<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="14">
<package pkgid="9874e15855bc0d3f080380caa5701c9b24c8e7cab6237a2816df24c50e030a7d" name="glpi" arch="noarch">
  <version epoch="0" ver="10.0.25" rel="1.el7_9"/>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 10.0.16-1" date="1720094400">- Update to 10.0.16
  see https://github.com/glpi-project/glpi/milestone/68?closed=1
- This is a security release, upgrading is recommended:
  [SECURITY - high] Account takeover via SQL Injection in AJAX scripts (CVE-2024-37148)
  [SECURITY - high] Remote code execution through the plugin loader (CVE-2024-37149)
  [SECURITY - moderate] Authenticated file upload to restricted tickets (CVE-2024-37147)
- Also, here is a short list of main changes done in this version:
  [FIX] Freesize database field was not correctly migrated
  [FIX] Network inventoried stacked switches had all the same name
  [FIX] Remove monitors from inventory when no monitor is present
  [FIX] Import location hierarchy from LDAP and Inventory</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 10.0.16-2" date="1729857600">- Fix patch for Fedora 41</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 10.0.17-1" date="1730980800">- Update to 10.0.17
  see https://github.com/glpi-project/glpi/milestone/68?closed=1
- This is a security release, upgrading is recommended:
  [SECURITY - critical] Unauthenticated session hijacking (CVE-2024-50339)
  [SECURITY - high] Account takeover through SQL injection (CVE-2024-40638)
  [SECURITY - high] Users email enumeration by unauthenticated user (CVE-2024-43416)
  [SECURITY - high] Account takeover without privilege escalation through the API (CVE-2024-47758)
  [SECURITY - high] Account takeover via the password reset feature (CVE-2024-47761)
  [SECURITY - high] Account takeover via API (CVE-2024-47760)
  [SECURITY - high] Insecure account deletion by authenticated user (CVE-2024-48912)
  [SECURITY - moderate] Authenticated SQL Injection (CVE-2024-45608)
  [SECURITY - moderate] Authenticated SQL injection in ticket form (CVE-2024-41679)
  [SECURITY - moderate] Stored XSS in RSS feeds (CVE-2024-45611)
  [SECURITY - moderate] Stored XSS via document upload (CVE-2024-47759)
  [SECURITY - moderate] Multiple reflected XSS (CVE-2024-43417, CVE-2024-43418, CVE-2024-45609, CVE-2024-45610, CVE-2024-41678)</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 10.0.18-1" date="1740312000">- Update to 10.0.18
  see https://github.com/glpi-project/glpi/milestone/70?closed=1
- This is a security release, upgrading is recommended:
  [SECURITY - high] Unauthenticated SQL injection through the inventory endpoint (CVE-2025-24799)
  [SECURITY - high] Authenticated Remote code execution (CVE-2025-24801)
  [SECURITY - high] SQL injection through the rules configuration (CVE-2025-21619)
  [SECURITY - moderate] Open Redirection (CVE-2024-11955)
  [SECURITY - moderate] Reflected XSS in search page (CVE-2025-21627)
  [SECURITY - moderate] Exposure of sensitive information in the status.php endpoint (CVE-2025-21626)
  [SECURITY - moderate] Plugins disabled by unauthenticated user (CVE-2025-23024)
  [SECURITY - moderate] Unauthorized authentication by email using the OAuthIMAP plugin (CVE-2025-23046)
  [SECURITY - moderate] Unauthorized access to debug mode (CVE-2025-25192)</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 10.0.19-1" date="1753185600">- Update to 10.0.19
  see https://github.com/glpi-project/glpi/milestone/73?closed=1
- This is a security release, upgrading is recommended:
  [SECURITY - MODERATE] Stored XSS on projects kanban (CVE-2025-27514)
  [SECURITY - LOW] Blind SSRF in RSS feeds and planning (CVE-2025-52567)
  [SECURITY - MODERATE] XSS and open redirection in planning (CVE-2025-52897)
  [SECURITY - MODERATE] Mail receiver credentials exfiltration (CVE-2025-53008)
  [SECURITY - MODERATE] Reservations modification by unauthorized user (CVE-2025-53357)
  [SECURITY - LOW] Access to unallowed items information through external links (CVE-2025-53113)
  [SECURITY - MODERATE] Data exposure to non allowed users (CVE-2025-53111)
  [SECURITY - MODERATE] Data removal from allowed users (CVE-2025-53112)
  [SECURITY - HIGH] Unauthorized rules execution order update (CVE-2025-53105)</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 10.0.20-1" date="1758801600">- Update to 10.0.20
- This is bugfix release, upgrading is recommended:
  see https://github.com/glpi-project/glpi/releases/tag/10.0.20
- Update glpi-httpd.conf with deny access to non-public files</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 10.0.22-1" date="1765195200">- Update to 10.0.22 (replace 10.0.21)
- This is a security release, upgrading is recommended:
  see https://github.com/glpi-project/glpi/milestone/76?closed=1
  [SECURITY - HIGH] Unauthorized access to documents (CVE-2025-64516)
  [SECURITY - MODERATE] Unauthenticated Stored XSS through the inventory endpoint (CVE-2025-59935)
  [SECURITY - MODERATE] Unauthorized access to Knowledge Base items through the API (CVE-2025-64520)
- Many bug fixes have also been made</changelog>
  <changelog author="Alan Flambard &lt;alan.flambard@flambard.ovh&gt; - 10.0.23-1" date="1769601600">- Update to 10.0.23
- This is a security release, upgrading is recommended:
  [SECURITY - MODERATE] Authenticated SQL Injection (CVE-2026-22044)
  [SECURITY - MODERATE] Session stealing on externally authenticated user change (CVE-2026-23624)</changelog>
  <changelog author="Alan Flambard &lt;alan.flambard@flambard.ovh&gt; - 10.0.24-1" date="1772539200">- Update to 10.0.24
- This is a security release, upgrading is recommended:
  [SECURITY - High] Stored XSS in Supplier (CVE-2026-25932)
  [SECURITY - High] Authenticated SQL Injection (CVE requested)</changelog>
  <changelog author="Alan Flambard &lt;alan.flambard@flambard.ovh&gt; - 10.0.25-1" date="1777809600">- Update to 10.0.25</changelog>
</package>
<package pkgid="7e8861b3fa982656b1ba53873de4ae082d87c92dee012faaa6bb5e1366d2988e" name="glpi" arch="src">
  <version epoch="0" ver="10.0.25" rel="1.el7_9"/>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 10.0.16-1" date="1720094400">- Update to 10.0.16
  see https://github.com/glpi-project/glpi/milestone/68?closed=1
- This is a security release, upgrading is recommended:
  [SECURITY - high] Account takeover via SQL Injection in AJAX scripts (CVE-2024-37148)
  [SECURITY - high] Remote code execution through the plugin loader (CVE-2024-37149)
  [SECURITY - moderate] Authenticated file upload to restricted tickets (CVE-2024-37147)
- Also, here is a short list of main changes done in this version:
  [FIX] Freesize database field was not correctly migrated
  [FIX] Network inventoried stacked switches had all the same name
  [FIX] Remove monitors from inventory when no monitor is present
  [FIX] Import location hierarchy from LDAP and Inventory</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 10.0.16-2" date="1729857600">- Fix patch for Fedora 41</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 10.0.17-1" date="1730980800">- Update to 10.0.17
  see https://github.com/glpi-project/glpi/milestone/68?closed=1
- This is a security release, upgrading is recommended:
  [SECURITY - critical] Unauthenticated session hijacking (CVE-2024-50339)
  [SECURITY - high] Account takeover through SQL injection (CVE-2024-40638)
  [SECURITY - high] Users email enumeration by unauthenticated user (CVE-2024-43416)
  [SECURITY - high] Account takeover without privilege escalation through the API (CVE-2024-47758)
  [SECURITY - high] Account takeover via the password reset feature (CVE-2024-47761)
  [SECURITY - high] Account takeover via API (CVE-2024-47760)
  [SECURITY - high] Insecure account deletion by authenticated user (CVE-2024-48912)
  [SECURITY - moderate] Authenticated SQL Injection (CVE-2024-45608)
  [SECURITY - moderate] Authenticated SQL injection in ticket form (CVE-2024-41679)
  [SECURITY - moderate] Stored XSS in RSS feeds (CVE-2024-45611)
  [SECURITY - moderate] Stored XSS via document upload (CVE-2024-47759)
  [SECURITY - moderate] Multiple reflected XSS (CVE-2024-43417, CVE-2024-43418, CVE-2024-45609, CVE-2024-45610, CVE-2024-41678)</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 10.0.18-1" date="1740312000">- Update to 10.0.18
  see https://github.com/glpi-project/glpi/milestone/70?closed=1
- This is a security release, upgrading is recommended:
  [SECURITY - high] Unauthenticated SQL injection through the inventory endpoint (CVE-2025-24799)
  [SECURITY - high] Authenticated Remote code execution (CVE-2025-24801)
  [SECURITY - high] SQL injection through the rules configuration (CVE-2025-21619)
  [SECURITY - moderate] Open Redirection (CVE-2024-11955)
  [SECURITY - moderate] Reflected XSS in search page (CVE-2025-21627)
  [SECURITY - moderate] Exposure of sensitive information in the status.php endpoint (CVE-2025-21626)
  [SECURITY - moderate] Plugins disabled by unauthenticated user (CVE-2025-23024)
  [SECURITY - moderate] Unauthorized authentication by email using the OAuthIMAP plugin (CVE-2025-23046)
  [SECURITY - moderate] Unauthorized access to debug mode (CVE-2025-25192)</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 10.0.19-1" date="1753185600">- Update to 10.0.19
  see https://github.com/glpi-project/glpi/milestone/73?closed=1
- This is a security release, upgrading is recommended:
  [SECURITY - MODERATE] Stored XSS on projects kanban (CVE-2025-27514)
  [SECURITY - LOW] Blind SSRF in RSS feeds and planning (CVE-2025-52567)
  [SECURITY - MODERATE] XSS and open redirection in planning (CVE-2025-52897)
  [SECURITY - MODERATE] Mail receiver credentials exfiltration (CVE-2025-53008)
  [SECURITY - MODERATE] Reservations modification by unauthorized user (CVE-2025-53357)
  [SECURITY - LOW] Access to unallowed items information through external links (CVE-2025-53113)
  [SECURITY - MODERATE] Data exposure to non allowed users (CVE-2025-53111)
  [SECURITY - MODERATE] Data removal from allowed users (CVE-2025-53112)
  [SECURITY - HIGH] Unauthorized rules execution order update (CVE-2025-53105)</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 10.0.20-1" date="1758801600">- Update to 10.0.20
- This is bugfix release, upgrading is recommended:
  see https://github.com/glpi-project/glpi/releases/tag/10.0.20
- Update glpi-httpd.conf with deny access to non-public files</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 10.0.22-1" date="1765195200">- Update to 10.0.22 (replace 10.0.21)
- This is a security release, upgrading is recommended:
  see https://github.com/glpi-project/glpi/milestone/76?closed=1
  [SECURITY - HIGH] Unauthorized access to documents (CVE-2025-64516)
  [SECURITY - MODERATE] Unauthenticated Stored XSS through the inventory endpoint (CVE-2025-59935)
  [SECURITY - MODERATE] Unauthorized access to Knowledge Base items through the API (CVE-2025-64520)
- Many bug fixes have also been made</changelog>
  <changelog author="Alan Flambard &lt;alan.flambard@flambard.ovh&gt; - 10.0.23-1" date="1769601600">- Update to 10.0.23
- This is a security release, upgrading is recommended:
  [SECURITY - MODERATE] Authenticated SQL Injection (CVE-2026-22044)
  [SECURITY - MODERATE] Session stealing on externally authenticated user change (CVE-2026-23624)</changelog>
  <changelog author="Alan Flambard &lt;alan.flambard@flambard.ovh&gt; - 10.0.24-1" date="1772539200">- Update to 10.0.24
- This is a security release, upgrading is recommended:
  [SECURITY - High] Stored XSS in Supplier (CVE-2026-25932)
  [SECURITY - High] Authenticated SQL Injection (CVE requested)</changelog>
  <changelog author="Alan Flambard &lt;alan.flambard@flambard.ovh&gt; - 10.0.25-1" date="1777809600">- Update to 10.0.25</changelog>
</package>
<package pkgid="76b7677c8b4f57019899bbc29da7b4395c35cf5bb1249f364d98d791170e2fc7" name="glpi-agent" arch="noarch">
  <version epoch="0" ver="1.15" rel="1.el7_9"/>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.7.2-1" date="1711368000">- Version 1.7.2</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.7.3-1" date="1712232000">- Version 1.7.3</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.8-1" date="1715860800">- Version 1.8
- Add new lib/GLPI/Agent/Tools/USB* files</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.9-1" date="1716984000">- Version 1.9</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.10-1" date="1725883200">- Version 1.10
- Add new lib/GLPI/Agent/Tools/Archive.pm file</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.11-1" date="1727352000">- Version 1.11</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.11-2" date="1737547200">- Add missing perl(Net::NBName) dependency #Eduardo Mozarto de Oliveira
- Add missing Requires dependancy for EL7  #Eduardo Mozarto de Oliveira</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.12-1" date="1741003200">- Version 1.12</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.14-1" date="1745409600">- Version 1.14</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.15-1" date="1749556800">- Version 1.15</changelog>
</package>
<package pkgid="bbf0ccea163efd6e3cf9d4dac435293dc1912329f3fd8c2cf4244a8c564fade9" name="glpi-agent" arch="src">
  <version epoch="0" ver="1.15" rel="1.el7_9"/>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.7.2-1" date="1711368000">- Version 1.7.2</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.7.3-1" date="1712232000">- Version 1.7.3</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.8-1" date="1715860800">- Version 1.8
- Add new lib/GLPI/Agent/Tools/USB* files</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.9-1" date="1716984000">- Version 1.9</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.10-1" date="1725883200">- Version 1.10
- Add new lib/GLPI/Agent/Tools/Archive.pm file</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.11-1" date="1727352000">- Version 1.11</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.11-2" date="1737547200">- Add missing perl(Net::NBName) dependency #Eduardo Mozarto de Oliveira
- Add missing Requires dependancy for EL7  #Eduardo Mozarto de Oliveira</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.12-1" date="1741003200">- Version 1.12</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.14-1" date="1745409600">- Version 1.14</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.15-1" date="1749556800">- Version 1.15</changelog>
</package>
<package pkgid="765a001f352532d8791a5a8ec66bd042a1ea3e6340c86382462c4f9b52382093" name="glpi-agent-cron" arch="noarch">
  <version epoch="0" ver="1.15" rel="1.el7_9"/>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.7.2-1" date="1711368000">- Version 1.7.2</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.7.3-1" date="1712232000">- Version 1.7.3</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.8-1" date="1715860800">- Version 1.8
- Add new lib/GLPI/Agent/Tools/USB* files</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.9-1" date="1716984000">- Version 1.9</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.10-1" date="1725883200">- Version 1.10
- Add new lib/GLPI/Agent/Tools/Archive.pm file</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.11-1" date="1727352000">- Version 1.11</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.11-2" date="1737547200">- Add missing perl(Net::NBName) dependency #Eduardo Mozarto de Oliveira
- Add missing Requires dependancy for EL7  #Eduardo Mozarto de Oliveira</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.12-1" date="1741003200">- Version 1.12</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.14-1" date="1745409600">- Version 1.14</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.15-1" date="1749556800">- Version 1.15</changelog>
</package>
<package pkgid="4ce58ff4902824224cc2030fc35d287e01d31b40306d183fe356cdd2b4be7401" name="glpi-agent-task-collect" arch="noarch">
  <version epoch="0" ver="1.15" rel="1.el7_9"/>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.7.2-1" date="1711368000">- Version 1.7.2</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.7.3-1" date="1712232000">- Version 1.7.3</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.8-1" date="1715860800">- Version 1.8
- Add new lib/GLPI/Agent/Tools/USB* files</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.9-1" date="1716984000">- Version 1.9</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.10-1" date="1725883200">- Version 1.10
- Add new lib/GLPI/Agent/Tools/Archive.pm file</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.11-1" date="1727352000">- Version 1.11</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.11-2" date="1737547200">- Add missing perl(Net::NBName) dependency #Eduardo Mozarto de Oliveira
- Add missing Requires dependancy for EL7  #Eduardo Mozarto de Oliveira</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.12-1" date="1741003200">- Version 1.12</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.14-1" date="1745409600">- Version 1.14</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.15-1" date="1749556800">- Version 1.15</changelog>
</package>
<package pkgid="720aa29f5605a9217b68be73cce1f0d92051d0d29eabbb07f5098b6749bdd381" name="glpi-agent-task-deploy" arch="noarch">
  <version epoch="0" ver="1.15" rel="1.el7_9"/>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.7.2-1" date="1711368000">- Version 1.7.2</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.7.3-1" date="1712232000">- Version 1.7.3</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.8-1" date="1715860800">- Version 1.8
- Add new lib/GLPI/Agent/Tools/USB* files</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.9-1" date="1716984000">- Version 1.9</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.10-1" date="1725883200">- Version 1.10
- Add new lib/GLPI/Agent/Tools/Archive.pm file</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.11-1" date="1727352000">- Version 1.11</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.11-2" date="1737547200">- Add missing perl(Net::NBName) dependency #Eduardo Mozarto de Oliveira
- Add missing Requires dependancy for EL7  #Eduardo Mozarto de Oliveira</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.12-1" date="1741003200">- Version 1.12</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.14-1" date="1745409600">- Version 1.14</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.15-1" date="1749556800">- Version 1.15</changelog>
</package>
<package pkgid="e141dee6d1a8b1cbedcca8e54ff6a74f6ee7bf9e16821d7f5d5628791c6f78c8" name="glpi-agent-task-esx" arch="noarch">
  <version epoch="0" ver="1.15" rel="1.el7_9"/>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.7.2-1" date="1711368000">- Version 1.7.2</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.7.3-1" date="1712232000">- Version 1.7.3</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.8-1" date="1715860800">- Version 1.8
- Add new lib/GLPI/Agent/Tools/USB* files</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.9-1" date="1716984000">- Version 1.9</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.10-1" date="1725883200">- Version 1.10
- Add new lib/GLPI/Agent/Tools/Archive.pm file</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.11-1" date="1727352000">- Version 1.11</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.11-2" date="1737547200">- Add missing perl(Net::NBName) dependency #Eduardo Mozarto de Oliveira
- Add missing Requires dependancy for EL7  #Eduardo Mozarto de Oliveira</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.12-1" date="1741003200">- Version 1.12</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.14-1" date="1745409600">- Version 1.14</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.15-1" date="1749556800">- Version 1.15</changelog>
</package>
<package pkgid="4eaa3e681e5814de84aa592b3e97d163c455c4a3114de5b194beac26122a65dc" name="glpi-agent-task-network" arch="noarch">
  <version epoch="0" ver="1.15" rel="1.el7_9"/>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.7.2-1" date="1711368000">- Version 1.7.2</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.7.3-1" date="1712232000">- Version 1.7.3</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.8-1" date="1715860800">- Version 1.8
- Add new lib/GLPI/Agent/Tools/USB* files</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.9-1" date="1716984000">- Version 1.9</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.10-1" date="1725883200">- Version 1.10
- Add new lib/GLPI/Agent/Tools/Archive.pm file</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.11-1" date="1727352000">- Version 1.11</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.11-2" date="1737547200">- Add missing perl(Net::NBName) dependency #Eduardo Mozarto de Oliveira
- Add missing Requires dependancy for EL7  #Eduardo Mozarto de Oliveira</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.12-1" date="1741003200">- Version 1.12</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.14-1" date="1745409600">- Version 1.14</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.15-1" date="1749556800">- Version 1.15</changelog>
</package>
<package pkgid="95c66be90b1c927bbf55361f41b1be8de3d43c22d87b3fdd2914a4aec8e776c3" name="glpi-agent-task-wakeonlan" arch="noarch">
  <version epoch="0" ver="1.15" rel="1.el7_9"/>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.7.2-1" date="1711368000">- Version 1.7.2</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.7.3-1" date="1712232000">- Version 1.7.3</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.8-1" date="1715860800">- Version 1.8
- Add new lib/GLPI/Agent/Tools/USB* files</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.9-1" date="1716984000">- Version 1.9</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.10-1" date="1725883200">- Version 1.10
- Add new lib/GLPI/Agent/Tools/Archive.pm file</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.11-1" date="1727352000">- Version 1.11</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.11-2" date="1737547200">- Add missing perl(Net::NBName) dependency #Eduardo Mozarto de Oliveira
- Add missing Requires dependancy for EL7  #Eduardo Mozarto de Oliveira</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.12-1" date="1741003200">- Version 1.12</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.14-1" date="1745409600">- Version 1.14</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 1.15-1" date="1749556800">- Version 1.15</changelog>
</package>
<package pkgid="938772e7b6ec54b5cefaa90879752b5d4b6d7b3d36dddf33e16a8593b6f77e70" name="glpi-marketplace" arch="noarch">
  <version epoch="0" ver="10.0.25" rel="1.el7_9"/>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 10.0.16-1" date="1720094400">- Update to 10.0.16
  see https://github.com/glpi-project/glpi/milestone/68?closed=1
- This is a security release, upgrading is recommended:
  [SECURITY - high] Account takeover via SQL Injection in AJAX scripts (CVE-2024-37148)
  [SECURITY - high] Remote code execution through the plugin loader (CVE-2024-37149)
  [SECURITY - moderate] Authenticated file upload to restricted tickets (CVE-2024-37147)
- Also, here is a short list of main changes done in this version:
  [FIX] Freesize database field was not correctly migrated
  [FIX] Network inventoried stacked switches had all the same name
  [FIX] Remove monitors from inventory when no monitor is present
  [FIX] Import location hierarchy from LDAP and Inventory</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 10.0.16-2" date="1729857600">- Fix patch for Fedora 41</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 10.0.17-1" date="1730980800">- Update to 10.0.17
  see https://github.com/glpi-project/glpi/milestone/68?closed=1
- This is a security release, upgrading is recommended:
  [SECURITY - critical] Unauthenticated session hijacking (CVE-2024-50339)
  [SECURITY - high] Account takeover through SQL injection (CVE-2024-40638)
  [SECURITY - high] Users email enumeration by unauthenticated user (CVE-2024-43416)
  [SECURITY - high] Account takeover without privilege escalation through the API (CVE-2024-47758)
  [SECURITY - high] Account takeover via the password reset feature (CVE-2024-47761)
  [SECURITY - high] Account takeover via API (CVE-2024-47760)
  [SECURITY - high] Insecure account deletion by authenticated user (CVE-2024-48912)
  [SECURITY - moderate] Authenticated SQL Injection (CVE-2024-45608)
  [SECURITY - moderate] Authenticated SQL injection in ticket form (CVE-2024-41679)
  [SECURITY - moderate] Stored XSS in RSS feeds (CVE-2024-45611)
  [SECURITY - moderate] Stored XSS via document upload (CVE-2024-47759)
  [SECURITY - moderate] Multiple reflected XSS (CVE-2024-43417, CVE-2024-43418, CVE-2024-45609, CVE-2024-45610, CVE-2024-41678)</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 10.0.18-1" date="1740312000">- Update to 10.0.18
  see https://github.com/glpi-project/glpi/milestone/70?closed=1
- This is a security release, upgrading is recommended:
  [SECURITY - high] Unauthenticated SQL injection through the inventory endpoint (CVE-2025-24799)
  [SECURITY - high] Authenticated Remote code execution (CVE-2025-24801)
  [SECURITY - high] SQL injection through the rules configuration (CVE-2025-21619)
  [SECURITY - moderate] Open Redirection (CVE-2024-11955)
  [SECURITY - moderate] Reflected XSS in search page (CVE-2025-21627)
  [SECURITY - moderate] Exposure of sensitive information in the status.php endpoint (CVE-2025-21626)
  [SECURITY - moderate] Plugins disabled by unauthenticated user (CVE-2025-23024)
  [SECURITY - moderate] Unauthorized authentication by email using the OAuthIMAP plugin (CVE-2025-23046)
  [SECURITY - moderate] Unauthorized access to debug mode (CVE-2025-25192)</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 10.0.19-1" date="1753185600">- Update to 10.0.19
  see https://github.com/glpi-project/glpi/milestone/73?closed=1
- This is a security release, upgrading is recommended:
  [SECURITY - MODERATE] Stored XSS on projects kanban (CVE-2025-27514)
  [SECURITY - LOW] Blind SSRF in RSS feeds and planning (CVE-2025-52567)
  [SECURITY - MODERATE] XSS and open redirection in planning (CVE-2025-52897)
  [SECURITY - MODERATE] Mail receiver credentials exfiltration (CVE-2025-53008)
  [SECURITY - MODERATE] Reservations modification by unauthorized user (CVE-2025-53357)
  [SECURITY - LOW] Access to unallowed items information through external links (CVE-2025-53113)
  [SECURITY - MODERATE] Data exposure to non allowed users (CVE-2025-53111)
  [SECURITY - MODERATE] Data removal from allowed users (CVE-2025-53112)
  [SECURITY - HIGH] Unauthorized rules execution order update (CVE-2025-53105)</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 10.0.20-1" date="1758801600">- Update to 10.0.20
- This is bugfix release, upgrading is recommended:
  see https://github.com/glpi-project/glpi/releases/tag/10.0.20
- Update glpi-httpd.conf with deny access to non-public files</changelog>
  <changelog author="Jean-Marc Liger &lt;ligenix@iscp.fr&gt; - 10.0.22-1" date="1765195200">- Update to 10.0.22 (replace 10.0.21)
- This is a security release, upgrading is recommended:
  see https://github.com/glpi-project/glpi/milestone/76?closed=1
  [SECURITY - HIGH] Unauthorized access to documents (CVE-2025-64516)
  [SECURITY - MODERATE] Unauthenticated Stored XSS through the inventory endpoint (CVE-2025-59935)
  [SECURITY - MODERATE] Unauthorized access to Knowledge Base items through the API (CVE-2025-64520)
- Many bug fixes have also been made</changelog>
  <changelog author="Alan Flambard &lt;alan.flambard@flambard.ovh&gt; - 10.0.23-1" date="1769601600">- Update to 10.0.23
- This is a security release, upgrading is recommended:
  [SECURITY - MODERATE] Authenticated SQL Injection (CVE-2026-22044)
  [SECURITY - MODERATE] Session stealing on externally authenticated user change (CVE-2026-23624)</changelog>
  <changelog author="Alan Flambard &lt;alan.flambard@flambard.ovh&gt; - 10.0.24-1" date="1772539200">- Update to 10.0.24
- This is a security release, upgrading is recommended:
  [SECURITY - High] Stored XSS in Supplier (CVE-2026-25932)
  [SECURITY - High] Authenticated SQL Injection (CVE requested)</changelog>
  <changelog author="Alan Flambard &lt;alan.flambard@flambard.ovh&gt; - 10.0.25-1" date="1777809600">- Update to 10.0.25</changelog>
</package>
<package pkgid="2187c0df44ef41bbb59832b0c5221aa5a4fb0d113bbca2164ac075e6e95a4ddf" name="perl-Net-SSH2" arch="src">
  <version epoch="0" ver="0.53" rel="4.el7_9"/>
  <changelog author="Petr &#x160;abata &lt;contyk@redhat.com&gt; - 0.47-1" date="1360670400">- 0.47 bump
- Patch the version check (#864102, rt#80065)
- Drop the useless excludedir
- Drop the tests subpackage</changelog>
  <changelog author="Petr &#x160;abata &lt;contyk@redhat.com&gt; - 0.48-1" date="1361448000">- 0.48 bump</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.48-2" date="1374408000">- Perl 5.18 rebuild</changelog>
  <changelog author="Petr &#x160;abata &lt;contyk@redhat.com&gt; - 0.50-1" date="1375272000">- 0.50 bump</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.50-2" date="1375531200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="Petr &#x160;abata &lt;contyk@redhat.com&gt; - 0.52-1" date="1377518400">- 0.52 bump</changelog>
  <changelog author="Petr &#x160;abata &lt;contyk@redhat.com&gt; - 0.53-1" date="1378123200">- 0.53 bump</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.53-2" date="1402142400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.53-3" date="1408276800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 0.53-4" date="1409227200">- Perl 5.20 rebuild</changelog>
</package>
<package pkgid="4cc8586071b1f67b22495670572337956ce254ec3dc9f152a2d9d09c26059d4a" name="perl-Net-SSH2" arch="x86_64">
  <version epoch="0" ver="0.53" rel="4.el7_9"/>
  <changelog author="Petr &#x160;abata &lt;contyk@redhat.com&gt; - 0.47-1" date="1360670400">- 0.47 bump
- Patch the version check (#864102, rt#80065)
- Drop the useless excludedir
- Drop the tests subpackage</changelog>
  <changelog author="Petr &#x160;abata &lt;contyk@redhat.com&gt; - 0.48-1" date="1361448000">- 0.48 bump</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.48-2" date="1374408000">- Perl 5.18 rebuild</changelog>
  <changelog author="Petr &#x160;abata &lt;contyk@redhat.com&gt; - 0.50-1" date="1375272000">- 0.50 bump</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.50-2" date="1375531200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="Petr &#x160;abata &lt;contyk@redhat.com&gt; - 0.52-1" date="1377518400">- 0.52 bump</changelog>
  <changelog author="Petr &#x160;abata &lt;contyk@redhat.com&gt; - 0.53-1" date="1378123200">- 0.53 bump</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.53-2" date="1402142400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.53-3" date="1408276800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 0.53-4" date="1409227200">- Perl 5.20 rebuild</changelog>
</package>
<package pkgid="469dd615a39d30d6eb13053c69ece8c50c300f99d90295f8c9cb2263880c3bd5" name="perl-Net-SSH2-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.53" rel="4.el7_9"/>
  <changelog author="Petr &#x160;abata &lt;contyk@redhat.com&gt; - 0.47-1" date="1360670400">- 0.47 bump
- Patch the version check (#864102, rt#80065)
- Drop the useless excludedir
- Drop the tests subpackage</changelog>
  <changelog author="Petr &#x160;abata &lt;contyk@redhat.com&gt; - 0.48-1" date="1361448000">- 0.48 bump</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.48-2" date="1374408000">- Perl 5.18 rebuild</changelog>
  <changelog author="Petr &#x160;abata &lt;contyk@redhat.com&gt; - 0.50-1" date="1375272000">- 0.50 bump</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.50-2" date="1375531200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="Petr &#x160;abata &lt;contyk@redhat.com&gt; - 0.52-1" date="1377518400">- 0.52 bump</changelog>
  <changelog author="Petr &#x160;abata &lt;contyk@redhat.com&gt; - 0.53-1" date="1378123200">- 0.53 bump</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.53-2" date="1402142400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.53-3" date="1408276800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 0.53-4" date="1409227200">- Perl 5.20 rebuild</changelog>
</package>
</otherdata>