# changelog

author: Remi Collet <remi@remirepo.net> - 9.3.3-2
changelog:
  - add security fix backported from 9.4.1:
    [security] Bad chevrons rendering on dropdowns
    [security] Iframe and forms are rendered in rich text contents
    [security] Type juggling authentication bypass
    [security] Malicious images upload
    [security] Password token date was not reset
    [security] Prevent timed attack and enforce cookie security
  - add dependency on exif extension


author: Remi Collet <remi@remirepo.net> - 9.3.4-3
changelog:
  - allow elvanto/litemoji 2.0
    see https://github.com/glpi-project/glpi/pull/6141
    and https://github.com/glpi-project/glpi/pull/6147


author: Remi Collet <remi@remirepo.net> - 1.3.1-1
changelog:
  - version 1.3.1 for GLPI >= 9.2
    https://forge.glpi-project.org/versions/1260
  - open https://forge.glpi-project.org/issues/5550 - missing file


author: Remi Collet <remi@remirepo.net> - 1.8.0-3
changelog:
  - fix cannot retrieve GLPI configuration when personalized
    upstream from https://forge.glpi-project.org/issues/5565


