9.4.5

Non exhaustive list of changes:

• add link PDU on tickets,
• fix several issues on search queries,
• fix LDAP group import,
• fix linking on ITIL objects depending on status
• fix case issues synchronizing Active Directoy emails
• and more!

See changelog for details.

9.4.4

This is a security release, upgrading is highly recommended

Non exhaustive list of changes:

• [security] Prevent account takeover vulnerability ,
• [security] Prevent execution of XSS on rich text,
• fix cache key lenght issues,
• fix user picture removal at login,
• several fixes on recurring tickets,
• fix some transfer errors related to entities among others,
• and more!

See changelog for details.

9.4.3

This is a security release, upgrading is highly recommended

Non exhaustive list of changes:

• [security] Prevent execution of XSS on rich text,
• [security] Prevent xss attack on user picture,
• Fix performance issues when using entities,
• New “Prevent take into account” action on tickets business rules,
• New “Status” criterion on tickets business rules,
• Change and problem tasks can now be marked as private,
• and more!

See changelog for details.

9.4.2

This is a security release, upgrading is highly recommended

Non exhaustive list of changes:

• [security] Prevent external redirections
• Fix some performances issues
• Fix various issues on plugins loading (cache conflict, bad locales)
• Fix display of documents in tickets
• Fix display of user's pictures
• Fix lost of some relations and sql errors when transferring items
• Feature: add Historical tab on config page
• And many more!

See changelog for details.

9.3.4

This is a security release, upgrading is highly recommended

Non exhaustive list of changes:

• [security] Bad chevrons rendering on dropdowns (#5468)
• [security] Iframe and forms are rendered in rich text contents (#5519)
• [security] Type juggling authentication bypass (#5520)
• [security] Malicious images upload (#5580)
• [security] Password token date was not reset (#5577)
• [security] Prevent timed attack and enforce cookie security (#5562)
• [security] Prevent external redirections
• And more!

9.4.1 (9.4.1.1)

This is a security release, upgrading is hightly recommended

Non exhaustive list of changes:

• [security] Bad chevrons rendering on dropdowns (#5468)
• [security] Iframe and forms are rendered in rich text contents (#5519)
• [security] Type juggling authentication bypass (#5520)
• [security] Malicious images upload (#5580)
• [security] Password token date was not reset (#5577)
• [security] Prevent timed attack and enforce cookie security (#5562)
• Search on dropdowns now displays fuzzy matches (#5149)
• All components were deleted when permanently deleting a computer (#5459)
• Unable to display network ports (#5460, #5461)
• Preferences not applied (#5372)
• Unable to use “forgotten password” feature (#5386)
• And many more!

You may notice displayed and archive versions are 9.4.1.1; this is because we've decided to integrate two more fixes we found after release has been prepared!

See changelog and minor changelog for details.

9.4.0

Official announcement / Annonce officielle

Major features:

• a rework of search engine with nested criteria
• a new user experience for Knowbase
• Timeline become available for changes and problems
• drop old tabs (documents, tasks, followups) and keep only timeline on tickets
• a centralized command line console (see updated documentation)
• a new rule engine for assets
• rich text always on (configuration paramater has been dropped)
• lockable personalization tab on profile
• Followups split and Tickets merge

See changelog for details.

9.4.0 RC2

DO NOT USE IN PRODUCTION

Second release candidate of the next major 9.4 release.
Several bugs have been fixed since the RC1 release.

Download it

9.4.0 RC1

DO NOT USE IN PRODUCTION

First release candidate of the next major 9.4 release.
Several bugs have been fixed since the beta release.

Download it

9.4.0 BETA

BETA GLPI 9.4.0 release

DO NOT USE IN PRODUCTION

Download it

Major features:

• a rework of search engine with nested criteria
• a new user experience for Knowbase
• Timeline become available for changes and problems
• drop old tabs (documents, tasks, followups) and keep only timeline on tickets
• a centralized command line console (see updated documentation)
• a new rule engine for assets
• rich text always on (configuration paramater has been dropped)
• lockable personalization tab on profile

See changelog for details.