Package glpi: Information

    Source package: glpi
    Version: 10.0.24-alt1
    Build time:  Mar 28, 2026, 01:08 AM
    Category: Networking/Other
    Report package bug
    License: GPLv3
    Summary: IT and asset management software
    Description: 
    GLPI is the Information Resource-Manager with an additional Administration-
    Interface.
    You can use it to build up a database with an inventory for your company
    (computer, software, printers...).
    It has enhanced functions to make the daily life for the administrators easier,
    like a job-tracking-system with mail-notification and methods to build a
    database with basic information about your network-topology.

    List of RPM packages built from this SRPM:
    glpi (noarch)
    glpi-apache2 (noarch)
    glpi-php8.1 (noarch)
    glpi-php8.2 (noarch)
    glpi-php8.3 (noarch)
    glpi-php8.4 (noarch)

    Maintainer: Pavel Zilke

    List of contributors:
    Pavel Zilke

      1. rpm-macros-webserver-common

    Last changed


    March 25, 2026 Pavel Zilke 10.0.24-alt1
    - New version 10.0.24 (ALT #58340)
    - Security fixes:
    - This release fixes a security issue that has been recently discovered. Update is recommended!
     + CVE-2026-25932 : Stored XSS in Supplier
     + CVE-2026-29047 : Authenticated SQL Injection
    Feb. 3, 2026 Pavel Zilke 10.0.23-alt1
    - New version 10.0.23
    - This release fixes a security issue that has been recently discovered. Update is recommended!
     + CVE-2026-22044 : Authenticated SQL Injection
     + CVE-2026-23624 : Session stealing on externally authenticated user change
    Dec. 27, 2025 Pavel Zilke 10.0.22-alt1
    - New version 10.0.22
    - Yesterday, 10.0.21 was shipped, but soon after a few annoying regressions has been detected, and so a need for new release.
    - This release fixes a security issue that has been recently discovered. Update is recommended!
    - Security fixes:
     + CVE-2025-64516 : Unauthorized access to documents
     + CVE-2025-59935 : Unauthenticated Stored XSS through the inventory endpoint
     + CVE-2025-64520 : Unauthorized access to Knowledge Base items through the API