Changelog for
cacti-1.1.24-64.1.noarch.rpm :
Mon Sep 18 14:00:00 2017 liedkeAATTrz.uni-mannheim.de
- Build version 1.1.24
- issue#932: Zoom positioning breaks when you scroll the graph page
- issue#970: Remote Data Collector Cache Synchronization missing
plugin sub-directories
- issue#980: Resolve issue where a new tree branches refreshs before
you have a chance to name it
- issue#982: Data Source Profile size information not showing properly
- issue: Long sysDescriptions on automation page cause columns to
be hidden
- issue: Resolve visual issues in Classic theme
- feature: Allow Resynchronization of Poller Resource Cache
Tue Sep 12 14:00:00 2017 liedkeAATTrz.uni-mannheim.de
- Build version 1.1.23
issue#963: SQL Errors with snmpagent and MariaDB 10.2
issue#964: SQL Mode optimization failing in 1.1.22
- Build version 1.1.22
issue#950: Automation - New graph rule looses name on change
issue#952: CSV Export not rendering chinese characters correctly
(Second attempt)
issue#955: Validation error trying to view graph debug syntax
issue: MySQL/MariaDB database sql_mode NO_AUTO_VALUE_ON_ZERO
corrupts Cacti database
issue: When creating a data source, the data source profile does
not default to the system default
feature: Enhance table filters to support new Cycle plugin
feature: Updated Dutch Translations
Tue Sep 5 14:00:00 2017 liedkeAATTrz.uni-mannheim.de
- Build version 1.1.21
issue#938: Problems upgrading to 1.1.20 with one table alter
statement
issue#952: CSV Export not rendering chinese characters correctly
issue: Minor alignment issue on tables
- Build version 1.1.20
issue#920: Issue with scrollbars after update to 1.1.19 related
to #902
issue#921: Tree Mode no longer expands to accomodate full tree
item names
issue#922: When using LDAP domains some setings are not passed
correctly to the Cacti LDAP library
issue#923: Warninga in cacti.log are displayed incorrectly
issue#926: Update Utilities page to provide more information on
rebuilding poller cache
issue#927: Minor schema change to support XtraDB Cluster
issue#929: Overlapping frames on certain themes
issue#931: Aggregate graphs missing from list view
issue#933: Aggregate graphs page counter off
issue#935: Support utf8 printable in data query inserts
issue#936: TimeZone query failure undefined function
issue: Taking actions on users does not use callbacks
issue: Undefined constant in lib/snmp.php on RHEL7
issue: Human readable socket errno\'s not defined
issue: Audit of ping methods tcp, udp, and icmp ping. IPv6 will still
not work till php 5.5.4
Mon Aug 21 14:00:00 2017 liedkeAATTrz.uni-mannheim.de
- Build version 1.1.19
issue#810: Scripts in packages don\'t match distribution
issue#919: Unable to upgrade to 1.1.18
issue: Update documentation for minimum PHP 5.4
- Build version 1.1.18
issue#902: Correcting some issues with Console and External Links
issue#903: Upgrade pace.js to v0.7.8
issue#904: Allow user to hide Graphs from disabled Devices
issue#906: Create a separate Realm for Realtime Graphs
issue#907: XSS issue in spikekill.php
CVE-2017-12927 bsc#1054390
issue#910: Boost last run duration generates an error on new install
issue#914: Unable to purge Cacti logfile from System Utilities
issue#915: Non-numeric data in ss_host_disk.php
issue#916: Resolve display of errors when encountering ldap issues
issue#918: Minor XSS and create generalized escape function
CVE-2017-12978 bsc#1054742
issue: Resolve JavaScript errors on Login page
issue: Resolve JavaScript errors on Permission Denied pages
issue: Graphs tab would appear in non-classic even if you did not
have permissions
feature: Updated dutch translations
Tue Aug 15 14:00:00 2017 liedkeAATTrz.uni-mannheim.de
- Build version 1.1.17
issue#450: List View to Preview shows no results
issue#486: Export Device table results to CSV
issue#544: Allow Log Rotation to be other than Daily
issue#673: Downtime/Recovery time/date is set incorrectly
issue#819: Customized timespans for graphs
issue#888: Rebuilding Poller Cache when External data sources are
present results in false positive warnings in the log
issue#891: Database.php unable to connect to MySQL when using port
different than 3306
issue#893: Warning messages when duplicating CDEF objects
issue#897: Due to browser use of special key, deprecate ctrl-shift-x
for clearing filter
issue#898: Issue with tcp and udp ping due to file description
allocation changes
issue: Unable use ipv6 ip addresses for snmp ping in the Cacti GUI
issue: Update language of the Rebuild Poller Cache menu pick
issue: Broken design for input controls with Sunrise theme
issue: Timespan switching not switching to Custom in Preview Mode
issue: Log rotation would not occur under certain conditions.
Provide more control over log functions
issue: Purge log file always purged the cacti.log, not the selected
log
issue: Unable to view graphs for errored data sources from Cacti log
Tue Aug 1 14:00:00 2017 liedkeAATTrz.uni-mannheim.de
- Build version 1.1.16
issue#865: Escape Data Query arguments to prevent issues with
special characters
issue#872: Can\'t add device items to graphs generated with no
device and no template
issue#875: When modifying Realm permissions, realms that are
listed multiple times don\'t stay in sync
issue#877: Improving resolution to issue#847 and one additional
vulnerability
CVE-2017-12065 bsc#1051633
issue#878: Ambiguous language in purge log function
issue#879: SQL Error when adding a report item to a report
issue#880: Device drop down is limited to 20 devices and lacks
a scroll bar
issue#885: Graph generated with no device and no graph template
forgets device definitions
issue#886: Unable to export templates other than Device templates
issue: Address additional corner cases around get_order_string usage
issue: Data Queries sharing a Data Source can result in poller
output table not empty errors
issue: Fix Sunrise theme to properly theme multiselect widgets
issue: Increase height of multiselects so that more options are
visible
issue: When a graph is locked, anchor tags are still functional
Mon Jul 24 14:00:00 2017 liedkeAATTrz.uni-mannheim.de
- Build version 1.1.15
- issue: PHP Fatal Exception on upgrade from 1.1.11 or earlier
- feature: Added test to detect install upgrade code problems
Mon Jul 24 14:00:00 2017 liedkeAATTrz.uni-mannheim.de
- Build version 1.1.14
- issue#849: Unable to select host in Graph Item pick
- issue#850: Reporting not allowing Non-templated Graphs
- issue#858: Pagination on SNMP Options wrong
- issue#860: Network Discovery Subnet Range character limit too small
- issue#861: The search filter does not support Cyrillic
- issue#862: Automation - When editing Graph Rules, unable to
Change Data Query
- issue#863: Typo error in auth_login.php for LDAP authentication
- issue#867: Cross-site scripting (XSS) vulnerability in auth_profile.php
CVE-2017-11691 bsc#1050950
- issue: Link\'s not showing in Automation Graph and Tree rules on
Sunshine theme
- issue: Make Templates Export responsive
- issue: Don\'t wrap menu glyphs and menuitems
- issue: The function get_order_string() can fail when encountering
reserved word columns
- issue: Data Query Delete is not using callback
- feature: Resize Graphs on Graph page to be responsive
- feature: Make import text a hidden field as it is likely
seldom used
Fri Jul 14 14:00:00 2017 liedkeAATTrz.uni-mannheim.de
- Build version 1.1.13
issue#605: Remove Spikes feature not fully functional
issue#814: Allow \'Save\' feature from New Graphs
issue#837: Using the add_device.php CLI script, you can not
\'default\' the device threads to other than 1
issue#838: CVE-2017-10970: XSS Issue in link.php bsc#1047512
issue#839: The Database column name \'rows\' is a reserved word
in MariaDB 10.2+
issue#845: External links tabs should appear at the end of the tab
view
issue#846: Web crawl of Cacti site shows errors in the log
issue#847: CVE-2017-11163: XSS Issue in lib/html_form.php
bsc#1048102
issue#853: Go and Clear buttons do not work in all cases on Graph
Rules pages
issue: Up/Down arrow titles labeled incorrectly on Tree
Management page
issue: Make the default Export Type a Device Template
issue: Fix SNMPagent MIB cache issues
issue: Realtime cache cleanup now only removes rrd and png
issue: When redirected from reports, you can receive a
validation error
feature: updated Dutch language
Wed Jul 5 14:00:00 2017 liedkeAATTrz.uni-mannheim.de
- Build version 1.1.12
- issue#822: Aggregate Graph Items are incorrectly editable
- issue#823: Allow Filters to be hidden
- issue#834: Add spacing on graphs pages
- issue: Uninstalled plugins can not install
- issue: Location of filter functions in host.php prevent full
responsive filter implementation
- feature: Implement first phase of responsive search filters
- Build version 1.1.11
- issue#642: RRA not written or WARNING: Poller Output Table not Empty
- issue#779: PHP running out of memory due to date format issues
- issue#791: SeLinux causing problems due to recent enhancement of the
Cacti log
- issue#818: Unable to unselect all SpikeKill templates under settings
- issue#831: Unable to add devices from automation devices that don\'t have
a snmpSysname
- issue: incorrect version of pace: fix progess bar
- issue: date_format(): fix date separator character
- issue: host.php: fix itemCount en rowCount when result = null
- issue: clog: fix scandir for systems with limited permissions to log
directory
- issue: clog: fix listing of logfiles
- issue: Stop New Graphs filter interface from taking too much space
- issue: Pagination of clog is not done via ajax
- issue: Unable to dry run spikekill\'s from Graphs page
- issue: Default sort order does not highlight on Aggregate Template page
- issue: Correct display issue with Graph Templates when editing Device
- issue: External Data Sources show as having poller interval on Data
Source page
- issue: Allow Selecting \'External\' as the Data Source Profile when creating
non-templated Data Source
- issue: Remove Field Order on Data Input output data as it\'s not required
- issue: Data Templates not using Ajax callbacks to switch Data Sources
- issue: Visual issue when creating non-templated Aggregate Graphs
- feature: new skin: Sunrise
- feature: Provide Non Compatible explanation when a plugin is not compatible
- feature: Updated Dutch translations
- feature: Allow Graph Templates with multiple flag to be created repeatedly
from Graphs New interface
- feature: Allow plugins to exclude files and directories from their remote
poller synchronization process
- feature: Add Device Description to View Poller Cache UI
Mon Jun 12 14:00:00 2017 liedkeAATTrz.uni-mannheim.de
- Build version 1.1.10
- issue#779: Resolve random apache segfault due to recursion
- issue#786: Unable to create second RRA for a Data Source Profile
with collection rate less than 5 minutes
- issue#789: Unable to Clear Filter due to JavaScrpt name space
collision
- issue#791: cacti 1.1.9 and clog_webapi.php permission issue
- issue#794: SQL Error when creating graphs manually
- issue#798: Cosmetic issue when checking checkboxes in Cacti
- issue#800: Unchecked loop in lib/html_utility.php causing race
condition
- issue#802: Issue updating device hostname with SNMP data queries
- issue#803: Issues with utf8mb4 introduced via optimization
- issue: If the device is down and snmp_sysUpTimeInstance is 0, time
in state can be wrong
- feature: Updated Dutch translations
Mon Jun 5 14:00:00 2017 liedkeAATTrz.uni-mannheim.de
- Build version 1.1.9
* issue#788: Fails on PHP Fatal error if LDAP auth enabled
- Build version 1.1.8
* issue#529: Issue on Graph New page with checkbox unselected
* issue#552: Minor selectable row checkbox issue
* issue#577: Dragging multiple items causes the tree to refresh too
early
* issue#617: Correct poller timeouts when no devices are associated with
active data collector
* issue#706: Classic external link template images missing
* issue#726: Undefined variable in upgrade script
* issue#728: Resolve issues with jQueryUI empty dialogs
* issue#731: Add class to radio button labels to correct display issue
* issue#736: Sequence numbers not visible when editing templates using
modern theme
* issue#739: Graph Titles missing on aggregate graphs
* issue#740: Spacer manipulation broken after update to responsive forms
* issue#741: Errors in dsstats with very large RRDfiles with more than 60
data sources
* issue#748: Search results are not cleared on Aggregates
* issue#754: Default Language for user and system are not set on new
installation
* issue#755: RRDtool Graph Watermark is incorrect
* issue#756: Resolving some translation issues
* issue#763: Template Export not functional
* issue#765: Validation error when viewing Utility View
* issue#771: Editing a report renders no options after creation
* issue#780: Preview always shows thumbnails in reports interface
* issue: Hide Aggregate system cdefs when editing graphs and graph templates
* issue: Updating Utility View zoom was not updating table data
* feature#723: Convert Data Source dropdown to autocomplete when editing
standalone graphs
* feature#735: Allow color selection in graphs and templates to be autocomplete
* feature#753: Preliminary support for RRDtool 1.7.
* feature: Add function to obtain the current execution user
* feature: Implement Site timezones as autocomplete for performance
* feature: For themes other than classic, make color id selection autocomplete
* feature: CLOG timestamp is now formatted as defined in settings
* feature: CLOG can show loginformation from rotated logfiles
Mon May 22 14:00:00 2017 liedkeAATTrz.uni-mannheim.de
- Build version 1.1.7
* issue#470: Enhance Cacti\'s SNMP function and Data Query XML, add
hex|string|guess * issue#653: Devices with empty sysNames are not added to discovered
devices
* issue#655: Data source not displaying device name
* issue#658: Scheduled Reports (type \"tree\") not working
* issue#662: Sending test Email should optionally bypass ping
* issue#667: In Classic theme initial view of Tree view broken
* issue#669: Invalid SQL Messages when upgrading to Cacti 1.0.5
* issue#670: Validation error when you do \"Change Graph Template\" in
Cacti
* issue#672: Cacti unable to enable snmp notification receiver mibs
* issue#680: Sort order in Time Graph View
* issue#687: Cacti DB access not compatible with PHP 7
* issue#696: Multiple issues with snmpagent notification UI
* issue#699: Add custom error handler for ping functions
* issue#704: Fix GUI issues for Graphs not belonging to a device
* issue#707: Back button not working
* issue#708: Issues finding lib/snmp.php in host disk functions
* issue#712: Change Graph Template dropdown invalid
* issue#717: Allow ajax callbacks when adding non-templated graph
items
* issue: Reports were not using Cacti\'s permission system for checking
access
* issue: User Admin page reported wrong permissions at Tree level
missing some i18n as well
* issue: Short data_name can cause data collection issues
* feature: Updated Dutch language
* feature: Updating PHPMailer to 5.2.23
* feature: Support input-output Data Query types
* feature: Introduce new get_cacti_version() to reduce database calls
on pages
Mon May 8 14:00:00 2017 liedkeAATTrz.uni-mannheim.de
- Build version 1.1.6
* issue#620: The table poller_data_template_field_mappings can get
out of sync when manipulating data templates
* issue#622: Can not connect to MySQL over a socket
* issue#628: Cacti upgrade process is complex and error pront for
developers
* issue#635: Error when saving change to data template
* issue#637: When displaying tree graphs, use the same layout as
preview mode
* issue#646: When a plugin is disabled during page operations,
warnings can appear
* issue#651: Unable to view cacti log (because of allowed memory size
exhausted)
* issue#657: Error in log when host is down, using icmp and using
cmd.php on FreeBSD
* issue: List for creating a Graph type shows already added Graph
Templates
* issue: Fix and undefined variable on data source page when first
creating a manual data source
* issue: Remove tabindex and other non-required manual aria controls
from pages
* issue: Table type and column type in poller_output table wrong
* issue: FILTER_VALIDATE_MAC not defined on PHP less than 5.5
* issue: When changing your language Cacti would not do a full page
refresh
* feature#106: Paginated CLOG and log administration
* feature: Dutch translations
* feature: Responsive Graphs page
* feature: Convert forms from table based to div based for responsive
design
* feature: Better support for phones and tablets
* feature: Simplified installation code to facilitate easier release
cycle
* feature: Updating Tablesorter to v2.28.9, adding widgets and pager
Wed Apr 26 14:00:00 2017 liedkeAATTrz.uni-mannheim.de
- Build version 1.1.5
* issue#580: Data collection warnings when using cmd.php
* issue#592: Incorrectly formatted HTML
* issue#606: Replace
in data input methods
* issue#607: Allow draw_menu to specify multiple actions for the same
URL
* issue#608: Spaces adjacent to double quotes are eliminated during
data input method import
* issue#609: Honor the column setting in graph tree view mode
* issue#610: Change Graph Template action not available
* issue#611: Cacti Installation Wizard - Spine page incorrect on
Windows
* issue#612: Uncaught Error: Call to a member function row() on a
string
* issue#613: Network Automation, now requires a site or your are
unable to save rules
* issue#615: Data Input field length too short for longer scripts
* issue#619: Export logging option in settings no longer used
Mon Apr 24 14:00:00 2017 liedkeAATTrz.uni-mannheim.de
- Build version 1.1.4
* issue#524: Reporting not working when Tree branch is device
* issue#560: Add \'Duplicate\' and \'Convert to Graph Template\' back
to Graph Management page for Advanced mode
* issue#573: Missing Graph Template dropdown items
* issue#575: Very large hex strings result in scientific notation
that RRDtool rejects
* issue#579: Problems logging in using nginx web server
* issue#581: session_start() warnings when manually sending reports
* issue#584: Issues reporting memory recommendation on utilities page
* issue#586: Overrunning pollers can cause system load spikes
* issue#587: Data Collector setting under Network Discovery is not
being used
* issue#588: Devices with blank sysDescr are added to the first
Device Template in error
* issue#589: Automation discovery does not allow site association
* issue#590: Unable to create a plugin based menu
* issue#591: Row selection in Device Automation Templates not sane
with drag-n-drop enabled
* issue#601: Resolving some translation issues
* issue#604: Unexpected backtrace on regular expression filters
* issue#605: Remove Spikes non-numeric data causes warnings
* issue: Ping email does not use a from email address
* issue: Automation does not recognize default size or poller
* issue: Unable to drag-n-drop on automation templates pages when
enabled
* issue: Fixed number of hosts in poller stats for first poller
* issue: Fixed screenwidth issue in tab PHP-Info of Utilities module
* issue: Recovery poller could get stuck in some situations
* issue: Fix JavaScript errors when managing Aggregate Graphs
* feature: Reorganize defaults to place more on device defaults page
* feature: Update jQuery tableDnD to version 0.9
* feature: More tolerant of empty PHP_SELF found with some web servers
Sun Apr 16 14:00:00 2017 liedkeAATTrz.uni-mannheim.de
- Build version 1.1.3
* issue#515: Unable to import color CSV file
* issue#519: In non-classic themes its not possible to remove Cacti
log or reporting tabs
* issue#520: SQL error in graph automation
* issue#521: Cacti allows removal of Data Query Graph Template
associations when they are in use
* issue#525: LAST GPRINT type not rendered correctly due to lack of
escaping
* issue#530: Undefined function get_vdef in lib/rrd.php
* issue#531: Issues with TextAlign and Tick graph items
* issue#532: Unreliable scroll height causes issues in Chrome
* issue#533: User settings not cleared after saving profile
* issue#534: Automation issue with AS clause
* issue#538: Unable to rename tree folder
* issue#541: Issues with mobile graph viewing
* issue#555: DSStats SQL insert errors due to data collection issues
* issue#563: Division by zero in removespikes.php
* issue: Fixed rendering issues with HRULE\'s on graphs
* issue: Update jsTree to 3.3.4 version
* feature: Improved responsiveness UI tables, filters, and menus
Mon Apr 3 14:00:00 2017 liedkeAATTrz.uni-mannheim.de
- Build version 1.1.2
* issue#492: Error while adding non data query (cg) graphs
* issue#494: CLI error while importing template
* issue#499: SQL error in graph automation resulting in no graphs
on tree
* issue#500: Generic SNMP device package damaged - Unix Ping Host
* issue#505: Log rotation does not work in some cases
* issue#506: Undefined index: cactiStatsDeviceFailedPolls
* issue#507: Nextwork discovery \'export\' produces no results
* issue#509: Minor bug with device ownership selection
* feature: Add new legend type that includes Current/Average/
Minimum/Maximum
* feature: Update d3.js to latest version 4.7.4
Tue Mar 28 14:00:00 2017 liedkeAATTrz.uni-mannheim.de
- Build version 1.1.1
* issue#457: Continued LDAP issues with initial user creation
* issue#461: The function escapeshell arg not appropriate on Windows
* issue#462: LDAP authorization issues: group membership check broken
for \'Group Member Type\' = \'Username\'
* issue#464: Change default batch spike removal limits for standard
deviation and variance
* issue#465: Less than sign inside items and labels of graph break graph
* issue#466: Call to member function row() on a non-object in
lib/snmpagent.php
* issue#467: Reduce the number of queries in log function
* issue#472: Schema changes to improve performance
issue#485: When editing a device, the ping status was not always
returned
* issue: Back button issues due to syntax problems in JavaScript
* issue: Zoom periodically would loose it\'s crosshairs after zooming
* issue: Zoom would zoom out into the future even when disabled
* issue: Fixing lite corruption in graph_templates_item table
* feature: Make SpikeKill options more consistent
* feature#459: Add variable date time option to report mail subject
* feature#460: Add external_id to host variables
* feature#469: Change re-index method of Data Query from Device edit
* feature: Support generalized date format approach in the GUI
* feature: Use localStorage over a Cookie for Zoom setting storage
* feature: Fully implement \'Remove Orphans\' from Package import process
Tue Mar 21 13:00:00 2017 joop.boonenAATTopensuse.org
- Build version 1.1.0
* issue#337: Generic SNMP OID Graph Template damanged
* issue#338: Extremely slow new graph/DS creation
* issue#353: Broadcast & Multicast Packet counters missing
* issue#376: Structured RRD path permission issues
* issue#389: Manual template based graph creation not working
* issue#407: The RRDfile does not exist message is misleading
* issue#410: Select character data was interpreted as hex by
cacti_snmp_walk()
* issue#422: additional issues with LDAP authentication
* issue#424: Automation does not discover devices w/o resolvable
hostnames
* issue#427: undefined index TotalVisibleMemorySize on FreeBSD
* issue#432: SpikeKill menu wonky on Paw Theme
* issue#434: password_verify not compatible in php5.4-
* issue#435: urlPath missing from paw theme links
* issue#436: Restricted user does not see graphs in tree view
* issue#443: Allow remote_agent.php through a NAT
* issue#446: No local admin when using multiple LDAP configuration
* issue#447: Creating another non data query graph from same template
reuses first data source
* issue#449: exec_poll_php does not flush pipes when using script server
* issue#450: Graph list view - No Graphs Found
* issue: Improve email test exception errors and change default timeout
to 10 seconds
* issue: When on links page, breadcrumbs would become corrupted
* issue: When upgrading from any version of Cacti to 1.0.5, SQL\'s
relative to poller_reindex might appear
* issue: Color page performance poor
* issue: The Device dropdown on the Graph View page was unreliable
* issue: Aggregate and non-Device Graphs in list view had not Device or
Title description
* issue: Re-engineer back button design to accomocate ajax and native
navigation
* issue: Make Graph Template filter wider
* issue: Resolve some visual issues in Classic theme
* feature: Add page refresh API to make page refreshing in Ajax easier
to accomplish
* feature: Update fontawesome to version 4.7
* feature: Use fontawesome glyphs for menu items
* feature: Support multiple column sort in table library
* feature: Add glyphs to main Cacti console menu
Wed Mar 15 13:00:00 2017 liedkeAATTrz.uni-mannheim.de
- cacti 1.0.6:
* issue#386: Allow special characters in graph title
* issue#414: Install Wizard check path for spine
* issue#415: SNMP session handling broken
* issue#418: LDAP create user from template not working
Mon Mar 13 13:00:00 2017 liedkeAATTrz.uni-mannheim.de
- cacti 1.0.5:
* issue#296: Poller warning for Non-SNMP device
* issue#319: Add default \'High Collection Rate\' data source profile
to new installs to demonstrate concept of multiple rates
* issue#330: Import templates to non-default Data Profile
* issue#337: Error when try create new graph - SNMP - Generic OID
issue#342: Infinite loop in poller_automation.php with invalid
schedule
* issue#343: Device discovery cannot handle dots in device name
* issue#344: Unable to upgrade to latest Cacti on FreeBSD
* issue#353: Legacy broadcast & multicast packet counters missing in
interface.xml
* issue#354: Place on tree dashes / ordering is not correct
* issue#355: Replace table rows with count when using InnoDB tables
* issue#357: If recovery mode runs longer than a polling interval, a
second is spawned
* issue#358: Sending test e-mail results in warning
* issue#360: Issue importing cacti.sql with some charsets
* issue#364: Moving graph item causes page render issue
* issue#365: ss_host_disk.php and ss_host_cpu.php should use return
* issue#367: Upgrade chart.js to version 2.5
* issue#368: Issue with device automation ip vs. ip_address
* issue#369: Interface bits/second total Bandwidth wrong CDEF
* issue#375: Drag and Drop of Devices and Graphs allows dropping
onto self
* issue#380: Ignores a non-standard SNMP port
* issue#382: When using php5.5+ new users unable to change their
password
* issue#384: graph_view.php backtrace errors
* issue#385: Unable to place an aggregate grapn on a subtree
* issue#390: Display graphs from this aggregate icon next to graph not
displaying
* issue#392: cdef.php missing sql where for system cdef\'s
* issue#398: checkbox is not honored when creating tree
* issue#399: External link configuration: Order buttons don\'t work
* issue#400: SNMP Engine ID (v3) field too short
* issue#401: Graphs -> Apply Automation Rules fails
* issue#404: Success even when test mail fails
* issue#406: HRULE text format special characters not escaped
* issue#408: Suppress SNMP units suffix from cacti_snmp_get() output
* issue: Improve is_ipaddress functions
* issue: Drag & drop showing when disabled on page
automation_templates.php
* issue: Output messages displayed incorrectly in
automation_templates.php and automation_snmp.php
* issue: Importing template from old Cacti would not show data templates
* issue: Handle snmp error exceptions better
* issue: Update Apache .htaccess files to support multiple version
* issue: When executing a full sync, if the table structured has
changed, recreate the remote table
* issue: Multiple domains not working as expected
* feature#197: Add external_id to Cacti for linking Cacti to other
monitoring systems
* feature#332: Support copy user groups
* feature: Log proper IP address if logging in behind a NAT
* feature: New qquery parsing rules: VALUE/TEST, VALUE/TABLE,
VALUE/HEX2IP
Tue Feb 28 13:00:00 2017 joop.boonenAATTopensuse.org
- Only allow to use the same spine version as the cacti version
Mon Feb 27 13:00:00 2017 liedkeAATTrz.uni-mannheim.de
- cacti 1.0.4:
* feature: Javascript: make menu movement smooth and use
localStorage
* feature: Added cacti_snmp_get_raw() for plugin developers
* issue#288: Function cacti_snmp_get bad handling of wierd value
into snmp_value
* issue#298: Graph generation issue with SNMP - Bits/Sec + Total Bandwith
* issue#301: Unresolvable DNS hostname causing backtraces
* issue#302: spikekill memory leak
* issue#303: Error when creating tree items with \"&\" in the name
* issue#307: Aggregate graph gives CMDPHP errors
* issue#308: UI resize issue
* issue#309: Show \"Save Successful\" notification permanently
* issue#311: Graph thumbnail settings in profile setting does not work
* issue#320: Users can not change their own password
* issue#324: Aggregate template graph template JavaScript error
* issue#352: Add configurable auto-logout and page-reload options
* issue#329: Customize the favicon
* issue#334: primary key on poller output boost table not efficient/not being
used correctly
* issue: Fixed issues with Dark theme
* issue: Fixed issues with Paw theme
* issue: Fix timespan calculation
* issue: Added misplaced join condition when generating RRDTool graphs
* issue: Fix the selection of timestan based on local_graph_id and rra_id
* issue: Correct error in discovery not adding devices
* issue: Action message did not always display
* issue: fix regex to use Domains like www.t-online.de
* issue: Properly align Order columns.
* issue: address renaming issues with tree items.
* issue: Add device snmp --version is ambiguous
* issue: SNMP Availability failed to report down devices - This only was occuring
for cmd.php collector.
* issue: i18n remove embedded HTML syntax
* issue: Wrap menu items to avoid scrolling
Sun Feb 19 13:00:00 2017 astiegerAATTsuse.com
- cacti 1.0.3:
* Upgrade 0.8.8h to 1.0.0 fails to create poller_output_boost table
* Added missing template import hash for 1.0.2
Mon Feb 13 13:00:00 2017 joop.boonenAATTopensuse.org
- Build version 1.0.2
* Changelog
- issue#278: Correct Boost Status display issue
- issue#275: Permission View issue and Device Dropdown when in Classic Theme
- issue#270: Major Mib Cache corruption. Rebuild your MIB Cache after upgrading
- issue: Resolve Cacti logo on Graphs page in Classic Theme
- Created a config.php fix patch, cacti-config.patch
Wed Feb 8 13:00:00 2017 joop.boonenAATTopensuse.org
- Build version 1.0.1
* Fixes CVE-2014-4000 bnc#022564
* Deleted cacti-log-path.patch is now handled via a symblink from
/srv/www/cacti/log to /var/log/cacti
* 1.0.1
- feature: SpikeKill allows filling range to last known good value
- issue#261: Add IPv4 and IPv6 Specific Counters to interfaces.xml
- issue#257: Poller Output Table not Empty WARNING messages in cacti.log
- issue#256: New Graph - Add Graph Items Fails (Data Sources shows None)
- issue#255: Errors Creating new Graphs - Undefined Index Errors
- issue#254: Unable to Properly add Data Source
- issue#251: Remote Data Collector stuck on upgrade page
- issue#247: Devices missing from tree device list
- issue#245: Drag and Drop in Tree Edit Erratic
- issue#243: SMTP Ping Failure with not SNMP Authentication
- issue#241: Authentication Method: None not functional
- issue#240: SQL error when install plugin
- issue#238: Duplicate color id\'s cause error during Upgrade
- issue#231: SNMPv3 - PHP ERROR WARNING: Fatal error: Unknown user name in file
- issue: Resolving visual issues with row counts.
- issue: When deleting Graphs prevent the removal of Data Sources that are still in use
- issue: Improve SNMP agent performance through SQL optimizations
* 1.0.0
- feature: Support for remote data collectors
- feature: Support Internationalization (i18n) for the main Cacti site, and supported plugins
- feature: Data Source Profiles replace RRA settings allowing a single system to have multiple polling intervals
- feature: Redesigned Tree page including Drag & Drop functionality
- feature: New Graph Permissions system designed to make permissions simple to manage
- feature: Add Themes \'Classic\', \'Modern\', \'Dark\', and \'Paw\'
- feature: Debug Data Sources by comparing them to the Data Template
- feature: New special Data Source type to detect the poller interval
- feature: Bulk inserts in PHP poller to address latency issues
- feature: Optimize data collection through in memory caching giving a 50% reduction in polling times when dealing with large sites
- feature: Support RRDtool VDEFs
- feature: Support new Graph Items: AREA:STACK, GPRINT:AVERAGE, GPRINT:LAST, GPRINT:MAX, GPRINT:MIN, LINE:STACK, TEXTALIGN, TICK
- feature: Support RRDtool features: Right Axis Support, Dynamic Labels, Tab Width, Legend Position, Legend Direction
- feature; Resizeable table columns
- feature: Deprecated Single Pane Tree View
- feature: Role Based Access Control (RBAC)
- feature: Support User Group Permissions
- feature: Show number of in use Graphs, Data Sources, and Devices for a given Template
- feature: Support bulk re-sync of graphs to assigned Graph Template
- feature: Bulk Device Settings changes
- feature: CDEFs, Colors, GPrint Presets consolidated to Presets menu
- feature: Authentication cookies for \'remember me\' functionality
- feature: Automatic logout after session inactivity
- feature: Replace Boost server in favor of RRDtool Proxy
- feature: Graph Details include CSV output, zoom, debug, and download links
- feature: Graph Export moved to a plugin
- feature: User change password functionality
- feature: Automation added to core functionality through the merge of the Discovery and AutoM8 plugins
- feature: Change interface graphs from 32 bit to 64 bit with ease
- feature: Plugins now have hooks in device templates and automation
- feature: Allow users to preview template imports to determine if there will be issues from importing
- feature: Automatic removal of orphaned graph items when importing newer versions of graph templates
- feature: Support for MySQL 5.7
- feature: Support for PHP 7.0
- feature: Merge Aggregate Plugin - Aggregate graph creation
- feature: Merge AutoM8 Plugin - Automation of graph creation
- feature: Merge Boost Plugin - Faster polling, result caching, on-demand RRDtool file updates
- feature: Merge CLog Plugin - View Cacti logs
- feature: Merge Discovery Plugin - Device discovery
- feature: Merge Domains Plugin - Support for domain (ADS/LDAP) specific user templates
- feature: Merge DSStats Plugin - Cache Data Source values for easy retrieval
- feature: Merge Logrotate Plugin - Rotate Cacti logs
- feature: Merge Realtime Plugin - Realtime graph viewing
- feature: Merge Reporting (Nectar) Plugin - Reporting
- feature: Merge RRDclean Plugin - RRD file cleanup and management
- feature: Merge Secpass Plugin - User password policy enforcement
- feature: Merge Settings Plugin - Shared settings for plugins
- feature: Merge SNMP Agent Plugin - SNMP Agent for Cacti providing system statistics
- feature: Merge SpikeKill Plugin - Remove unwanted spikes from graphs
- feature: Merge SSL Plugin - Force https
- feature: Merge SuperLinks Plugin - Add external links within Cacti
- feature: Merge UGroup Plugin - User groups with permissions
- feature: Merge Watermark Plugin - Watermark your Cacti graphs
- bug: Fixed issue where old graph templates (0.8.6-), could import bogus data causing issues with Data Input Methods
- bug#0000168: Duplicate data sources should be avoided when creating new graphs
- bug#0000851: Review an imported template
- bug#0001155: When viewing graph tree do not show empty nodes
- bug#0001337: Form to filter for graphs in host view mode
- bug#0001552: Date ranges not shown on graphs in the view with Daily, Weekly, Monthly & Yearly graphs
- bug#0001573: RRA templates/grouping
- bug#0001577: Override session handling and store session in Database
- bug#0001790: Allow for XML delimiter in fields of a script query
- bug#0001820: Unable to use a Data Input Method Output Field in more than one Data Source Item
- bug#0001827: Changing the graph template messes up the graph item fields
- bug#0001836: Add mysql error message to log
- bug#0001877: Cookies path is not properly set
- bug#0001966: Expand Devices in tree view not honored
- bug#0001970: Data query index order cache should be populated on re-index
- bug#0001981: Cacti is not full UTF-8
- bug#0001986: CLI allow add_graphs.php to have multiples --snmp-field and --snmp-value options
- bug#0001996: Allow using data input field in graph title
- bug#0002096: Enumerated SNMP values not parsed correctly
- bug#0002112: CLI add configurable parameters for device_add.php
- bug#0002133: Restrict User to only manage specific device(s)
- bug#0002135: Regular expression support for filter
- bug#0002137: Data query oid_suffix parameter does not function
- bug#0002159: Database creation file not fully compliant with strict SQL mode
- bug#0002162: Unable to authenticate user with password containing UTF-8
- bug#0002196: Incorrect script server instance number in log
- bug#0002225: Make -Cc SNMP option configurable
- bug#0002255: Script query_unix_partitions.pl should only query local mounts
- bug#0002336: Implement php-snmp class library
- bug#0002340: Data query script execution should be escaped
- bug#0002350: SNMP Data Query index_order ignored
- bug#0002351: Ping does not work with non-English locale
- bug#0002361: Spine does not log unknowns the same way cmd.php
- bug#0002362: Poller cmd.php makes wrong hex-string to decimal conversion
- bug#0002370: Cacti prints wrong date formats, does not honor a systems locale
- bug#0002403: Typo in DELETE statement leading to poor graphing performance
- bug#0002412: Graph Template duplication causes to be converted to TAB char
- bug#0002418: Data Source Items named \'ds\' break UI ability to add more items
- bug#0002419: SNMP enum results not parsed correctly by cmd.php poller
- bug#0002452: CVE-2014-4000 PHP Object Injection Vulnerabilities
- bug#0002454: OS Command Injection
- bug#0002468: Changing graph format to anything but PNG causes no output
- bug#0002476: Add support for SNMP v3 EngineID
- bug#0002483: Cisco ASA using Re-index method of verify all causes recache event every time
- bug#0002484: Incorrect SQL request in cli script repair_database.php
- bug#0002521: Unable to create two devices via CLI with the same IP-Address
- bug#0002522: Zero padded hex strings are parsed incorrectly
- bug#0002535: Graph Template Changes not updating RRDTool command
- bug#0002636: Creating Data Template with \"U\" for min and max saves field data_input_field_id as 0 for first item
- bug#0002697: CVE-2016-2313 allows remote authenticated users who use web authentication to bypass intended access
- bug#0002698: When the host is down the wrong data type are used for some columns in the host table
- bug#0002723: Renaming a disabled device still attempts to connect and get SNMP host information
- bug#0002724: Multipage graphs the menu can disappear
- bug#0002725: Changing graph template does not mark correct interfaces disabled on data query generated list
Mon May 9 14:00:00 2016 liedkeAATTrz.uni-mannheim.de
- cacti 0.8.8h:
* Authentication using web authentication as a user not in the
cacti database allows complete access (regression)
* Cacti SQL Injection Vulnerability
(CVE-2016-3172) (boo#971357)
* When click the [Clear] button after clicking the [Refresh]
button in Preview Mode , fails to CSRFcheck
* Cacti graph_view.php SQL Injection Vulnerability
(CVE-2016-3659) (boo#974013)
* Outdated MIBs for non-unicast packets
* Index is a MySQL 5.6 reserved word
* generate_graph_def_name() generates reserved word \"cf\"
Mon Feb 22 13:00:00 2016 astiegerAATTsuse.com
- cacti 0.8.8g:
* various graphing, PHP, HTML, output and monitoring fixes
* Drop CVE-2015-8369.patch, CVE-2015-8604-CVE-2015-8377.patch,
CVE-2016-2313.patch
Tue Feb 9 13:00:00 2016 astiegerAATTsuse.com
- Fix the following vulnerabilities:
* CVE-2015-8369: SQL injection in graph.php (boo#958863)
* CVE-2015-8604: SQL injection in graphs_new.php (boo#960678)
* CVE-2015-8377: SQL injection vulnerability in the
host_new_graphs_save function in graphs_new.php
(boo#958977)
* CVE-2016-2313: Authentication using web authentication as a user
not in the cacti database allows complete access
(boo#965930)
- adding CVE-2015-8369.patch, CVE-2015-8604-CVE-2015-8377.patch,
CVE-2016-2313.patch
Mon Nov 16 13:00:00 2015 ajAATTajaissle.de
- Spec cleanup, split -doc package
- Universal \"Requires:\" for httpd and mod_php_any [boo#867607]
- Dropped cacti.cron.new
- Updated cacti.cron
- Dropped cacti-httpd.conf.vhost
- Dropped cacti-httpd.conf.nonsuse
- Updated cacti-httpd.conf (for openSUSE <= 1210 and other)
- Updated cacti-httpd.conf.default (for openSUSE > 1210)
- Dropped cacti-script.patch (applies to a non-packaged file)
- Updated cacti.logrotate
Sun Jul 26 14:00:00 2015 astiegerAATTsuse.com
- cacti 0.8.8f:
* 0.8.8e Poller Script Parser is Broken
* cli/upgrade_database.php is missing releases
* Graph managment graphs.php save button does not work
* Poller Script Parser is Broken
Mon Jul 20 14:00:00 2015 joop.boonenAATTopensuse.org
- Fixed the spec file so the package also builds for el7, Fedora 20 > etc.
Sat Jul 18 14:00:00 2015 astiegerAATTsuse.com
- Update to 0.8.8e:
This update contains importand security fixes: [boo#937997]
- Multiple XSS and SQL injection vulnerabilities
- CVE-2015-4634 - SQL injection in graphs.php
Further fixes:
- Fixed issue with graph zooming failing to work
- Impossible to have a URL pointing directly to a graph
- Cannot delete data sources from the GUI
- viewing host in new tab - Undefined index: nodeid
- status_fail_date and status_rec_date are set incorrectly after
host is marked down
- Incorrect value in Hosts column on Host Templates page
- Incorrect row number in Devices -> (Edit) page
Tue Jun 16 14:00:00 2015 joop.boonenAATTopensuse.org
- Update to version 0.8.8d
- Fixes [bnc#934187]
- CVE-2015-4342: cacti: Multiple XSS and SQL injection vulnerabilities
- feature: Remove un-needed fonts and javascript files
- bug: Fixed SQL injection VN: JVN#78187936 / TN:JPCERT#98968540
- bug#0002261: PHP 5.4.0 added new error_reporting variable, causing cacti to show errors
- bug#0002391: Odd Behaviour on ReIndex of Data Query Data
- bug#0002393: Broken thumbnail images for graph templates
- bug#0002402: Subtree must not have the same header as the parent header
- bug#0002474: CLI add_device.php dows not set availability_method correctly
- bug#0002449: The Save button does not work: Invalid html on page Console -> Cacti Settings: empty form tag
- bug#0002428: Fail to delete all data input items when removing more than 1000 data sources
- bug#0002439: Password with special character don\'t work with LDAP authentication
- bug#0002461: invalid bn with ldap and anonymous bind
- bug#0002465: Graph Export return empty CSV file
- bug#0002484: Incorrect SQL request in cli script repair_database.php
- bug#0002485: Broken pagenation on graph viewing
- bug#0002489: SNMP - Get Mounted Partitions using Re-index method of Index Count Changed causes recache event every time
- bug#0002490: Can not select page for multiple datasources per device
- bug#0002494: CSV export always shows last day
- bug#0002504: Data template search not functional
- bug#0002542: [FG-VD-15-017] Cacti Cross-Site Scripting Vulnerability Notification
- bug#0002543: Unable to switch pages within graphs_new.php due to invalid URL generation
- bug#0002544: Duplicate entry in $nav_url during list view
- bug#0002571: SQL Injection and Location header injection from cdef id CVE-2015-4342
- bug#0002572: SQL injection in graph templates
- Renamed two patch files, to a more generic name:
- cacti-0.8.8c-cacti-log-path.patch to cacti-log-path.patch
- cacti-0.8.8c-cacti-script.patch to cacti-script.patch
Mon Dec 8 13:00:00 2014 aldemir.akpinarAATTgmail.com
- Update to version 0.8.8c
- New features
- New graph tree view
- Updated graph list and graph preview
- Refactor graph tree view to remove GPL incompatible code
- Updated command line database upgrade utility
- Graph zooming now from everywhere
- Security fixes
- CVE-2013-5588 - XSS issue via installer or device editing
- CVE-2013-5589 - SQL injection vulnerability in device editing
- CVE-2014-2326 - XSS issue via CDEF editing
- CVE-2014-2327 - Cross-site request forgery (CSRF) vulnerability
- CVE-2014-2328 - Remote Command Execution Vulnerability in graph export
- CVE-2014-4002 - XSS issues in multiple files
- CVE-2014-5025 - XSS issue via data source editing
- CVE-2014-5026 - XSS issues in multiple files
- Removed cacti-0.8.8b-cacti-log-path.patch as it is incompatible with 0.8.8c.
- Removed cacti-0.8.8b-cacti-script.patch as it is incompatible with 0.8.8c.
- Removed cacti-0.8.8b_CVE-2013-5588_CVE-2013-5589.patch as this code is incorprated to cacti 0.8.8c
- Removed cacti-0.8.8b_security.patch as this code is incorprated to cacti 0.8.8c
- Created cacti-0.8.8c-cacti-log-path.patch so that cacti only logs to /var/log/cacti
- Created cacti-0.8.8c-cacti-script.patch so that cacti uses /usr/share/cacti/scripts
Sun Apr 13 14:00:00 2014 ajAATTajaissle.de
- Add cacti-0.8.8b_security.patch:
- Fixes [bnc#870821]:
- CVE-2014-2326: Unspecified HTML Injection Vulnerability
- Fixes CVE-2014-2328:
- Unspecified Remote Command Execution Vulnerability
- Fixes [bnc#872008]:
- CVE-2014-2708: Unspecified SQL Injection Vulnerability
- CVE-2014-2709: Unspecified Remote Command Execution Vulnerability
- Add cacti-0.8.8b_CVE-2013-5588_CVE-2013-5589.patch:
- Fixes [bnc#837440]:
- CVE-2013-5588: HTML Injection Vulnerability
- CVE-2013-5589: SQL Injection Vulnerability
Sat Apr 12 14:00:00 2014 ajAATTajaissle.de
- Change php requirements to be more general on SUSE systems
[bnc#862993]
Thu Aug 8 14:00:00 2013 joop.boonenAATTopensuse.org
- Update to version 0.8.8b
- bug: Fixed issue with custom data source information being lost when saved from edit
- bug: Repopulate the poller cache on new installations
- bug: Fix issue with poller not escaping the script query path correctly
- bug: Allow snmpv3 priv proto none
- bug: Fix issue where host activate may flush the entire poller item cache
- security: SQL injection and shell escaping issues
Mon Jun 4 14:00:00 2012 aldemir.akpinarAATTairties.com
- Added official cacti 0.8.8a patch
Mon Apr 30 14:00:00 2012 aldemir.akpinarAATTairties.com
- New version 0.8.8a
- Fixed an rpmlint warning
Mon Apr 16 14:00:00 2012 joop.boonenAATTopensuse.org
- Corrected the crontab file for openSUSE >= 12.2
- Some cross distro fixes so plugins will also build for other distros
Tue Apr 10 14:00:00 2012 joop.boonenAATTopensuse.org
- Install cacti in /srv/www/cacti/ from openSUSE 12.2 onwards
- Passed the spec file through spec-cleaner
- Cacti-PA can be removed as cacti includes the Plugin Architure
Tue Apr 10 14:00:00 2012 aldemir.akpinarAATTairties.com
- Minor changes in the spec file, updated version to 0.8.8
Sun Jan 8 13:00:00 2012 joop.boonenAATTboonen.org
- Reformated the spec file to the openSUSE standard
Fri Dec 30 13:00:00 2011 aldemir.akpinarAATTairties.com
- Added official settings_checkbox patch
Tue Dec 13 13:00:00 2011 joop.boonenAATTopensuse.org
- Build version 0.8.7i
Tue Oct 4 14:00:00 2011 aldemir.akpinarAATTairties.com
- Upgrade to version 0.8.7h
Fri Jun 10 14:00:00 2011 aldemir.akpinarAATTairties.com
- added \'Provides\' to make cactid installable
Sat Jul 10 14:00:00 2010 joop.boonenAATTopensuse.org
- update to cacti-0.8.7g
Sat May 22 14:00:00 2010 joop.boonenAATTopensuse.org
- update to cacti-0.8.7f
Wed Nov 11 13:00:00 2009 joop.boonenAATTopensuse.org
- Added the missing cli directory
Mon Aug 31 14:00:00 2009 joop.boonenAATTopensuse.org
- Minor change in the name of the patch file
Fri Aug 28 14:00:00 2009 puzelAATTnovell.com
- update to cacti-0.8.7e.tar.bz2
- bug#0001044: Creating a DS, Output field can\'t be selected for
DT with a DIM when \"Use Per-Data Source Value\" is on
- bug#0001341: SNMP query: add oid_suffix for weird SNMP queries
- bug#0001345: Overwriting $snmp_index in query_snmp_host() breaks
SNMP Data query if using get method
- bug#0001346: Strip out noisy \'No Such Instance currently exists
at this OID\'
- bug#0001404: timeout in \"function ping_icmp\" (lib/ping.php)
- bug#0001405: Spaces in DS when .rrd file is created, so it fails
- bug#0001407: Place graph thumbnail into div to lower page length
changes on load graphs
- bug#0001410: Thumbnail Columns is not honored for host display
with snmp index group style
- bug#0001411: Graph searching issue
- bug#0001413: strip_quotes fails
- bug#0001426: multiple form opening due to bug in draw_edit_form()
- bug#0001436: CSV Export Start Date and End Date are always
1970-01-01 01:00:00
- bug#0001443: format_snmp_string can return a number with a leading space
- bug#0001446: Wrong dates override in CSV export
- bug#0001456: oid_uptime is not parsed correctly
- bug#0001460: Skiping input parameters in data_query_field_list()
may lead to SQL errors
- bug#0001464: Typo in install/index.php
- bug#0001467: Customisable oid index parse regexp for weird MIBs
- bug#0001468: Tree is not expanded correctly
- bug#0001469: Tree is not being expanded if user followed link
outside of cacti
- bug#0001476: Mark stacked columns in rrdtool_function_xport() output
- bug#0001477: Spelling error in a variable in html_tree.php
- bug#0001478: Combo boxes on Graph Management page produce URLs
with leading spaces
- bug: Top Graph Header Breaks When Plugins Used
- bug: SNMP v3 Password issue caused by Firefox\'s Password AutoFill
- bug: Strip Quotes does not properly handle the value \'U\'
- bug: Changes to the graph tree would not show up immediately for
current user
- bzip sources
Mon Jun 15 14:00:00 2009 prusnakAATTsuse.cz
- reverted BuildRequires from libdb-4_5-devel to db-devel
Fri May 22 14:00:00 2009 joop.boonenAATTopensuse.org
- Working with prefix
Sat Apr 25 14:00:00 2009 joop_boonenAATTweb.de
- Updated BuildRequires to libdb-4_5-devel
