Bug 481558

Summary: glpi: multiple SQL injection flaws
Product: [Other] Security Response Reporter: Tomas Hoger <thoger>
Component: vulnerabilityAssignee: Red Hat Product Security <security-response-team>
Status: CLOSED ERRATA QA Contact:
Severity: high Docs Contact:
Priority: high    
Version: unspecifiedCC: bressers, fedora
Target Milestone: ---Keywords: Security
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2010-03-22 15:45:58 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Tomas Hoger 2009-01-26 11:23:49 UTC
New upstream GLPI version 0.71.4 was released, fixing multiple SQL injection flaws.

Upstream announcement:
http://www.glpi-project.org/spip.php?page=annonce&id_breve=161&lang=en
https://dev.indepnet.net/glpi/milestone/0.71.4

Upstream bug:
https://dev.indepnet.net/glpi/ticket/1224

Upstream fix:
Multiple changesets in 7.1-bugfix branch, 7875 - 7892
https://dev.indepnet.net/glpi/changeset?new=branches/0.71-bugfixes@7892&old=branches/0.71-bugfixes@7870

Comment 1 Fedora Update System 2009-01-29 23:02:44 UTC
glpi-0.71.5-1.fc9 has been pushed to the Fedora 9 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 2 Fedora Update System 2009-01-29 23:07:23 UTC
glpi-0.71.5-1.fc10 has been pushed to the Fedora 10 stable repository.  If problems still persist, please make note of it in this bug report.