Fedora 28 : glpi (2018-c766d7c0f0)

add upstream patch to fix SQL injection Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora Update for glpi FEDORA-2018-c766d7c0f0

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2018-13049

CVE-2018-13049 affects GLPI 9.2.x through 9.3.0, where the constructSQL function in inc/search.class.php allows SQL Injection via a crafted LIMIT clause to front/computer.php. Connected advisories confirm the root cause (constructSQL in GLPI) and that upstream patches were released to fix the vul...