You’re encouraged to upgrade your GLPI agents or migrate if you’re still using FusionInventory agents.

Você pode baixá-lo no projeto github do Agente GLPI:
https://github.com/glpi-project/glpi-agent/releases/tag/1.3

This release includes some fixes and enhancements. Here are the most important ones:

• we implemented a feature request from the community to support SSL server certificate of the GLPI server deployment with operating system deployment feature:
  • on windows, the glpi server certificate can be deployed through the enterprise keystore,
  • on macosx, the glpi server certificate can be deployed in system keychain through a MDM.
• we added the support of the new ‘ssl-fingerprint’ option and it permits to trust a GLPI server certificate without the need of deploying a certificate:
  • you can first enable one time the ‘no-ssl-check’ option on one agent to find the related ssl fingerprint reported in agent log,
  • then you can set the discovered value for all your agents and disable ‘no-ssl-check’ on the first one.
• the windows MSI packaging is now using Perl 5.36.0 and includes some fixes and improvements:
  • as it was wrongly creating firewall rules, this is fixed and wrong rules are removed,
  • few libraries was missing if you wanted to use SNMPv3 authentication during network discovery or inventory,
  • the installer was failing to create the windows task when you wanted to use windows task scheduling,
  • few configurations was not possible during silent installation.
• the MacOSX packages has been upgraded to use Perl 5.36.0, OpenSSL 3.0.3 & zlib 1.2.12 and the installation on APFS filesystem has also been fixed.
• for linux packaging, we have also few big improvements:
  • AppImage support for older linux like CentOS 7,
  • AppImage uninstallation process has been improved,
  • Snap packaging has been upgraded to use Perl 5.36.0,
  • perl linux installer has been enhanced to support installation on openSUSE.
• For inventory task, we integrated:
  • a patch from the community which can fix monitor inventory on linux,
  • an Oracle database inventory support update,
  • an update to avoid false positive antivirus alert during software inventory on windows,
  • a fix on JSON format support to avoid wrongly encoded strings on macosx,
  • a fix against a JSON validation error while monitor serial is an integer,
  • a fix on generated partial inventory as the ‘partial’ property was missing,
  • an update for additional-content option support while using JSON format.
• RemoteInventory task has been improved so remote ssh inventory of linux/unix platforms can fallback on ssh command calls when libssh2 is not available.
• Netdiscovery and NetInventory tasks now includes a module from the community which enhances DefensePro support.

As always, you can check the more detailed changelog at:
https://github.com/glpi-project/glpi-agent/blob/1.3/Changes

GLPI v.10 includes since its latest release the native inventory feature (including GLPI agents also released during the year).
Inspired by previous project: FusionInventory and OCS (and using their XML format), - it aims to be a unified entry point for the inventory (by adding greater compatibility of all GLPI objects).

A complete rewrite directive had been one of the stated objectives (without code recovery) at the beginning of the development of the project.

Recently (after the release of the stable 10.0 version), it appeared that this functionality within GLPI included pieces of code from FusionInventory. As a development team we have been patently negligent about the copyrights of the previous project.
Moreover, there is an incompatibility between the license of GLPI (GPL-2.0-or-later) and FusionInventory (AGPL-3.0-or-later).

We apologize to the FusionInventory community for this situation. Teclib’ and its developers are also contributors to the project and are therefore included in this notion of copyright (mainly to the agent but also in part of the plugin).

Upcoming fixes.

A few changes will be made to address the situation:

The copyright of the Fusion Inventory project will be added to the source files concerned,
GLPI license (and source file headers) will be changed to GPL-3.0-or-later.
On this last point, it is possible because previous license contained “or later”. It allows us to switch from the current version 2 to later versions.
Compatibility between GPL-3.0 and AGPL-3.0 (Affero) is explicitly provided in the text of both licenses.

In addition to this change, we took the opportunity to check current uses in terms of libraries.
We have replaced some to resolve any incompatibilities following the switch to GPL-3.0-or-later.

DHTMLX/gantt was impossible to replace and the entire Gantt functionality was taken out of GLPI to be integrated into a dedicated plugin. There is normally no functional loss, you will simply need to install the plugin (via the Marketplace or manually) to recover previous displays.

These changes will come in effect in the next version of GLPI, which will be in a few weeks.

What is the impact of the new license?

A quick summary of the impact of these changes:

GLPI is, and will remain, completely free and open source, its code is always accessible and adaptable by everyone.
All projects wishing to share or re-use GLPI code must now do so with the GPL-3.0 or compatible license.
The mention “or later” of the news makes it possible to foresee the case where a version 4 of the GPL would become available.
If you are a GLPI user, the impact is probably zero.

We promise to be more vigilant in the future towards the compatibility of our code and the libraries that we use.

Description

• Fixes :
  • XML format
  • Fix storage scope (Android 11)
  • Fix inventory sharing
  • Fix android version
• Features :
  • New option to define asset type of inventory
    • Computer
    • Phone (only for GLPI Native Inventory)
• Android compatibility
  • From android 4 (Jelly Bean) To android 11
• GLPI / Fusion / Agent Config compatibility

Distribution

You can download the app from Google Play!

O GLPI Agent 1.2 foi lançado.

You’re encouraged to upgrade your GLPI agents or migrate if you’re still using FusionInventory agents.

Você pode baixá-lo no projeto github do Agente GLPI:
https://github.com/glpi-project/glpi-agent/releases/tag/1.2

This release includes some fixes and enhancements. Here are the most important ones:

• For inventory task, we integrated:
  • some patches from the FusionInventory community and our own, including lxc container inventory enhancement, AnyDesk remote managament enhancement,
  • a fix for TeamViewer remote management inventory,
  • a new feature to inventory flatpak packages on linux,
  • a fix to inventory SQL Server 2012 Express databases,
  • a fix for snap packages inventory on linux,
  • many monitor inventory enhancements for a lot of Acer monitors.
• RemoteInventory task has been enhanced for remote ssh inventory of linux/unix platforms. It now also supports ssh user/password authentication.
• Netdiscovery and NetInventory tasks has also been updated with few enhancements.
• User interactions for the Deploy task had a problem with message encoding. This is fixed.
• For the http interface, the SSL Server plugin was faulty. This is fixed and you now can select ciphers to support.
• The injector script now supports short name as folder and the -R option handling has been fixed.
• We added as contribution the ADMX/ADML files for agent configuration via GPO.

We also introduces with this version a new solution for linux users: You can now use the AppImage GLPI Agent installer for any linux distribution supporting AppImage format.
Just check the dedicated documentation at:
https://glpi-agent.readthedocs.io/en/latest/installation/linux-appimage.html

As always, you can check the more detailed changelog at:
https://github.com/glpi-project/glpi-agent/blob/1.2/Changes

A newly revealed critical vulnerability impacting Apache Log4j was disclosed and registered as CVE-2021-44228 with the highest severity rating. Log4j is an open-source, Java-based logging utility widely used by enterprise applications and cloud services. By exploiting this vulnerability, a remote attacker could take control of the affected system.

We would like to assure all users that GLPI core and its plugins, being written in PHP and not using Log4j, are not affected by the Log4Shell vulnerability.

Exploiting this vulnerability requires a Java Virtual Machine and the org.apache.logging.log4j.core.lookup.JndiLookup Java class in a vulnerable version. None of them are included or used in GLPI distributions.

We can also confirm that:

• GLPI Android Agent (writen in Java), doesn't use Log4j library, and thus is not affected by the Log4Shell vulnerability
• GLPI Agent (writen in Perl), is not affected by the Log4Shell vulnerability

Warning: this does not prevent layers/tools potentially upstream of GLPI (reverse-proxy, firewall, etc.), or connected to GLPI, which we are not aware of in your context, from being potentially impacted.

For example, if you have a Metabase server connected to GLPI you should note that Metabase (<0.41.4) is affected by Log4j vulnerability, and you should update it ASAP!

Documentation:

• https://github.com/advisories/GHSA-jfh8-c2jp-5v3q
• https://github.com/NCSC-NL/log4shell/tree/main/software
• https://www.cert.ssi.gouv.fr/alerte/CERTFR-2021-ALE-022/

At Teclib' we are excited to announce the release of GLPI Agent for Android.

What is GLPI Agent?

GLPI Agent is an application used for software and hardware inventory for Android-based phones (for the moment).

The data collected by GLPI Agent directly goes to the ITSM GLPI software via the FusionInventory plugin.

Access the full features list here: https://glpi-project.github.io/android-inventory-agent/

What features you can expect in this release:

• New design of the interface
• Manual run and send the inventory
• Schedule tasks to run and send the inventory
• Send inventory to multiple GLPI servers
• Show local inventory under the app (app has a feature which allows user to look at the data retrieved by the inventory)
• Share local inventory (sms / mails / bluetooth etc …) - share it (an xml / json file) via native Android sharing
• Start app on a system boot
• QR code and Deeplink management to pre-fill agent configuration (requires a plugin available only in the GLPI Network subscription)

Android mobile devices compatibility:

• From Android 4 (Jelly Bean) to Android 9 (Pie)

GLPI/FusionInventory/Agent Config compatibility:

Distribution

How you can get GLPI Android Inventory Agent?

You can download it on Google Play: click

The professional support for GLPI Android Inventory Agent and GLPI is available through our Partners´ Network for the customers covered by GLPI Network Subscription. Obtain a personalised professional support by contacting us: click

Interconnection

GLPI Android Inventory Agent is interconnected with GLPI and FusionInventory plugin.

Use CMDB management with GLPI and FusionInventory inventory rules to manage easily your Android-based mobile fleet.

 GLPI plugin “Agent Config” allows you to easily configure (server and inventory frequency) the agent via QR Code or DeepLink (only available under GLPI Network subscription)