{"id":423173,"date":"2023-01-24T11:03:08","date_gmt":"2023-01-24T10:03:08","guid":{"rendered":"https:\/\/glpi-project.org\/?p=423173"},"modified":"2025-06-16T13:18:36","modified_gmt":"2025-06-16T12:18:36","slug":"new-version-glpi-10-0-6","status":"publish","type":"post","link":"https:\/\/www.glpi-project.org\/en\/new-version-glpi-10-0-6\/","title":{"rendered":"New version 10.0.6 of GLPI!"},"content":{"rendered":"<p>A new GLPI version is available.<\/p><p>This release fixes several security issues that have been recently discovered. <strong>Update is recommended!<\/strong><\/p><p>You can download the&nbsp;<strong><a href=\"https:\/\/github.com\/glpi-project\/glpi\/releases\/download\/10.0.6\/glpi-10.0.6.tgz\" target=\"_blank\" rel=\"noreferrer noopener\">GLPI 10.0.6 archive<\/a><\/strong>&nbsp;on GitHub.<br>We still maintain maintain the 9.5 branch for security fixes and we also release a new version for it:&nbsp;<strong><a href=\"https:\/\/github.com\/glpi-project\/glpi\/releases\/download\/9.5.12\/glpi-9.5.12.tgz\" target=\"_blank\" rel=\"noreferrer noopener\">GLPI 9.5.12 archive<\/a><\/strong><\/p><p>You will find below the list of security issues fixed in this bugfixes version:<\/p><ul class=\"wp-block-list\"><li class=\"\">[SECURITY - High] Unauthorized access to inventory files (CVE-2023-22500)<\/li><li class=\"\">[SECURITY - Moderate] XSS on browse views (CVE-2023-22722)<\/li><li class=\"\">[SECURITY - Moderate] XSS on external links (CVE-2023-22725)<\/li><li class=\"\">[SECURITY - Moderate] XSS in RSS Description Link (CVE-2023-22724)<\/li><li class=\"\">[SECURITY - Moderate] Unauthorized access to data export (CVE-2023-23610)<\/li><li class=\"\">[SECURITY - Low] Stored XSS inside Standard Interface Help Link href attribute (CVE-2022-41941)<\/li><\/ul><p>Also, here is a short list of main changes done in this version:<\/p><ul class=\"wp-block-list\"><li class=\"\">[FEATURE] Unmanaged devices can be handled like a real asset.<\/li><li class=\"\">[FEATURE] Handle more actions for stale inventory agents.<\/li><li class=\"\">[FEATURE] Added new dictionnary rules for OS.<\/li><li class=\"\">[CHANGED] Removed&nbsp;<code>glpi:<\/code>&nbsp;prefix on console commands.<\/li><li class=\"\">[FIX] PHP 8.2 support.<\/li><li class=\"\">[FIX] Many fixes and improvements on native inventory.<\/li><li class=\"\">[FIX] Reservation display on self-service profile.<\/li><li class=\"\">[FIX] Mail collector issues with emails sent from Outlook.<\/li><li class=\"\">[FIX] Dashboard issues on \u201cAll\u201d tab.<\/li><li class=\"\">[FIX] Ticket input is restored when submitted form is not complete.<\/li><li class=\"\">[FIX] Notification was not sent when ticket status was set to \u201cpending\u201d.<\/li><\/ul><p>The&nbsp;<strong><a href=\"https:\/\/github.com\/glpi-project\/glpi\/milestone\/58?closed=1\" target=\"_blank\" rel=\"noreferrer noopener\">full changelog is available<\/a><\/strong>&nbsp;for more details.<\/p><p>We would like to thank all people who contributed to this new version and all those who contributes regularly to the GLPI project!<\/p><p>Regards.<a href=\"https:\/\/hedgedoc.teclib.com\/#Long-FR\" target=\"_blank\" rel=\"noopener\"><\/a><\/p>","protected":false},"excerpt":{"rendered":"<p>A new GLPI version is available. This release fixes several security issues that have been recently discovered. Update is recommended! You can download the&nbsp;GLPI 10.0.6 archive&nbsp;on GitHub.We still maintain maintain the 9.5 branch for security fixes and we also release a new version for it:&nbsp;GLPI 9.5.12 archive You will find below the list of security [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"categories":[155],"tags":[42,70,67],"class_list":["post-423173","post","type-post","status-publish","format-standard","hentry","category-versions","tag-glpi-releases","tag-news","tag-release"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.glpi-project.org\/en\/wp-json\/wp\/v2\/posts\/423173","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.glpi-project.org\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.glpi-project.org\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.glpi-project.org\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.glpi-project.org\/en\/wp-json\/wp\/v2\/comments?post=423173"}],"version-history":[{"count":1,"href":"https:\/\/www.glpi-project.org\/en\/wp-json\/wp\/v2\/posts\/423173\/revisions"}],"predecessor-version":[{"id":436353,"href":"https:\/\/www.glpi-project.org\/en\/wp-json\/wp\/v2\/posts\/423173\/revisions\/436353"}],"wp:attachment":[{"href":"https:\/\/www.glpi-project.org\/en\/wp-json\/wp\/v2\/media?parent=423173"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.glpi-project.org\/en\/wp-json\/wp\/v2\/categories?post=423173"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.glpi-project.org\/en\/wp-json\/wp\/v2\/tags?post=423173"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}