-
Notifications
You must be signed in to change notification settings - Fork 118
Expand file tree
/
Copy pathChanges
More file actions
4527 lines (4084 loc) · 204 KB
/
Copy pathChanges
File metadata and controls
4527 lines (4084 loc) · 204 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
Revision history for GLPI agent
Warning for developers: Don't change/remove any entry which doesn't concern your code
1.19 not yet released
inventory:
* fix #1089: Updated Samsung LF22T450F monitor model support
* fix #1200: Add ClamAV antivirus detection support on linux
* fix #1200: Add Wazuh antivirus detection support on linux
* fix #1089: Updated Acer K242HYL monitor model support
* PR #1176: Enhanced Network interfaces inventory on windows
* Add DRIVES support for Hyper-V VMs: collect virtual hard disk paths and
provisioned sizes via MSVM_StorageAllocationSettingData WMI class
* Add SERIAL and network adapters support for Hyper-V VMs: collect
BIOSSerialNumber from MSVM_VirtualSystemSettingData and all virtual network
adapters (name + MAC address) from Msvm_SyntheticEthernetPortSettingData as
a NETWORKS array, with fallback to Msvm_EmulatedEthernetPortSettingData for
Generation 1 legacy adapters
* PR #1185: Improve sound NAME and MANUFACTURER resolution on windows using PnP
and hardware ID databases
* Fix Oracle database inventory when using su and environment variables
netdiscovery/netinventory:
* Make vlan context switching ordered
* fix #1154: Extract address MAC of connected Yealink phones using CDP
* Use more ordered processing to make debug output more predictable
* Add support for InfoBlox networking devices
* Refacto IEC61850 protocol support to log only one time it is not supported
* fix #1202: Update StormShield SNS support
* Fix CDP integration to support connected device with an empty or zero-ed
cdpCacheVersion field
* PR #1189: Add Eltex devices support and discard phantom network ports
reported by some Eltex firmwares for non-existent interfaces
packaging:
* Update Windows packaging to use:
- Perl 5.44.0
- gcc 16.1.0posix-14.0.0-msvcrt-r4
- 7-Zip v26.02
* Update MacOSX packages to use perl 5.44.0:
- Minimum supported MacOSX version changed to 10.12
* Update linux snap packaging to use perl 5.44.0
1.18 Tue, 23 Jun 2026
core:
* fix #1194: Fix ssl-keystore option support on windows
* fix #1193: Fix constant usage not recognized in perl 5.16
inventory:
* fix #1149: Support NVMe SSD storage disks on MacOSX
* fix #1150: Fix lxd containers inventory on linux
* fix #1158: Fix possible use of uninitialized warning during monitor inventory
* fix #1159: Fix possible use of uninitialized value in hash element warning during
windows software inventory
* Fix software filesize inventory support, essentialy for Snap packages
* fix #1171: Fix megasasctl output parsing
* fix #1162: Fix MSSQL database inventory for Always On cluster instances
* fix #1144: Fix crash on obsolete windows during processes inventory
* fix #1089: Fix Samsung LF22T450F monitor serialnumber
* Security Advisory GHSA-vwv6-85p7-mjvc: Fix using not validated username in Oracle
database inventory su command usage
* [SECURITY] Fix CVE-2026-52765: Sanitize credentials provided by server for DB2
and Oracle database inventory
* [SECURITY] Fix CVE-2026-45621: MongoDB inventory module allows JavaScript injection
via unescaped login credential field provided by database-inventory glpi plugin
* [SECURITY] Fix CVE-2026-46615: Fixed Mysql and PostgreSQL inventory module allowed
command injection with crafted database name
* [SECURITY] Fix CVE-2026-52764: Fixed Mssql inventory module allowed command injection
with compromised glpi server
* Updated pci.ids to 2026.06.21 version
* Updated usb.ids to 2026.06.10 version
* Bump Inventory task version to 1.25
netdiscovery/netinventory:
* fix #1161: Add support for devices like Ubnt which annouce IEEE802.11 support
in their sysORID table
* fix #1164: Add support for Digi Anywhere modems
* Add NetApp cluster support
* Bump NetDiscovery task version to 7.2
* Bump NetInventory task version to 7.2
collect:
* Security Advisory GHSA-mgcf-xgv7-5w4x: Validate server-controlled regular expression
in find file collect jobs. Limit regex size to 255 chars and abort job on regex
compilation error. And added timeout support.
* Bump Collect task version to 3.1
proxy-server-plugin:
* [SECURITY] Fix CVE-2026-42187: When local_store is enabled, Proxy plugin can allow
arbitrary file write
* Bump Proxy plugin version to 3.1
deploy:
* [SECURITY] Fix CVE-2026-52768: Fix GLPI::Agent::Tools::Archive to mimic unzip
command and to block possible path traversal during zip archive extraction
* Bump Deploy task version to 3.6
toolbox:
* Fix configuration reloading to only reload it when really required
* Fix undefined error on Results page while tag_filter is not set
* Security Advisory GHSA-cwg9-jj5m-pq4q: Fix stored XSS via SNMP community/authprotocol
credential fields
* Security Advisory GHSA-mvgv-2h85-5jg8: Fix XSS via Tag and Name fields
* [SECURITY] Fix CVE-2026-40936: Toolbox can only register file it generated and
guaranty only Toolbox generated file can be deleted
* [SECURITY] Fix CVE-2026-49285: OS Command Injection in Results export
* [SECURITY] Fix CVE-2026-58199: Remove deprecated remotes management
* Bump ToolBox plugin version to 2.0
packaging:
* fix: Update macOS postinstall, preinstall and uninstaller to use launchctl
bootstrap/bootout on macOS 13 Ventura and later, where launchctl load/unload
is deprecated and returns an error
* Update Windows packaging to use:
- Perl 5.42.2
- gcc 16.1.0posix-14.0.0-msvcrt-r3
- OpenSSL 3.5.7
- libxml2 2.15.3
- msys2-base 20260611
* Update MacOSX packages to use perl 5.42.2 and OpenSSL 3.5.7
* Update linux snap packaging to use perl 5.42.2
* fix #1143: Update linux perl installer to allow downgrade when installing other
a nightly build
1.17 Tue, 31 Mar 2026
core:
* Don't truncate submitted data with GLPI::Agent::HTTP::Client::Fusion when submitting
in a POST request. This is the case when submitting very long data for Collect task.
* Keep all the server tasks config, not only the planned ones to be sure glpi version
check works even when inventory task is not planned.
* Fork incoming httpd request before upgrading to SSL when SSL HTTP plugin is enabled
* Refacto: HTTP server plugins controls support was optimized
* Add new IPC message type to rename forked for SSL connections processes after
HTTP server plugin using it is known.
* Reduced waiting when IPC or HTTP server is used to make them more responsive
* fix #1120: Delay Pod::Usage loading when really required to optimize startup
inventory:
* fix #1100: Fix LiteManager remote management inventory
* Always ignore inventory uwp packages without name on windows
* Updated PostgreSQL database inventory with multi-instance support on linux
* fix #1095: Support WithSecure AntiVirus on MacOSX
* fix #153: Support processes inventory on win32
* Don't die but ignore additional content injection when using unsupported format
* fix #1125: Fix MeshCentral remote_mgmt support on linux
* fix #1072: Better users inventory support on linux domain computers
* Updated pci.ids to 2026.03.29 version
* Bump Inventory task version to 1.24
remoteinventory:
* fix #998: Fix inventory timezone offset format for UnixWare
* Bump RemoteInventory task version to 1.10
netdiscovery/netinventory:
* fix #1091: Support "contextname" field for SNMPv3 credentials option
* fix #1104: Updated Hikvision devices support
* fix #1106: Updated Eaton PDU devices support
* New feature: PDU support preview for glpi 12
* PDU type supported if glpi-version is 12 or greater
* Updated Raritan PDUs support with plugs listing support
* Updated RNX PDUs support with plugs listing support
* Updated Bachmann PDUs support
* Updated Juniper device support:
* Fix connections detection
* Enhanced stacking support
* fix #1119: Updated Riello UPS devices support
* fix #1109: Added support for WatchGuard devices
* Fix Sophos devices serialnumber inventory
* Refacto IEC61850 protocol support to also use it during netinventory task
* PR #1118: Updated support for Fortinet FortiAP
* fix #1131: Added Aten/Voltronic UPS devices support
* Added Meinberg devices support
* Added Siemens Sicam devices support
* fix #1132: Added AKCP devices support
* fix #1141: Updated TP-Link devices support
* fix #1135: Updated Cisco Meraki devices support
* Updated sysobject.ids
* Bump NetDiscovery task version to 7.1
* Bump NetInventory task version to 7.1
esx:
* fix #1084: Don't keep VM OS if full_name has not been discovered
* Filter out invalid BIOS values
* Bump ESX task version to 2.15
proxy-server-plugin:
* Enhancement:
- Refacto
- Fix glpi target protocol detection for client agents
- Netdiscovery and Netinventory tasks are now supported
- Don't handle internal event we don't own when proxy and secondary proxy are
enabled at the same time
* Bump Proxy plugin version to 3.0
ssl-server-plugin:
* Enhancement:
- Preload SSL context to keep it alive along service life
- The plugin is now supported on windows platform
* Bump SSL plugin version to 2.0
packaging:
* fix #1093: Fix rpm packaging where base package requires task-network one
* fix #1077: Enable Crypt::DES & Crypt::Rijndael in MacOS build to support SNMPv3
* Update Windows packaging to use:
- Perl 5.42.1
- gcc 15.2.0posix-13.0.0-msvcrt-r6
- zlib 1.3.2
- 7-Zip v26.00
- libxml2 2.15.2
- libiconv 1.19
- msys2-base 20260322
* Update MacOSX packages to use perl 5.42.1 and zlib 1.3.2
* Update linux snap packaging to use perl 5.42.1
* win32: Updated GLPI-AgentMonitor to v1.5.0
* fix #1038: Make linux perl installer working on LinuxMint
* fix #1138: Fix linux perl installer as it was falsely detecting agent as still
installed after an apt-get remove on debian-based distro
1.16 Mon, 02 Feb 2026
core:
* On windows, permit to use libxml2 built libraries in different threads
* Reset target id after loading saved state to avoir re-using same id after a
target configuration update
* PR #1051: Add support for ssk-key-file option helping to setup inventory
authentication via ssl client certificate. This option permit to specify a
dedicated file for private key and avoid to have to merge it into file defined
by ssl-cert-file option.
* Move GLPI::Agent::Tools::Hardware as GLPI::Agent::SNMP::Hardware to regroup
SNMP dedicated code and simplify packaging
* fix #1073: On windows, use our API to correctly decode registry values while
getting configuration from registry
* Support URLs finishing by /front/inventory.php for OAuth authentication
* fix #1048: Rework Windows KeyStore support to be more reliable and performant
using native api
inventory:
* PR #931: Added DrWeb & Karpersky Endpoint for Linux antivirus support on linux
* fix #963: Software inventory with scan-profiles option fixed for Azure AD users
* fix #967: Add support for OmniOS and update Solaris CPU inventory for OmniOS
* windows: Report only one printer when they have same portname
* fix #929: Support reporting Windows OS architecture as Arm64
* Fix smbios command output parsing on Solaris
* fix #971: Support smbios parsing to enhance memory inventory on Solaris
* fix #979: Detect if running in Docker container before hardware virtualmachine
and enhanced Docker support when using cgroupv2
* Fix Trellix AV Endpoint reported version on windows
* fix #993, #994: Solaris Zones virtualization support update
* PR #996: Added RuDesktop remote management inventory support
* PR #1003: Add ESET Endpoint Antivirus for Linux support
* PR #1010: Update vCpu support for Qemu virtualization
* fix #957: Support Qemu virtualization inventory on windows
* fix #955: Add support for SimpleHelp remote_management inventory
* fix #1017: Don't cleanup cpu on win32 from (R) trademark to keep cpu naming
the same between OS
* fix #1023: Improve iLO ip address resolution on Windows
* Fix additional content merged into json even when not required on partial content
* Update support for Acer S240L monitors inventory
* Don't inventory Surface Display as monitor on windows
* fix #1050: Fix Storage inventory support on FreeBSD
* Enhanced HP Dock Station inventory on windows setting expected serialnumber
* For Lxd virtualization, check lxd full path so test is correct on latest Ubuntu
* fix #1089: Fix Samsung LF24T450F monitor serialnumber
* PR #1076: Enhanced VmWare Desktop workstation virtualmachine support
* Updated usb.ids to 2025.12.13 version
* Updated pci.ids to 2026.01.31 version
* Bump Inventory task version to 1.23
remoteinventory:
* fix RedHat RHN systemid set as WINPRODID
* fix battery inventory on windows
* fix SessionID WsMan class support
* fix #1011: Fix crash on windows when running remote windows inventory
* Bump RemoteInventory task version to 1.9
netdiscovery/netinventory:
* fix #922: Add Radware Alteon Load Balancer support
* Add components even not only for networking type
* fix #924: Add Quantum storage library support
* fix #962: Fix Extreme Networks devices VLAN inventory
* fix #960: Add Juniper device MibSupport to merge virtual ports with physical
parent to better handle connections
* fix #989: Support Maintenance Cartridge level inventory on Epson printers
* fix #991: Add support for SNMPv3 sha224, sha256, sha384, sha512 auth protocols
and also aes192c and aes256c (Cisco version) priv protocols with Net::SNMP v6.0.1
dependency.
* fix #990: Add Tp-Link devices support and we also accept MAC address configured
as static for connected device discovery
* fix #900: Add Veritas NetBackup linux Appliance support
* fix #995: Update Sindoh printers support
* fix #959: Add Avocent KVM support
* Add FoxGate devices support
* Update Mikrotik devices support
* fix #1026: Update LLDP support fixing connection detection on few Cisco, Dell,
Mikrotik and TP-Link devices
* Add Tiesse devices support
* fix #1001: Add HTek phones support
* fix #1034: Add Hitachi Vantara storage devices support
* Add Fortinet module to report passive element of a HA stack
* Add support for Telco Systems T-Mark devices
* Add support for Nokia devices
* Add used scan ip in device ip list if missing
* Add D-Link devices support
* Fix glpi-netdiscovery and glpi-netinventory scripts to support semicolon or comma
in SNMP v3 password
* fix #1065: Invalid ips defined on FortiGate 100
* Support sysObjectID set as string
* Updated sysobject.ids
* Bump NetDiscovery task version to 7.0
* Bump NetInventory task version to 7.0
esx:
* Update glpi-esx man page to explain supported ESX/vCenter versions are indeed
the first versions we support and not the only ones
injector:
* Add support for --ca-cert-file and --ssl-fingerprint options
* PR #1051: Add support for --ssl-key-file option
toolbox:
* fix log output when following a running task
* Bump ToolBox plugin version to 1.7
collect:
* Refacto to modularize collect functions
* Bump Collect task version to 3.0
packaging:
* Update Windows packaging to use:
- Perl 5.42.0 built using Perl::Dist::StrawBerry perl library processing
- gcc 15.2.0posix-13.0.0-msvcrt-r5
- OpenSSL 3.5.5
- liblzma from xz 5.8.2
- libxml2 2.15.1
- msys2-base 20251213
- 7-Zip v25.01
- libiec61850 v1.6.1
- Fix Net::NBName warnings
- dmidecode 3.7
* Update MacOSX packages to use perl 5.42.0 and OpenSSL 3.5.5
* Add support for SSL_KEY_FILE option on windows installer
* Update linux snap packaging to use:
- Perl 5.42.0
- libiec61850 v1.6.1
* New packaging to provide libiec61850 v1.6.1 static library api support on linux:
- libiec61850-glpi-agent for debian packaging
- glpi-agent-iec61850 for rpm packaging
* win32: Updated GLPI-AgentMonitor to v1.4.2
1.15 Mon, 09 Jun 2025
core:
* Fix glpi-agent script listed supported categories
* Update deviceid on startup if assetname-support or even hostname changes
inventory:
* fix #917: Fix CrowdStrike Falcon antivirus support on linux
* Fix TeamViewer ID remote management inventory on linux
* PR #920: Added Astra Linux distro support in distro inventory
* PR #944: Fix MSSQL database inventory
* fix #947: Always support inventory task event for server target if not partial
* fix #919: Don't inventory Hyper-V virtualmachine as WSL
* fix #948: Fix fqdn on linux for assetname-support=3
* Updated pci.ids to 2025.06.09 version
* Bump Inventory task version to 1.22
remoteinventory:
* First try hostname command to find system fqdn and domain via ssh
* Bump RemoteInventory task version to 1.8
netdiscovery/netinventory:
* fix #896: Don't override manufacturer for devices with wrong sysobjectid
* fix #904: Fix page counters support for Xerox printers
* fix #946: Add Digipower PDUs support
* Updated sysobject.ids
* Bump NetDiscovery task version to 6.8
* Bump NetInventory task version to 6.8
esx:
* fix #941: Fix perl error on non existing perl ref
* Bump ESX task version to 2.14
injector:
* fix #921: Provide an agentid on json submission when sending content from stdin
toolbox:
* fix #783: Fix "No Valid Agentid set on HTTP Client" error on remote inventory tasks
* Fix scheduling not working when set on "tuesday"
* Bump ToolBox plugin version to 1.6
packaging:
* Update Windows packaging to use:
- gcc 15.1.0posix-12.0.0-msvcrt-r1
- Perl patch to fix CVE-2025-40909
- OpenSSL 3.5.0
- libxml2 2.14.3
- removed not required locale support
- dmidecode 3.6-update-1
- MSI installer and windows binaries are now signed
* Update MacOSX packages to use OpenSSL 3.5.0
* win32: Updated GLPI-AgentMonitor to v1.4.1
1.14 Thu, 17 Apr 2025
core:
* Refacto GLPI::Agent::Config to use generic defaults where necessary
* Refacto SNMP support: Support of a new "snmp-advanced-support.cfg" configuration file
to tune snmp support and permit glpi-agent to handle some rare cases.
* fix #880: Always requests PROLOG when tasks are forced on HTTPd UI before glpi-agent
know if server is a GLPI 10+ server
inventory:
* PR #876: Fix Microsoft Defender AV detection on Windows Server
* PR #884: Updated UUID detection on Solaris Global Zones
* Added support for CrowdStrike Falcon as antivirus on windows, macosx & linux
* fix #894: Fix Windows Store inventory for packages referenced to be installed
on a no more available account
* Fix PostgreSQL database inventory on windows
* Updated usb.ids to 2025.04.01 version
* Bump Inventory task version to 1.21
netdiscovery/netinventory:
* fix #840: Add Snom phones support with "snmp-advanced-support.cfg" file specific configuration
* Fix --entity option support in glpi-netinventory script
* Enhanced EMC support for Dell EMC devices with experimental SNMP OIDs
* fix #873: Enhanced support for Netgear stacked devices
* fix #897: Support Katusha printers supporting Printer-MIB in LinuxAppliance
* Added support for IP-MIB as fallback port ip discovery
* fix #900: Support Quantum Linux Appliance
* fix #818: Also detect HP printers on private OID
* Enhanced HP storages and printers support
* Updated sysobject.ids
* Bump NetDiscovery task version to 6.7
* Bump NetInventory task version to 6.7
collect:
* Fix REG_MULTI_SZ registry value type support
* Enhanced CSRF access denied support
* Bump Collect task version to 2.11
packaging:
* Default etc/snmp-advanced-support.cfg now included in packages
* On debian packaging, etc/toolbox-plugin.cfg is now included in glpi-agent-task-network
* Update Windows packaging to use:
- Patched Perl 5.40.2 built using Perl::Dist::StrawBerry perl library processing
- libxml2 2.14.1
- msys2-base 20250221
* Update MacOSX packages to use perl 5.40.2
1.13 Thu, 13 Mar 2025
core:
* fix #851: glpi-agent should also try to request CONTACT after GLPI 10+ answer on PROLOG
* Reworked target responses caching for event handling
* Support 'none' as proxy configuration to not try to use proxy set in environment variables
inventory:
* On windows, don't cache system is not 64 bits for the service lifetime as this can
be the result of a failed WMI call at the service start.
* Fix PostgreSQL inventory when password is given by dedicated databaseinventory plugin
* Add "required-category" configuration support to always include listed categories in
partial inventory generated while postponing full inventory. You can need to setup this
option if you're using GLPI rules based on possibly not changing inventory part. For
example, you can set it to "network" if you use rules to set asset location from asset
ip address or network.
* Add "itemtype" configuration support to handle requirement for servers supporting genericity
like GLPI 11+. Remark: This option is shared with remoteinventory task.
* fix #857: Support Microsoft Defender AV detection on Windows Server
* PR #869: Fix Proxmox/LXC memory conversion
* fix #868: Support SentinelOne Agent as AV on Windows Server
* Updated pci.ids to 2025.03.09 version
* Bump Inventory task version to 1.20
remoteinventory:
* Add "itemtype" configuration support to handle requirement for servers supporting genericity
like GLPI 11+. Remark: This option is shared with inventory task.
* Bump RemoteInventory task version to 1.7
netdiscovery/netinventory:
* PR #836 from @eduardomozart: Enhanced HP wireless printers by reporting wifi ports
as wireless
* Fix network ports ip support to avoid wrong allocation in rare cases, seen on a Ricoh printer
* Fix switch known macaddresses analysis
* fix #870: Add support for TP-Link Omada linux appliances
* Updated sysobject.ids
* Bump NetDiscovery task version to 6.6
* Bump NetInventory task version to 6.6
deploy:
* fix #854: Deploy task was not run when forced via httpd interface
* Bump Deploy task version to 3.5
esx:
* Add "esx-itemtype" configuration support to handle requirement for servers supporting genericity
like GLPI 11+.
* Bump ESX task version to 2.13
packaging:
* Update Windows packaging to use:
- Perl 5.40.1 built using Perl::Dist::StrawBerry perl library processing
- OpenSSL 3.4.1
- msys2-base 20241208
- liblzma from xz 5.6.4
- libxml2 2.13.6
- dmidecode 3.6
* Update MacOSX packages to use perl 5.40.1 and OpenSSL 3.4.1
* Fix Windows MSI installer server targets options panel:
- User and password are for Basic Authentication support
- Add OAuth Authentication fields (requires GLPI 11+)
1.12 Fri, 24 Jan 2025
core:
* fix #780: Avoid module loading path check error on windows if path includes a
parenthesis
* fix #789: Avoid warning on commandline about possible confusion when reading quoted
configuration value including a dash from configuration file
* fix #790: Fix server URL parsing when it doesn't include scheme
* Add glpi-version configuration support to handle inventory_format dependent features
* Handle /now request as an event. If inventory task run is triggered, it will now
always by default generate a full inventory. /now supports a query string with the
following possible values:
- partial=yes or partial=1 to force a partial inventory
- full=yes or full=1 to force a full inventory (the default)
- task=all (the default) or "all" replaced by a comma-separated list of tasks
- delay=0 (the default) can be set with the number of seconds to delay the tasks run
* Changes to index page from httpd interface:
- "Force an inventory" link text is replaced by "Force running all targets planned tasks"
to reflect the real behavior of the related action
- Added a "Force an inventory" to only trigger inventory task for all targets
- Targets list also show target planned tasks for trusted clients
* Refacto: Add Logger api to register a callback permitting to collect journaling events
* Fix ToolBox job events support
* Support ssl-keystore=system-ssl-ca on MacOSX to force using system known public CAs
* Cleanup server url in log and server vardir with automatic migration
inventory:
* Fix rare windows perl error during drives, ipv6 network or videos inventory
* Always keep disabled network interface on windows if it includes "vpn" string
in description
* Add glpi-version configuration support to handle inventory_format dependent features
- Remove check alerting on invalid storage interface for GLPI >= 10.0.4
* fix #811: Fix network interface inventory on lxc linux container, but also fix
few other cases where more interfaces are found due to interface name aliasing
* Fix --partial option when used with glpi-agent script
* Update getProcesses() API to permit filtering and report processes only in the same
namespace to not list containers processes. Refacto inventory module using this API.
* Add support for Trellix/McAfee agent as Antivirus on windows
* fix #827: Fix usb devices inventory on linux which have 0002 as PRODUCTID and are not root hub
* fix #652: Fix usb printers serialnumber on windows stripping leading zeros
* Updated pci.ids to 2025.01.13 version
* Updated usb.ids to 2025.01.14 version
* Bump Inventory task version to 1.19
remoteinventory:
* Store remote inventory part checksums in dedicated state files and support maintenance
event to cleanup state files older than 30 days
* Bump RemoteInventory task version to 1.6
netdiscovery/netinventory:
* fix #768: Added Aerohive devices support
* fix #769: Added Intelbras devices support
* don't send discovery xml to server target for remoteinventory task event initiated
from toolbox
* fix #781: Filter invalid firmware date on HP peripherals
* Added Raritan PDU devices support
* Updated sysobject.ids
* Added Avaya J100 series IP Phones support
* Updated Lexmark printers support
* Added Bachmann PDU devices support
* Added RNX PDU devices support
* Updated sysobject.ids
* Bump NetDiscovery task version to 6.5
* Bump NetInventory task version to 6.5
deploy:
* Fix checks on command run and clarify reason of success or failure. This fixes
"return code is not" and "command output doesn't contain" checks which was always
failing.
* fix #804: Don't scan network and broadcast addresses when using P2P
* Fix sha512 file checks to also accept provided digest in upper case
* Bump Deploy task version to 3.4
collect:
* Fix sha512 file check to also accep provided digest in upper case
* Change 'checkSumSHA2' file check meaning to compute sha256
* Add 'checkSumSHA256' params support for file checking to replace 'checkSumSHA2' one
and it is mandatory over its alias 'checkSumSHA2'
* Bump Collect task version to 2.10
esx:
* Support reporting of ESX virtualmachines ip and operating system. It requires
inventory_format schema v1.1.36 on server-side included in GLPI v10.0.17.
* Add --glpi-version option support to glpi-esx script
* Add guessed Total ESX memory size as memory component
* Bump ESX task version to 2.12
toolbox:
* Fix task log reset for enabled tasks
* Fix enabled jobs start up
* Fix event logger support to update counters even when debug is not enabled
* Bump ToolBox plugin version to 1.5
packaging:
* Update Windows MSI packing building process to use:
- OpenSSL 3.4.0
- libssh2 1.11.1
- libxml2 2.13.5
- libiconv 1.18
* Update MacOSX packages to use OpenSSL 3.4.0
* fix #816: Support --delaytime option in linux perl installer
* fix #797: Use option to disable local package gpg check when installing with dnf
in linux perl installer
1.11 Tue, 24 Sep 2024
core:
* Prevent certificates overwriting during export from Windows Keystore
* Add new option to specify or disable Windows KeyStore support
inventory:
* fix #700: Add TacticalRMM Remote_Mgmt support for MacOSX
* fix #711: Update Bitdefender AV support on Windows, and also update enable support
on Windows Server OS.
* fix #716: Don't fail on regexp error while running from a user folder which contains
a parenthesis
* fix #748: Don't include lastloggeduser in hardware section in partial inventory
if users section is being deleted after no change detected
* Updated pci.ids to 2024.09.20 version
* Bump Inventory task version to 1.18
netdiscovery/netinventory:
* Skip Konica printers firmware with "Registered" set as version
* Enhanced Hikvision devices support
* Updated sysobject.ids
* Bump NetDiscovery task version to 6.4
* Bump NetInventory task version to 6.4
deploy:
* Avoid perl syntax error when running Powershell script from Deploy task on windows
* Bump Deploy task version to 3.3
proxy-server-plugin:
* Always evaluate only_local_store to yes when glpi_protocol is set and no server is
configured so default required format remains json
* Bump Proxy plugin version to 2.5
packaging:
* Update Windows MSI packing building process to use:
- OpenSSL 3.3.2
- libxml2 2.13.4
* Update MacOSX packages to use OpenSSL 3.3.2
* Windows MSI installer now supports AGENTMONITOR_NEWTICKET_SCREENSHOT as option to
configure if GLPI-AgentMonitor should always create a screenshot on new ticket.
The default set value is 1 and means to always create a screenshot.
* Updated Windows packages 7-Zip commandline tools to v24.08
* win32: Updated GLPI-AgentMonitor to v1.4.0
1.10 Tue, 09 Jul 2024
core:
* Add support for OAuth2 authentication included in next main GLPI version.
* Reduce drift on run date keeping not randomized time reference
* fix: Don't reset run date in hourly run for unmanaged mode
* Control concurrent calls to not thread safe apis on windows
* Little optimization on GLPI::Agent::XML objects check
* Use task expiration for SSL CA certs cache expiration when running in task threads
inventory:
* fix #680: Enhanced disk storage serialnumber support on Windows (one more case)
* fix #565: Add support for Cortex XDR Antivirus on windows.
This is also an attempt to start antivirus support on Windows Server based on
service detection.
* Add support for Cortex XDR Antivirus on MacOSX and linux
* fix #700: Add TacticalRMM Remote_Mgmt module for windows and linux
* Update Solaris OS installation date support
* Updated pci.ids to 2024.06.23 version
* Updated usb.ids to 2024.07.04 version
* Bump Inventory task version to 1.17
netdiscovery/netinventory:
* Always send netinventory jobs end messages from runners
* Fixed tasks blocking on windows with core concurrent calls control
* Avoid to expire SSL CA certs cache in threads
* Bump NetDiscovery task version to 6.3
* Bump NetInventory task version to 6.3
deploy:
* For job with P2P enabled, don't use hard-coded 62354 port, but agent httpd-port
configuration to discover listening peer agents.
* For job with P2P enabled, use remote-workers configuration to optimize peers
discovery keeping 10 workers as minimum default.
* Bump Deploy task version to 3.2
esx:
* fix #691: Fix perl error while checking esx configuration template
* Bump ESX task version to 2.11
proxy-server-plugin:
* Enhanced SSL connection cleaning when combined with ssl-server-plugin
* Bump Proxy plugin version to 2.4
ssl-server-plugin:
* Don't use SSL_no_shutdown while closing connection after a fork to fully cleanup
connection on close.
* Bump SSL plugin version to 1.2
injector:
* Add support for OAuth2 authentication
packaging:
* Update Windows MSI packing building process to use:
- gcc 13.3.0posix-11.0.1-msvcrt-r1
- msys2-base 20240507
- OpenSSL 3.3.1
- liblzma from xz 5.6.2
- libxml2 2.13.2
* Update MacOSX packages to use OpenSSL 3.3.1
* fix #619: Get rid of Archive::Extract dependency as upstream module has not been
updated since years and has been removed from RockyLinux 9. The module is not
embedded with few cleanup and adapted to GLPI Agent usage context.
* win32: Updated GLPI-AgentMonitor to v1.3.1
* Add --wait option support to AppImage installer. This option can only be used
for unmanaged cron mode to force randomization of tasks run.
1.9 Tue, 28 May 2024
inventory:
* fix #676: Always include OPERATINGSYSTEM section if SOFTWARES one is in partial
inventory as this is required by GLPI. This fixes issues with full-inventory-postpone
new feature introduced in 1.8 and with --partial glpi-inventory script option.
* fix #673: Fix support of network port type on MacOSX
* fix #675: Enhanced MSSQL database inventory on Windows by discovering installed
instances.
* fix #680: Enhanced disk storage serialnumber support on Windows
* Bump Inventory task version to 1.16
remoteinventory:
* fix special characters handling in passwords
* Bump RemoteInventory task version to 1.5
netdiscovery/netinventory:
* fix #642: Support snmp-retries configuration parameter to set snmp requests
maximum retries in place of the default of 0.
glpi-netdiscovery & glpi-netinventory supports --retries option.
* Bump NetDiscovery task version to 6.2
* Bump NetInventory task version to 6.2
deploy:
* Fix: Avoid possible crash on windows while using WTS for User Interactions
* Bump Deploy task version to 3.1
toolbox:
* fix #582, #596, #671: UTF-8 and special characters are now supported in user and
password for RemoteInventory credentials
* Bump ToolBox plugin version to 1.4
packaging:
* Fix: Call SetDllDirectory system API to help finding provided DLL libraries on windows
* Fix: Fix OpenSSL to use zlib1__.dll provided library
* Fix: full-inventory-postpone not fully integrated in registry by windows MSI installer
1.8 Wed, 15 May 2024
core:
* Parallel::ForkManager must not use more than 60 workers on MSWin32 due to a
perl limitation on this operating system
* Refacto events management to permit a task to trigger another one
* IPC long messages only have size limitation on windows
* Add new IPC message type to handle too long IPC_EVENT messages on windows
* Refacto XML parsing of plist files on MacOSX
inventory:
* Fix network default route discovery on linux
* Fix virtualmachine inventory on computer providing vmware-cmd command
* fix #589: Make additional-content option works as before when merging a json list
* Add new 'full-inventory-postpone' option which default to 14. The agent will try
to submit partial inventory with only changed categories to limit the inventory
size most of the time. The option can only be used with GLPI 10 and its JSON format.
* Update inventory to be generated in a consistent order as required by new
'full-inventory-postpone' option to detect changes
* Update glpi-agent script with --full-inventory-postpone option support
* Update glpi-agent script with --full option support to force a full inventory
* fix #611: Wrong bios value as array on win32 bios when using WMI in proxmox vm
* fix #609: Fix rustdesk remote management version analysis
* fix #630: Enhanced support for linux on Raspberry Pi 3
* Fix ioreg command output parsing on MacOSX to avoid Deep Recursion perl warning
* Fix software publisher analysis in software inventory on MacOSX
* Enhance #430 fix: Don't make edid mandatory if monitor SERIAL & CAPTION are still
found. This fixes monitors inventory on Apple M1.
* Fix MacOSX software arch should be set in ARCH field
* Fix Lenovo T24v-10 monitor serial number inventory
* Add base code to support usb device update on MSWin32, mainly to report expected
or fix serialnumber for specific device with well-know method to get required
datas. This base code is required to fix #650.
* fix #651: Detect missing prefix for BenQ monitors serialnumber
* Updated pci.ids to 2024.05.14 version
* Updated usb.ids to 2024.03.18 version
remoteinventory:
* Limit the number of attempts and reported errors when libssh2 fails but ssh command
works. Libssh2 attempts will be disabled for a minute on failed attempt.
* Clarify debug, warning and error messages
netdiscovery/netinventory:
* Keep device mac address found via snmp during netdiscovery as this is the one
which will be reported during netinventory. This will fix duplication issues
while using "(by mac)" import & update rules in GLPI.
* fix #574: Updated page counters support for Ricoh printers
Also updated with refacto in dedicated MibSupport module page counters support
for Canon printers
Add scanned counter on Ricoh
Add page counters support for Xerox and Konica printers
* Added page counters support for Canon LPB7660 models
* Added Konica printer firmwares support
* Prevent multi-threading issues on win32 due to Netbios datas parsing
* Enhanced Brother devices support
* When looking for privateoid rule in MibSupport search, the rule must match on
defined value, even if the private oid returns zero.
* fix #590: Add Pantum printer support
* Fix RemoteInventory not run during netscan if any of the other tests is failing,
meaning RemoteInventory was functionnal only if at least ping works or the
targeted computer was in the same network (arp works).
* Add support for Socomec PDU
* fix #653: Some values like LOCATION or CONTACT can be wrongly encoded
* Add Dell MibSupport dedicated module
* PR #657: Improve Ubnt serial and SSID detection, thanks to @eduardomozart
* PR #658: Improve Aruba SSID detection, thanks to @eduardomozart
* Updated sysobject.ids
deploy:
* Force agent to run a partial software inventory after the deploy task is done
if this has been set as a requirement in any job sent by the server
proxy-server-plugin:
* Fix issues due to wrong support of long IPC messages
toolbox:
* fix #532: Make libssh2 use the right place when looking for known_hosts file
on windows
* Fix RemoteInventory can not be started during netscan
packaging:
* [SECURITY] New fix for CVE-2024-28240: A local user could modify the GLPI Agent
configuration to gain higher privileges if installed on windows with MSI packaging.
The fix is now based on our own CustomAction Dll which not rely on our capacity
to run an external command requiring elevated privilege.
So it is far more robust than previous one.
* Update Windows MSI packing building process to use:
- gcc 13.2.0posix-18.1.5-11.0.1-msvcrt-r8
- msys2-base 20240113
- zlib 1.3.1
- OpenSSL 3.2.1
- libssh2 1.11.0
- liblzma from xz 5.4.6
- libxml2 2.12.7
- StrawBerry Perl 5.38.2
* Windows MSI installer is only provided for x64
* Fix MSI "Back" button on "VerifyReady" dialog in Repair or Remove mode
* Updated Windows packages 7-Zip commandline tools to v23.01
* Fix the way Glpi-AgentMonitor is stopped during upgrade to prevent service
installation issues
* Remove Deploy & Collect tasks from Typical installation on windows
* On MacOSX, by default, only enable inventory task on MacOSX. You'll have now to
explicitely enable required tasks in an "etc/conf.d" ".cfg" file.
* Windows MSI installer now supports AGENTMONITOR_NEWTICKET_URL as option to configure
GLPI-AgentMonitor new ticket url.
* win32: Updated GLPI-AgentMonitor to v1.3.0
1.7.3 Wed, 03 Apr 2024
packaging:
* Fix LOCAL was set to installation folder during windows MSI installation v1.7.2,
even if LOCAL was not used or it was set empty in installer UI
* Enhanced CVE-2024-28241 fix to only apply folder security if install folder and
eventually LOCAL folder are subfolders of system "Program Files" folder
* Fix MSI to reuse InstallDir set in registry on upgrade
1.7.2 Mon, 25 Mar 2024
packaging:
* [SECURITY] Fix CVE-2024-28241: A local user could modify the GLPI-Agent installation
to gain higher privileges, but only on windows with MSI packaging when GLPI Agent
is not installed in the default installation folder
* [SECURITY] Fix CVE-2024-28240: A local user could modify the GLPI Agent configuration
to gain higher privileges if installed on windows with MSI packaging
* Update MacOSX to use perl 5.38.2, OpenSSL 3.2.1 and zlib 1.3.1
1.7.1 Fri, 22 Dec 2023
core:
* fix #567: Test ssl-fingerprint option as an empty array to still try to export
windows keystore or macosx keychain for SSL certificate validation checks
This fixes SSL connection issues appeared with 1.7 release on windows & macosx.
1.7 Thu, 21 Dec 2023
core:
* Make alt2canonical() always return a mac address in lower case if found one
* Fix HTTP::Client API to support timeout update
* Move runPowerShell() API remote case support in RemoteInventory API
* Update httpd default page to show targets id and server url or local path only
for trusted clients
* Update local target API to support getFullPath() & setFullPath() calls
* Handle '.' local target when run as a service to save inventories in vardir
* Reduce internal IPC event supported size
* To optimize IPC support, read all event messages before triggering events
* fix #560: Skip export of keystore on win32 or keychain on MacOSX if any one of
ca-cert-file, ca-cert-dir or ssl-fingerprint options is used
inventory:
* PR #531: Add SentinelOne Antivirus support on Linux, thanks to @MarcSamD
* Feature: Update support assetname-support as option for agent on most unix
if 1 (the default), the short hostname is used as asset name
if 2, the as-is hostname (can be fqdn) is used as asset name
if 3, the fqdn hostname is used as asset name
this feature does not apply on MacOS or Windows
this feature now works for remote ssh and for option 3, it requires perl installed
on targeted computer and perl mode enabled on defined remote.
* Feature: Make assetname-support option also works to compute agent deviceid when
unknown
* Fix video card memory inventory on win32
* fix #554: Network inventory may be missing on linux with faulty default route parsing
* Add network speed discovery for wireless network devices on linux
* Fix rpm software summary encoding for rpm-based software inventory
* Bump Inventory task version to 1.15
remoteinventory:
* Fix connection timeout API to support timeout update
* Update win32 fqdn inventory
* Add timezone inventory support
* Fix OS FQDN and domain for ssh remote inventory
* Add printers inventory support for ssh remote inventory with perl mode
* Fix error preventing software inventory of windows remote from a win32 agent
* Fix typo in ConnectTimeout option use with ssh command mode
* Add '--stricthostkeychecking' option to glpi-remote, supported values are the same
than StrictHostKeyChecking ssh option (see ssh_config man page), default to 'accept-new'.
* Bump RemoteInventory task version to 1.4
netdiscovery/netinventory:
* Enhanced Toshiba printers support
* Fix LLDP support
* Update timeout to backend-collect-timeout configuration when scanning ESX or
RemoteInventory after a successful scan requested by ToolBox
* Fix possible concurrency error leading to an unrecoverable blocked task
* Use new local target API to set expected saving folder
* Bump NetDiscovery task version to 6.1
* Bump NetInventory task version to 6.1
* Updated sysobject.ids
esx:
* Fix first connection timeout support
* Added --timeout option support to glpi-esx
* Fix wrong 'n/a' ko status report to tasks managed by GLPI Inventory plugin
* Bump ESX task version to 2.10
toolbox:
* fix #533: Fix Toolbox export buttons in inventory results
* Fix wrong remote inventory results when using a short timeout for quickier detection
* Handle agent folder as vardir folder when agent is running as a service
* Fix netscan task fails to submit remote inventories with JSON protocol
* Fix locking on logger IPC events when running netscan for server target on win32
* Bump ToolBox plugin version to 1.3
injector:
* fix #537: Make -x, --xml-ua & --json-ua options equivalent and update help text
packaging:
* Update MacOSX packages to use OpenSSL 3.2.0
* Update MacOSX packaging to use "com.teclib.glpi-agent" as AppID and service identifier
* Fix linux installer typo preventing configuration update when required
1.6.1 Fri, 17 Nov 2023
core:
* fix #530: Also include Mozilla::CA default store when including windows keystore
or macosx keychains certificates as IO::Socket::SSL can't no more use them since
LWP::Protocol::https update.
This fixes SSL connection issues appeared with 1.6 release.
1.6 Wed, 15 Nov 2023
core:
* Rework of agent events support
* Add support for tasks cache & tasks events
* Support forbid_not_trusted option for all httpd server plugins. The option is set to "no"
by default to keep compatibility with older configurations. If set to "yes", only trusted
ips will be authorized to access related httpd plugin features.
* fix #434: Fix XML encoding when sent by OCS client code, thanks to Nikolay Chizhov (@nchizhov)
* fix #438: Fix forking when required on win32 for Proxy & ToolBox plugins, and so
this fixes IPC support on win32
* fix #438: Also load XML::LibXML as late as possible to avoid multi-threading issues on win32
* Make http server supports CORS protocol for /now requests
* Update getCanonicalSize() to recognize kibibyte, mebibyte, gibibyte, tebibyte
pebibyte and exbibyte units
* Always report first found route in unix getRoutingTable() API
* fix: Update GLPI::Agent::XML class to make calls in a dedicated thread on win32