Forum GLPI-Project

francois-teclib

Expert GLPI

From: TECLIB

Registered: 2006-11-05

Posts: 74

Website

GLPI 10.0.2

This is a security release, upgrading is recommended

Here is the second bugfixes release for GLPI 10.

A lot of issues have been fixed since the first GLPI 10 version.
Below, you'll find a short list of key points of this release:

• [SECURITY] Unauthenticated SQL injection on login page (CVE-2022-31061)

• [SECURITY] SQL injection on actor part in assistance forms (CVE-2022-31056)

• [SECURITY] Unauthenticated Sensitive Data Exposure on Refused Inventory Files (CVE-2022-31068)

• FIX adding actors to ITIL Objects (#11796, #11957)

• FIX unwanted "promote to ticket" feature on self-service interface (#11834)

• FIX native inventory do not inject switch information (#11864)

• FIX entity for software creation (#11887, #11837)

• FEAT permits global lock on entity (#11853)

See full technical changelog for details.

We would like to thank all people who contributed to this new version and all those who contribute regularly to the GLPI project!GLPI 10.0.2

---

Besoin d'un support professionnel pour GLPI ? Pensez à GLPI Network ! https://glpi-project.org/fr/tarifs/

Connaissez-vous l'offre Cloud maintenue et supportée par l'équipe qui édite GLPI ?
Vous pouvez tester gratuitement pendant 45 jours ! https://glpi-network.cloud (ou plus si besoin)