fametec / glpi

GLPI Docker Container
https://hub.docker.com/r/fametec/glpi
GNU General Public License v3.0
67 stars 63 forks source link

9.5.3 #16

Closed eduardofraga closed 3 years ago

eduardofraga commented 3 years ago

This is a security release, upgrading is recommended

Note: those are medium security issues.

Download it

Non exhaustive list of changes:

[security] Insecure Direct Object Reference on ajax/comments.php and ajax/getDropdownValue.php (CVE-2020-27662 and CVE-2020-27663)
[security] Any CalDAV calendars is read-only for every authenticated user (CVE-2020-26212)
several dashboards issues
several fixes and enhancements with mail collector
new dashboard filters on tech users and tech groups
PHP8 compatibility
and more!