitor if something is installed on the computer or if any assets appear. And for Assistance, we have lots of phone calls and now we have control over them. We have a history of what we have done and a knowledge base that we have created to use it if we came across similar issues”.

Ali explains that initially, they were seeking a ticket management software, but GLPI’s versatility caught their attention. Not only could it handle tickets efficiently, but it also provided a robust system for asset management and assistance. Intrigued, they decided to give it a try, and the decision paid off. With GLPI, they gained better visibility into their actual device count and could easily track software installations or changes in assets.

 

Assistance also saw a major boost. DDOSOFT now had a structured approach to handling phone calls and queries. With a well-organized history of actions and a growing knowledge base, they efficiently tackled similar issues that cropped up over time.

 

One of their favorite GLPI plugins is the inventory plugin, particularly useful due to their extensive inventory of devices like tablets, computers, and networking equipment. The plugin helps them maintain a clear picture of software installations and device counts across their infrastructure.

 

When asked about the best GLPI feature, Ali highlights Assistance and Helpdesk, citing their ticket and document management capabilities as game-changers. He appreciates the user-friendly interface of the software’s newer version, emphasizing its enhanced responsiveness and ease of use.

 

For Ali, the open source nature of GLPI and the strong community support it enjoys are crucial factors. In an industry where pricing matters, having a trustworthy open source community backing the software is invaluable. Ali and his team were able to leverage their technical expertise to install and use GLPI on-premise with confidence:

“Yes, because for companies price is a very important thing. But the most important thing is the open source community. We can trust it. Actually, in commercial versions of some softwares I cannot trust. We had the technical knowledge so we could easily install it and use it on premise”.

Summing up his experience with GLPI, Ali underscores its substantial impact on their business organization. From version nine to the present, GLPI’s Assistant and Asset Management modules have played a pivotal role in helping them maintain order and stay on top of their assets. In Ali’s own words, GLPI has significantly contributed to the improvement of their business operations.

                      How can you try GLPI?

If you have not tried GLPI yet, you can start a free 45 day trial on GLPI Network Cloud (no credit card needed!): https://glpi-network.cloud/ 

If you want to download GLPI on-premise and need assistance, our partners-integrators can support you (you will need to have a valid GLPI Network Subscription). 

Do you use GLPI and want to share your experience?

We are proud to state that our solution is used by millions of people worldwide. If you are one of them and you want to contribute the promotion, we invite you to leave your contact details.

We will be delighted to hear your story!

Formcreator 2.13.7

This version is compatible with GLPI 10.0.

 

⚠️ This release requires some bugfixes in GLPI to work properly. These bugfixes are included in GLPI 10.0.9 or later. Please, ensure your GLPI is up to date to prevent useless bug reports.

 

Bug Fixes

 

  • Adding READ right for display reservations menu tab (03e6281e)
  • bad lcoale in en_US (db9986f1)
  • resize dashboard to match GLPI’s core (#3306) (9272cda3)
  • TargetChange: use RichText instead of plaintext (8845b888)
  • checkboxesfield,radiosfield,selectfield: add missing error messages (66585193)
  • datefield, datetimefield: comparison against empty string (be4831c7)
  • dropdownfield: SQL error for GLPI objects / tickets and some specific rights (2539e366)
  • dropdownfield: handle specific case with Entity itemtype (bd25e7d1)
  • dropdownfield: missing entity restriction setting (54543cb3)
  • dropdownfield: prevent language switching and log error (49f8fc07)
  • fieldsfield: restore mandatory field as read only (52a9fc2b)
  • form,category: obey show count on tabs parameter (f4ebf9e5)
  • form_language: obey show counter in tab setting (9dfc3b8d)
  • formanswer: php warning (ce078990)
  • formanswer: prevent silent rejection of answers (d630302d)
  • formanswer: redirect to login if session expired (eb0acb65)
  • glpiselectfield: fix namespace (#3287) (613e0fad)
  • install: missing row in sql query, causing PHP warning (0c47776a)
  • issue: php warnings when anonymisation enabled (f6f01d7d)
  • issue: prevent fatal error in tooltip (3419affc)
  • question,section: duplicate a question or section must duplicate inner conditions (22597832)
  • section: cannot rename section twice (7bbb9b81)
  • section: condition rule loss after duplicate / import (883a1227)
  • section: duplicate form may lead to bad question id in condition (a6f9c41c)
  • section: rename section impacts display of inner questions (c4277d8c)
  • selectfield,multiselectfield: fix possible encoding problem (8aaec8ac)
  • targetchange,targetproblem: folow method call signature for fields plugin (016696ab)
  • textfield: Unescaped HTML when displaying a form answer (6ce71f95)
  • textfield: exception while displaying counters (0a857d7f)
  • textfield: target ticket title need html encoding (1b71d652)

 

Full changelog and downloadclick here

Christian finishes the EmbrunMan race 2023!

At Teclib’, we believe that in life, it’s important to chase your personal dreams. This helps you grow as a person, feel satisfied, and discover more about yourself. One of our employees at Teclib’, Christian, had a dream: he wanted to participate in the Embrunman race.

Christian after finishing the EmbrunMan race.

On the 16th of August 2023 Christian completed the race, and we are really happy for him. After crossing the finish line and spending time with his friends and family, Christian shared his experience with us:

“I want to tell you about the race – it was the happiest moment of my life so far!

The stress started as soon as the signal went off for us to start swimming. I had to swim in the dark, without light, so I followed others until the sun came up. When I got out of the water, my time was 1 hour and 10 minutes – which was great! That was my goal – to swim fast and efficiently. I achieved it!

Getting ready for the biking part, I realized it was going to be a very long day, at least 7 hours and 30 minutes of cycling before the marathon. I cycled for 8 hours with a 30-minute delay. I decided to be careful on the downhill parts to avoid accidents like the one I had three weeks ago. On the uphill sections, I kept my energy steady at 200 watts and managed the Izoard pass.

Around kilometer 140, I had doubts, but my coach encouraged me. He said I was behind by 20 minutes, but I was strong where others were not, especially in the marathon. EmbrunMan is tough mentally, but I could do it. I knew it was going to be hard, and I signed up for it, so I kept going.

Finishing the bike part was great, but the moment I looked forward to the most was the marathon. My coach gave me a strategy: run at 5 minutes and 10 seconds per kilometer for the first 14 kilometers, then at 5 minutes and 25 seconds per kilometer for the next 14 kilometers, and then just do my best for the last 14 kilometers.

I followed his advice, sometimes even running faster than I expected. I kept my energy in check and maintained a steady pace. Gradually, I caught up with those who were ahead of me. I felt like I was floating, even though I was tired and dehydrated.

Christian running during the EmbrunMan race.

The last 14 kilometers felt never-ending, and I thought I might collapse. I saved my last energy gel until I felt like I was losing control at kilometer 39. Taking it gave me the strength to cross the finish line. I saw my Colombian flag held by a fellow athlete, and I proudly finished the race.

I heard my mom’s voice and the cheers from my fellow athletes from Les Sardines Club throughout the race. It took me 13 hours and 54 minutes, but I achieved my secondary goal of finishing in less than 14 hours. The main goal was to complete the marathon in less than 4 hours, and although I did it in 4 hours and 10 minutes, my friends called it “the comeback” because my coach said it was an impressive marathon.

I finished feeling dizzy and dehydrated, but my triathlete friends assured me it was normal. They told me to rest a bit in the medical tent. That’s how I ended the most anticipated day of 2023 and the most wonderful day of my life so far!

My mom was a huge support before, during, and after the race. Seeing her along the course gave me energy and made me proud. Friends and other members of Les Sardines Club were there at different points along the 231-kilometer race. Without them, no one could finish a race like this. The medal I earned belongs to them too.

Christian’s results after the EmbrunMan race.

Teclib’ is thrilled to sponsor and support Christian in his athletic journey. We believe in the values of determination, perseverance, and pushing boundaries, which Christian exemplifies through his participation in the Embrunman race. We are proud to stand behind him as he embodies these athletic ideals.

New silver partner in Burkina Faso: CVP

We are happy to announce our new Silver partner in Burkina Faso: CVP.

CVP is a Digital Services Company (ESN), offering for more than 18 years solutions related to business information systems (outsourcing, systems integration, systems and networks, IT audit).

As part of the partnership established with us, CVP’s teams support customers in the success of their projects to set up a service management solution with GLPI.

They are with you at all stages of the project: initiation, planning, execution, control and closure.

They offer the following services:

  • Outsourcing;
  • Internet services;
  • Trainings;
  • Audit and advice;
  • Software and hardware sales;
  • System and network;
  • Software engineering;
  • Energy and telecommunications.

Website: https://bit.ly/45inMwi

We are excited that GLPI ITSM solution is becoming more and more represented all over the world and GLPI Network (our support offer for on-premises – get your IT Infrastructure secured) subscription service will be available for more customers through our new partners.

Our large partnership network is always open for new collaborations. If you are interested in representing one of our products in your country, get in touch with us: https://glpi-project.org/contact_us/

Being a partner means:

  • Having an a direct access to the Teclib´s tech expertise;
  • Get special discounts;
  • Access official support,
  • Many other tools which will help you to gain more customers and increase reputation on the market by adding open source ITSM to your portfolio.

Discover all benefits of being a partner here: https://glpi-project.org/partners/

Teclib goes to Embrunman in 2023.

 

In a few hours our colleague Christian Osorio will start one of the most prestigious races – Embrunman 2023. Here he is sharing with us his feelings and thought before the triathlon will start: 

 

“With only a few hours left before the EmbrunMan event, I’m starting to feel a good kind of nervousness! I’ve been getting ready for this day for 8 months, working with my Club members, family, and friends. It’s all been leading up to August 15.

As the time goes by, I’m feeling more and more excited and happy. I can’t help but imagine myself crossing the finish line tomorrow during the race!

Christian Osorio prepares for Embrunman 2023.

The bike ride I’m going to do will be the longest one I’ve ever done. But I feel prepared because I’ve been training with my coach and the Les Sardines Triathlon Marseille Club.

The plan for eating and drinking is all set! I’ve included my race plan and imagined how it will go”.

The importance of preparation before the race:

This is what I’ll use during the race in the three different parts. Each thing has an important job, and I can’t forget anything. If I do, I’ll have to make choices during the race to adjust my speed, stop to eat and drink at the planned times, and change how I get my energy and water. The weather will be very hot, so I think I’ll need to drink about 800ml of water every hour for 12 hours. I’ll also eat about 66g of sugar every hour for 12 hours, and I’ll have to keep taking minerals to help my body hold onto water. To stay safe in the sun, I’ll wear a white helmet, a cap, and use SPF 50 sunscreen for kids! I’ve got the tools to change my bike tire two times if I need to.

Embrunman 2023:

Wow, I’m so excited to do this race with a big uphill climb of over 400 meters! I want to feel every step of the way up to the 42nd kilometer. I know there will be times when I feel sure of myself, times when I doubt, feel scared, zone out, and even times when everything seems unclear. But these moments will make me think and grow, and I’ll make important choices.

This kind of challenge is like practice for life. It will help me handle everyday challenges calmly, with discipline and accuracy! I’ll be really happy when I finish this triathlon that I’m looking forward to so much. I hope I’ll have a medal around my neck tomorrow! 🏅

Teclib x Christian are getting ready!