This version comes with few fixes and enhancements and here are the essential ones:
OAuth2 authentication support is now included. It will only be usable with GLPI from the release of GLPI 11. It still can be tested with the GLPI main branch nightly build.
The next inventory run date will shift less other time still keeping a little randomization.
The agent won’t no more reset the inventory date when started hjourly in unmanaged mode (via crontab or planified task).
On Windows, an important fix will now prevent NetDiscovery, NetInventory and Collect tasks to block service.
Enhancement of disks serialnumber inventory support.
Added Cortex XDR antivirus support, even on Windows “Server”, MacOSX and Linux.
On Windows and linux, added remote management tools inventory support for Tactical RMM.
The p2p mode on Deploy jobs has been fixed to use agent configured port. It has also been enhanced using now the remote-workers configuration to extend the number of threads used to discover peers if set to a number higher than 10.
Important: About antivirus on Windows “Server”, in the future, we will attempt to detect them checking if a dedicated service is enabled. If you still are with an undetected antivirus case on Windows “Server”, please open a github issue to help us start its support.
About packaging, here is what you should retain:
On Windows, perl is now built using Gcc v13.3, OpenSSL v3.3.1 and the libxml2 library v2.13.2. The liblzma library is now built using xz v5.6.2 sources.
The Windows packaging now includes GLPI-AgentMonitor software v1.3.1.
The MacOSX packaging now uses OpenSSL v3.3.1.
The Deploy task can now be installed on RockyLinux 9.
The AppImage installer for Linux now supports the --wait option for the unmanaged mode.
This version comes first with few fixes for the MSI packaging for Windows:
A regression in the installation of OpenSSL support could prevent communication with servers via the SSL protocol.
the FULL_INVENTORY_POSTPONE option of MSI installer was not normally managed.
Few fixes and enhancements for inventory was integrated:
a regression of the partial inventory involved a problem in the integration of softwares into GLPI, in particular with the new full-inventory-postpone option.
the detection of network ports type has been enhanced on MacOSX.
the MSSQL databases inventory on Windows has been enhanced to detect all the installed instances.
the serialnumber detection of recent disks has been enhanced on Windows.
A new snmp-retries has been introduced to enhance network inventory when networks devices not always respond in time.
The use of user notifications of the Deploy task could involve a service crash on Windows.
The ToolBox plugin now accepts some special characters inside passwords of credentials for remote inventory.
This version comes with a lot of changes and enhancements for the MSI packaging for Windows:
first of all, a huge work has been done to provide the windows installer with Perl 5.38.2 using latest essential libraries version for more security, like OpenSSL 3.2.1 and libssh2 1.11.0.
the patch for the CVE-2024-28240 security advisory is now based on a DLL library.
only 64 bits packaging for windows is provided.
the “Typical” installation no more includes Deploy and Collect tasks.
7-zip provided command is now v23.01 version.
GLPI-AgentMonitor tool is provided in 1.3.0 version and now the installer supports AGENTMONITOR_NEWTICKET_URLto configure the GLPI url for the open new ticket option.
On the inventory side, a new feature will help you reduce the carbon footprint of your GLPI system: the full inventory postpone
now, by default, and if your server is a GLPI 10, GLPI Agent can decide to postpone the upload of a full inventory up to 14 times, so about 2 weeks using the default configuration. Until then, the agent will upload partial inventories only containing detected changes.
full-inventory-postpone is a new configuration parameter which value is 14 by default. Setting it to 0, it is still possible to disable this feature coming back to previous normal running.
glpi-agent script is also supporting --full option to temporary disable the feature.
The MacOSX package only activates Inventory task by default now. You’ll have to explicitly activate any other tasks you need in a dedicated configuration file.
A lot of fixes and enhancement have also been included. Inventory, RemoteInventory, NetworkDiscovery et NetInventory tasks, but also Proxy and ToolBox plugins, are concerned. We encourage you to check all changes details in the official online Changelog available here: https://github.com/glpi-project/glpi-agent/blob/1.8/Changes
We encourage you to update your agents as soon as possible to take advantage of these improvements.
Join us on our social networks so you don’t miss any of our news!
This version essentially fixes a regression introduced in the MSI packaging for Windows in the 1.7.2 version:
the LOCAL parameter was forced to the agent installation folder when not used. After that, local inventory was also generated even if this wasn’t required. This LOCAL configuration will be removed during this update.
CVE-2024-28241 patch was modified to not be enabled if the installation folder and (if used) the LOCAL parameter remain under the default system folder as there’s not security issue in that case.
These updates only impact Windows installation performed with MSI packaging.
We invite you to upgrade your agents on Windows as soon as possible.
You don’t need to upgrade to 1.7.3 GLPI Agents that were not installed on Windows and which are at least in 1.7 version.
Stay connected! Follow us on our social media platforms!
This version specifically fixes 2 critical security issues related to MSI packaging on windows:
CVE-2024-28240: A local user could modify the GLPI Agent configuration to gain higher privileges.
CVE-2024-28241: A local user could modify the GLPI-Agent installation to gain higher privileges, but only when GLPI Agent is not installed in the default installation folder.
These security issues impact all Windows installation performed with MSI packaging.
We encourage you to upgrade all these agents as soon as possible!
Anyway you don’t need to upgrade to 1.7.2 after updating to 1.7.1 if your GLPI Agent was not installed on windows with the MSI package.
We use cookies to ensure that we give you the best experience on our website. If you continue to use this site we will assume that you are happy with it.Ok
