by Polina Marishicheva | Apr 9, 2019 | Announcements, Blog
After several weeks, Teclib’ is happy to announce the release of GLPI 9.4.2.
This release fix several security issues that has been recently discovered. Updating is strongly recommended.
You can download the GLPI 9.4.2 archive on GitHub: download
You’ll find below the changes of this bug fixes version:
- Security: prevent external redirections
- Fix some performances issues
- Fix various issues on plugins loading (cache conflict, bad locales)
- Fix display of documents in tickets
- Fix display of user’s pictures
- Fix lost of some relations and sql errors when transferring items
- Feature: add Historical tab on config page
The full changelog is available as well as another one for more details.
Unusually, we also release a 9.3.4 version with security fixes previously applied in 9.4.1 and 9.4.2. You can download the archive for this release on Github.
We would like to thank all people who contributed to this new version and all those who contributes regularly to the GLPI project.
We would like to kindly remind that Support by Teclib´for GLPI is available.
Check the prices here: https://glpi-project.org/subscriptions/
Best regards.
by Polina Marishicheva | Mar 14, 2019 | Announcements, Blog
After several weeks, Teclib’ is happy to announce the release of GLPI 9.4.1 bugfixes.
This release fixes several security issues that have been recently discovered. Update is strongly recommended.
You can download the GLPI 9.4.1 archive on GitHub.
You may notice displayed and archive versions are 9.4.1.1; this is because we’ve decided to integrate two more fixes we found after release has been prepared!
You’ll find below the changes of these bugfixes versions:
- Bad chevrons rendering on dropdowns
- Iframe and forms are rendered in rich text contents
- Type juggling authentication bypass
- Malicious images upload
- Password token date was not reset
- Prevent timed attack and enforce cookie security (#5562)
- Search on dropdowns now displays fuzzy matches
- All components were deleted when permanently deleting a computer
- Unable to display network ports
- Preferences not applied
- Unable to use “forgotten password” feature
- And many more!
The full changelog is available as well as another one for more details.
We would like to thank all people who contributed to this new version and all those who contributes regularly to the GLPI project.
Reminder: we launched services website for GLPI-Network.
If you need support or services from our partners, check services.glpi-network.com.
