GLPI 10.0.16 is released!

A new GLPI version is available!

This release fixes a few security issues that have been recently discovered. The update is recommended!

You can download the GLPI 10.0.16 archive on GitHub.

You will find below the list of security issues fixed in this bugfixes version:

  • Account takeover via SQL Injection in AJAX scripts (CVE-2024-37148)
  • Remote code execution through the plugin loader (CVE-2024-37149)
  • Authenticated file upload to restricted tickets (CVE-2024-37147)

Also, here is a short list of the main changes done in this version:

  • Freesize database field was not correctly migrated
  • Network inventoried stacked switches had all the same name
  • Remove monitors from inventory when no monitor is present
  • Import location hierarchy from LDAP and Inventory

The full changelog is available for more details.

We would like to thank all people who contributed to this new version and all those who contributes regularly to the GLPI project!

Regards.

Stay connected! Follow us on our social media platforms!

GLPI Agent release 1.9

GLPI Agent 1.9 has been released.

You can download it on the GLPI Agent github project: https://github.com/glpi-project/glpi-agent/releases/tag/1.9

This version comes first with few fixes for the MSI packaging for Windows:

  • A regression in the installation of OpenSSL support could prevent communication with servers via the SSL protocol.
  • the FULL_INVENTORY_POSTPONE option of MSI installer was not normally managed.

Few fixes and enhancements for inventory was integrated:

  • a regression of the partial inventory involved a problem in the integration of softwares into GLPI, in particular with the new full-inventory-postpone option.
  • the detection of network ports type has been enhanced on MacOSX.
  • the MSSQL databases inventory on Windows has been enhanced to detect all the installed instances.
  • the serialnumber detection of recent disks has been enhanced on Windows.

A new snmp-retries has been introduced to enhance network inventory when networks devices not always respond in time.

The use of user notifications of the Deploy task could involve a service crash on Windows.

The ToolBox plugin now accepts some special characters inside passwords of credentials for remote inventory.

You can check changes details in the official online Changelog available here: https://github.com/glpi-project/glpi-agent/blob/1.9/Changes

We invite you to update your agents as soon as possible to take advantage of these improvements.

Follow us on our social media so you don’t miss any of our news!

How tags may be useful when using GLPI

GLPI has categories, types, and other kinds of options to categorize and split related objects into groups. Imagine you could gather different objects that have any relation. Be it a project, a client, a group of clients, a status, or even expand the possibilities of categorizing objects inside their already created categorization.

That’s what the plugin Tags does.

  • The Tags plugin provides an extra ability to group objects in GLPI.
  • Be it to improve workflows or just find objects that are related.
  • It is available for everyone using a free Marketplace key or installing it directly from the official repository

It is exactly as, in a physical environment, labeling things to make sure that on a first look, we know that this object is part of something else.

Key features and benefits

Business rules integration: one of the standout features of the tag management plugin is its ability to integrate tags with business rules for tickets. This means that tags can be added to tickets based on pre-defined criteria.

Permission controls: to prevent an overload of unnecessary tags, the plugin offers essential permission settings. These settings ensure that only authorized personnel, typically administrators, can create and manage tags. This level of control helps maintain a clean and orderly tag system, preventing misuse and clutter that could complicate asset and ticket management.

Administrative control: the focus on administrative control within the tag management system ensures that tags are created in a structured and thoughtful manner. By centralizing tag creation and management, GLPI ensures that the tagging system remains an effective tool for organization and doesn’t become a source of confusion. There is also the ability to add colors to tags, so it becomes easier to find groups at first sight.

Practical applications in GLPI

The practicality of the tag management plugin shines across various applications within GLPI. Here are a few examples:

  • Asset Management: tags can categorize equipment by groups of equipments, projects, impact to the company, legacy hardware, making it easier to manage inventories and track asset lifecycles.
  • Ticket Management: applying tags to tickets can help categorize issues by urgency, type of problem, or affected kind of client – level of subscription, for example since it is possible to tag an entity and use the view of entity tags across other lists -, streamlining the support process and improving response times.

These applications demonstrate the versatility and utility of the tag management system in everyday scenarios, making it an essential tool for any GLPI user.

There are also some unusual ways of using the Tags plugin. The administrator’s creativity is the limit.

  • Tag positive and negative feedbacks inside tickets
  • Tag if a user needs some training
  • The product team may be looking for negative feedbacks to target changes for the next releases and may use the team tagging negative feedbacks for that.
  • Maybe the writers can look for a tag “needs doc” to find new articles to write

The Tags plugin is a powerful extra resource to GLPI, offering significant improvements in efficiency and organization. By utilizing this tool, service departments may ensure that their resources are used effectively, and that information is always at their fingertips, and with fewer clicks.

Have you discovered any unique uses for tags in your environment?

Useful links

https://faq.teclib.com/04_Plugins/Tags/

https://glpi-plugins.readthedocs.io/en/latest/tag/index.html

Join us on our social networks so you don’t miss any of our news!

GLPI Release 10.0.15

A new GLPI version is available.

This release fixes a few security issues that have been recently discovered. Update is recommended!

You can download the GLPI 10.0.15 archive on GitHub.

You will find below the list of security issues fixed in this bugfixes version:

  • Authenticated SQL injection from map search (CVE-2024-31456)
  • Account takeover via SQL Injection in saved searches feature (CVE-2024-29889)

Also, here is a short list of main changes done in this version:

  • Fix used right by reservation form.
  • Do not rely on input to apply rules rights.
  • Always store updated SMTP Oauth refresh token.
  • Upgrade tinymce.

The full changelog is available for more details.

We would like to thank all people who contributed to this new version and all those who contributes regularly to the GLPI project!

Regards.

Stay connected! Follow us on our social media platforms!

Migration to GLPI 10: FAQ

At Teclib´ we are happy to announce that we are expecting the release of GLPI 10 in the following weeks. We have received many questions related to migration from older versions of GLPI/compatibility of plugins and decided to publish a dedicated video. Watch it on Youtube or read the transcription below.

  1. From which GLPI version I can migrate to GLPI 10?  

You can migrate to version 10 from any GLPI version (we support migrations from at least 0.80 version), all data, like users, tickets or assets, will be transferred. 

  1. What should I consider before migration? Which data can be lost in migration?  

The server must have at least PHP 7.4 and MySQL 5.6 dependencies. If your server doesn’t have these, you must upgrade these requirements. 

No data loss is expected, but as usual, make backups (files and database) and/or snapshots. 

You will need to execute some optional migrations after GLPI main update with the help of the console. 

If you have custom developments or core changes, please note they will be erased when copying the files. Consider porting them before the migration. 

  1. Which plugins will be compatible with GLPI 10?  

All plugins listed in GLPI Network Subscriptions (both Community and Exclusive ones) will be compatible with GLPI 10.  

Check https://plugins.glpi-project.org/#/version/~~10.0.0/plugins for a community based list. 

  1. What advantages has native inventory? 

In addition to the small gain of not using a plugin, the feature will use less history data and database storage (for example, software updates take 1 line instead 2). 

We worked also on user experience, you have now assets separated by types for a more comfortable setup. 

It unlocks some features like partial inventories, which reduces performances footprint.  

More asset types are available for inventory (you can send files for racks, appliances, certificates, etc). 

In combination with GLPI agent, you also obtain some great features: 

  • Databases inventory 
  • Proxy mode for DMZ  
  • Remote inventory (agentless) for windows and linux. 
  • Stand-alone SNMP tasks 

Our professional support for on-premise (GLPI Network Subscriptions) covers support L.3 for migration from GLPI 9.5 to GLPI 10. 

All GLPI Network Cloud paid customers will be upgraded for free.