10.0.9

trasher released this 11 Jul 08:52

· 911 commits to 10.0/bugfixes since this release

This is a security release, upgrading is recommended

This release fixes a security issue that has been recently discovered. Update is recommended!

You can download the GLPI 10.0.9 archive on GitHub.

You will find below the security issu fixed in this bugfixes version:

[SECURITY - Moderate] SQL injection in dashboard administration (CVE-2023-37278).

Following the last releases of 10.0.8, a few annoying issues has been detected:

Update script uses a SQL function incompatible with MySQL 5.7 (#15141)
Private follow-ups and tasks are invisible to users with appropriate rights (#15128)
Several minor fixes

The full changelog is available for more details.

We would like to thank all people who contributed to this new version and all those who contributes regularly to the GLPI project!

Regards.

Assets 3