Forum GLPI-Project

francois-teclib

Expert GLPI

From: TECLIB

Registered: 2006-11-05

Posts: 74

Website

GLPI 9.5.6

After several weeks, Teclib’ is happy to announce the release of GLPI 9.5.6.

This release fixes some security issue that has been recently discovered. Update is recommended!

You can download the GLPI 9.5.6 archive on GitHub:
https://github.com/glpi-project/glpi/re … -9.5.6.tgz

You’ll find below the list of changes in this bugfixes version:

* [SECURITY] Disclosure of GLPI and server informations in telemetry endpoint [CVE-2021-39211]
* [SECURITY] Autologin cookie accessible by scripts [CVE-2021-39210]
* [SECURITY] Bypassable CSRF protection on ajax endpoints [CVE-2021-39209]
* [SECURITY] Bypassable IP restriction on GLPI API using custom header injection [CVE-2021-39213]
* FIX Mailgate "Missing type for Ticket template" warning
* FIX Display of images in tickets from collected mails
* FIX Encoding issue with emails in GB2312 containing special characters
* FIX Emails rules not working after upgrading to 9.5.5
* FIX Incorrect KPIs Dashboards compared to the GLPI filter
* FIX marking LDAP user as deleted after a failed password
* FIX Prevent usage of date filters on full LDAP sync
* and more!

The full changelog is available for more details:
https://github.com/glpi-project/glpi/mi … 7?closed=1

We would like to thank all people who contributed to this new version and all those who contributes regularly to the GLPI project!

---

Besoin d'un support professionnel pour GLPI ? Pensez à GLPI Network ! https://glpi-project.org/fr/tarifs/

Connaissez-vous l'offre Cloud maintenue et supportée par l'équipe qui édite GLPI ?
Vous pouvez tester gratuitement pendant 45 jours ! https://glpi-network.cloud (ou plus si besoin)