This is a security release, upgrading is recommended
You will find below the list of security issues fixed in this bugfixes version:
- [SECURITY - Critical] External authentication bypass
- [SECURITY - High] Ticket category reflected XSS
- [SECURITY - High] Reflected XSS in users authorization list
- [SECURITY - High] Privilege escalation by entity administrator
- [SECURITY - High] Stored XSS on VLAN
- [SECURITY - High] Reflected XSS in form header
- [SECURITY - High] Stored XSS in dashboards
- [SECURITY - Medium] Administrator account deactivation by unauthorized user
The full changelog is available for more details.
We would like to thank all people who contributed to this new version and all those who contributes regularly to the GLPI project!
Regards.