GLPI Agent 1.5 has been released.
You’re encouraged to upgrade your GLPI agents or migrate if you’re still using FusionInventory agents.
Puedes descargarlo en el proyecto github de GLPI Agent:
https://github.com/glpi-project/glpi-agent/releases/tag/1.5
This release includes a security fix related to CVE-2023-34254. You’ll only be concerned by this security alert if you’re using the remoteinventory task in the case of unix/linux remote inventory via ssh.
Here is a summary of the most important changes:
- libxml2 library is now required for all the features using XML,
- Windows keystore support has been extended to support more stores to ease GLPI SSL certificate validation,
- inventory task has a lot of enhancements. In particular, some WMI timeouts has been fixed on windows and a new
assetname-supportoption permits to choose to set asset name from short hostname or fqdn on unix/linux, - remoteinventory task includes several important fixes and has been enhanced to support remote inventory multi-threading thanks to the new
remote-workersoption, - netdiscovery and netinventory tasks also had their bunch of fixes and many new devices are now supported,
- deploy, collect and ESX tasks also had few fixes and enhancements,
- the embedded HTTPD interface can now use a basic authentication plugin to secure even more access, like for the ToolBox interface,
- MacOSX packages have been updated to use OpenSSL 3.1.1 and zlib 1.2.13,
- the 3.5 version of dmidecode has been included in windows and MacOSX packages,
- the linux perl installer includes several fixes and now supports Oracle Linux 7 installation,
- MSI packaging now permits to install GLPI-AgentMonitor community tool which provides interesting features for users via a systray icon, check the following project for more details: https://github.com/glpi-project/glpi-agentmonitor
Speaking about the MSI packaging, we decided to not sign the packages and provided binaries as code-signing SSL certificate providers are failing to provide us the required certificate in a reasonable time. So you may experience some security alerts until the MSI packages reputation has been nicely established.
As always, you can check the more detailed changelog at:
https://github.com/glpi-project/glpi-agent/blob/1.5/Changes
