GLPI Agent 1.5 has been released.
You’re encouraged to upgrade your GLPI agents or migrate if you’re still using FusionInventory agents.
You can download it on the GLPI Agent github project:
https://github.com/glpi-project/glpi-agent/releases/tag/1.5
This release includes a security fix related to CVE-2023-34254. You’ll only be concerned by this security alert if you’re using the remoteinventory task in the case of unix/linux remote inventory via ssh.
Here is a summary of the most important changes:
- libxml2 library is now required for all the features using XML,
- Windows keystore support has been extended to support more stores to ease GLPI SSL certificate validation,
- inventory task has a lot of enhancements. In particular, some WMI timeouts has been fixed on windows and a new
assetname-support
option permits to choose to set asset name from short hostname or fqdn on unix/linux, - remoteinventory task includes several important fixes and has been enhanced to support remote inventory multi-threading thanks to the new
remote-workers
option, - netdiscovery and netinventory tasks also had their bunch of fixes and many new devices are now supported,
- deploy, collect and ESX tasks also had few fixes and enhancements,
- the embedded HTTPD interface can now use a basic authentication plugin to secure even more access, like for the ToolBox interface,
- MacOSX packages have been updated to use OpenSSL 3.1.1 and zlib 1.2.13,
- the 3.5 version of dmidecode has been included in windows and MacOSX packages,
- the linux perl installer includes several fixes and now supports Oracle Linux 7 installation,
- MSI packaging now permits to install GLPI-AgentMonitor community tool which provides interesting features for users via a systray icon, check the following project for more details: https://github.com/glpi-project/glpi-agentmonitor
Speaking about the MSI packaging, we decided to not sign the packages and provided binaries as code-signing SSL certificate providers are failing to provide us the required certificate in a reasonable time. So you may experience some security alerts until the MSI packages reputation has been nicely established.
As always, you can check the more detailed changelog at:
https://github.com/glpi-project/glpi-agent/blob/1.5/Changes