Up to [cvs.NetBSD.org] / pkgsrc / net / cacti
Request diff between arbitrary revisions
Keyword substitution: kv
Default branch: MAIN
net: Replace RMD160 checksums with BLAKE2s checksums All checksums have been double-checked against existing RMD160 and SHA512 hashes Not committed (merge conflicts...): net/radsecproxy/distinfo The following distfiles could not be fetched (fetched conditionally?): ./net/citrix_ica/distinfo citrix_ica-10.6.115659/en.linuxx86.tar.gz ./net/djbdns/distinfo dnscache-1.05-multiple-ip.patch ./net/djbdns/distinfo djbdns-1.05-test28.diff.xz ./net/djbdns/distinfo djbdns-1.05-ignoreip2.patch ./net/djbdns/distinfo djbdns-1.05-multiip.diff ./net/djbdns/distinfo djbdns-cachestats.patch
net: Remove SHA1 hashes for distfiles
(net/cacti) Updated 1.2.7 to 1.2.11 1.2.11 -security#1566: Add SameSite support for cookies -security#1985: Cookie should be properly verified against password -security#3342: CSRF at Admin Email -security#3343: Improper Access Control on disabling a user. -security#3414: Update to jQuery 3.4.1 to resolve XSS issues with jQuery 3.3.1 -issue#2265: When attempting to save Graph field, query_ifSpeed is not properly validated -issue#2400: Allow ability to duplicate site settings -issue#2428: Make plugins non-case sensitive for folder names, whilst allowing nicer display names -issue#2580: When running DSSTATS, system isn't properly detecting that another is already running -issue#2853: Discovered Devices filtering do not include snmp description or name -issue#3231: Allow user to unlock a tree that has been locked for editing by another -issue#3237: Report gets resent every poller cycle -issue#3247: Language source files do not update "PO-Revision-Date" attribute -issue#3261: Automation rules aren't run for new devices on remote data collectors -issue#3296: Bad PHP memory limit values can result in failed upgrades -issue#3299: When using php-snmp and setting SNMPv3, warning is now shown as library does not support it properly -issue#3303: When installing under Windows OS, path expansion is not converted to PHP required format -issue#3310: When using 32-bit OS, automation errors can be seen due to subnet mask calculations -issue#3312: Console menu does not auto-expand for graph item editor page -issue#3313: When installing, multiple issues can be seen due to bad packages -issue#3314: Script Server has invalid debug code left in -issue#3317: Warnings can appear from CSRF Magic library due to multiple token values being found -issue#3319: Errors can occur upgrading from 0.8.x due to incorrectly detected data source profile id -issue#3322: When searching for LDAP accounts, allow recursive searching -issue#3330: Packages that are not properly formatted can cause installation issues -issue#3334: When upgrading from 0.8.x Automation SNMP Options should be populated -issue#3335: Unable to hide Device based Aggregate Graphs on Tree -issue#3336: Plugins need the ability to relax some content security policies in order to work properly -issue#3340: Undefined variable warning can appear when using 95th percentile graphs -issue#3341: MoTranslator does not appear to be handing null values properly -issue#3345: When attempting to refresh datetime picker, unexpected results can appear -issue#3346: When attempting to rewrite octet strings, extra space breaks pattern matching -issue#3348: When attempting to handle Orphans and/or Sync Graphs, results are not as expected -issue#3349: Prevent setting the PHP variable max_input_vars since it is read only -issue#3350: When editing a data source template, inconsistent results can be seen due to database query -issue#3355: When viewing raw graph data via the GUI, values are not always calculated correctly -issue#3357: Tree Search textbox resizes to 0 in some cases -issue#3360: When using guest accounts, after several timeouts result in refreshes, guest becomes logged out -issue#3363: The current user and user group permissions pages are not responsive -issue#3367: When Data Queries timeout, data is removed from the Host SNMP Cache table causing issues -issue#3368: Saving a Graph Template Item fails due to missing includes -issue#3373: When logging in via LDAP, ActiveDirectory would sometimes report insufficient access -issue#3375: When polling more often than default period of collecting data, distribution of collected data was not occurring -issue#3376: Improve speed when recovering from a poller from offline state -issue#3378: When attempting to check whether to include MoTranslator, typo makes it appear unavailable -issue#3380: php error when trigger threshold sendmail -issue#3386: Second data collector shows as running when its has no items to gather -issue#3387: Minor corrections to CSRF Magic -issue#3388: Naming of CLI programs does not always match name used within syntax usage advice -issue#3390: Incorrect breadcrumb bar if current tab is not "Graphs" -issue#3402: Cacti scores low on performance audit on lighthouse audit -issue#3408: CSRF Secret path is not passed properly when attempting to initialize secret -issue#3409: Issues with navigation link activations to other base Cacti pages -issue#3410: Zoom looses focus in advanced mode while crossing chart border -issue#3411: When upgrading a primary server, full synchronization is not happening as expected -issue#3412: When upgrading a primary server, automation templates are removed -issue#3413: When upgrading and choosing to upgrade your packages, installer finishes without package data in log -feature#1551: Allow system uptime to be a variable for use with graphs -feature#1990: Plugin Realm should have a 'role' to help maintain changes between plugins -feature#2110: Add Refresh Interval to Data Collectors display -feature#2156: Add Location based filtering -feature#2236: Allow for Purging of Data Source Statistics from the GUI -feature#2268: Restore ability to duplicate a data profile -feature#2534: Enhance table navigation bars to support systems with larger number of items -feature#2688: Increase length of Graph Item 'value' field to support pango-markup better -feature#3304: Allow Basic Auth Accounts to be mapped by CSV file -feature#3366: Make form elements under checkbox_groups flow using flex grid style -feature#3374: Set the domain attribute to secure cookies for the 'remember me' option -feature#3403: Enhance the "Graph Debug Mode" to display RRDtool Command lengths and excess warnings 1.2.10 -security#3285: When guest users have access to realtime graphs, remote code could be executed (CVE-2020-8813) -issue#3240: When using User Domains, global template user is used instead of the configured domain template user -issue#3245: Unix timestamps after Sep 13 2020 are rejected as graph start/end arguments -issue#3246: When upgrading with remote collectors, sync status does not always return properly -issue#3250: When PHP memory limit is set to -1, recommendation value fails -issue#3253: Upgrade can stall when checking permissions on csrf-secret.php -issue#3254: Installer shows script owner rather than running user for suggested chown command -issue#3266: When setting User Groups to 'Defer to the User', setting can lead to user being told they have no permissions -issue#3269: When searching Graphs under a Chinese language, an unexpected error as sometimes shown -issue#3274: When editing a tree, multiple device drag/drop does not work -issue#3276: When spine aborts, script server can be left wanting or generating unnecessary logs -issue#3277: When boost does not find an initial time, numeric errors can be raised -issue#3281: When changing Graph Template options, incorrect image format may be selected -issue#3282: Graph's can be sized incorrectly if image is SVG format -issue#3283: When setting a file path, valid characters not recognised properly -issue#3287: When using graph template 'Cacti Stats - User Logins', an incorrect count of invalid users can be seen -issue#3288: When on Device page, pressing 'Go' on the filter caused Device New menu pick to appear -issue#3289: When using CMD.PHP, poller id is not always shown properly -issue#3290: When using CMD.PHP, inconsistent device logging levels may occur -issue#3298: When initialising fields in JavaScript, text/textarea elements have width set to zero if it is hidden by parent -issue#3302: Editing a Graph Template does not show the Data Template name 1.2.9 -security#3191: Lack of escaping on some pages can lead to XSS exposure (CVE-2020-7106) -security#3201: Remote Code Execution due to input validation failure in Performance Boost Debug Log (CVE-2020-7237) -issue#2937: Devices still show in lists despite being deleted -issue#3038: When editing an aggregate on smaller screens, layout may not be correct -issue#3136: Upgrade may fail between 1.2.7 and 1.2.8 if incompatible database format used -issue#3142: Chrome sets graphs tree navigation view to width 0px -issue#3146: Unable to create aggregate graphs on new installations -issue#3149: After refresh of page, tooltips stop working -issue#3150: When using Time Graph View, Zooming can cause errors -issue#3151: Passing glue string after array is deprecated in PHP 7.4 -issue#3155: Aggregate does not correctly follow color template when reordered -issue#3156: On new installs, gprint_format was missing from table aggregate_graphs -issue#3157: Back button not working properly with Classic theme -issue#3158: Classic theme show only 3 tabs on mobile device. Don't show Console menu -issue#3159: PHP Memory is not correctly identified when value is not in megabytes -issue#3161: When the poller_output_boost table is missing, recreate it before a poller run -issue#3163: When using RPMlint, Free Software Foundation address is shown to be incorrect -issue#3165: Zoom looses its focus after all graphs on page rendered -issue#3166: When changing zoom level, graphs are resized inappropriately at the end -issue#3167: Installer should initialize the csrf-secret.php file automatically -issue#3168: sqltable_to_php.php script does not pick up row_format -issue#3177: Remove legacy plugin hook that presents potential 3rd party security issues -issue#3178: The change password page is not displaying the rules -issue#3180: Receiving undefined index errors when working with some Data Queries -issue#3181: When configuration file is unreadable, Cacti shows database connection errors if non defaults are needed -issue#3182: When a database connection error occurs, there is no way to report actual error -issue#3184: Improve program path detection by using system path and PHP_BINDIR -issue#3193: Starting with MySQL 5.7 some sql_mode variables are required for some plugins -issue#3196: Minimize use of eval() in JavaScript due to emerging Content-Security-Context guidelines -issue#3200: Unable to mass change Graph Template image format in mass -issue#3206: Converted aggregate graph cannot be edited -issue#3209: Error occurs when Creating New Graphs through Automatically Added Devices using Sync Device Template -issue#3216: When editing a Data Source Profile size is shown as 'N/A' -issue#3224: When removing graphs by command line, regex is not properly validated when empty -issue#3225: Unable to Import Templates due to invalid dependency hash -issue#3226: When processing secpass login, failed logins are not recorded -issue#3228: Login page does not remember the last realm used by user -issue#3232: When editing HRULE and VRULE items, color selector was not presented -issue#3233: When working with non-templated graphs, it can be difficult to determine what items represent -issue#3235: Transient errors may occur with table poller_output_boost_arch 1.2.8 -security#3025: CVE-2019-17357 When viewing graphs, some input variables are not properly checked (SQL injection possible) -security#3026: CVE-2019-17358 When deserializating data, ensure basic sanitization has been performed -security#3066: When using HTTPS, secure cookie to prevent potential weakness -issue#1228: Any tree or branch with a long name force main content off screen -issue#2133: Long snmp_indexes are being cut off -issue#2888: Long hostnames cause template filter to go off page -issue#2987: Changing Color Template does not update Aggregate -issue#2989: Allow Remote Data Collectors to maintain their own path variables -issue#2991: Cacti Statistics device template can generate unexpected errors -issue#2995: When editing a report, column setting may be ignored incorrectly -issue#2996: When editing a user, graph options do not properly reflect previously saved settings -issue#2998: Session performance issues due to excessive use for database storage -issue#2999: Blank arguments can lead to extra spaces in script arguments -issue#3006: Boost generates undefined variables warning during poller run -issue#3011: i18n logging does not check write permission exists -issue#3012: When viewing realtime graphs, some input variables are not properly checked -issue#3013: Allow legends to be modified for Aggregate Graphs -issue#3017: Automation network range with spaces fails validation -issue#3019: User selected language is not always adhered to -issue#3021: Tree view cuts off at the bottom of page on modern theme -issue#3023: When clicking highlighted tab, side panel is not always shown/hidden correctly -issue#3027: Aggregate Graph re-ordering does not work -issue#3028: When zooming a graph, unable to reach edge of graph without losing focus -issue#3030: Pace continues to run even after a page is finished rendering -issue#3032: Graphs may select MAX instead of AVERAGE as consolidation function even if there is no item with MAX present. -issue#3035: When editing a tree, can not remove entries due to CSS bug -issue#3037: When emptying poller output using cli, debug functions are not properly included -issue#3039: Allow packagers to be able to specify an alternate location of csrf-secret.php file -issue#3040: When running automation, discovery can still run even if cancelled -issue#3041: When running automation, scans do not always respond to being cancelled -issue#3042: When running automation, scan can fail when selecting remote pollers -issue#3045: When viewing Aggregate Graphs, an error due to undefined referrer may occur -issue#3047: When saving settings, ignore remote pollers who have not checked in recently -issue#3050: When viewing graph trees, some input variables are not properly checked -issue#3052: When editing CDEF's, slow database performance can occur -issue#3053: When viewing graph thumbnails, some input variables are not properly checked -issue#3055: During install/upgrade, database tests are not performed correctly -issue#3059: When using nth_percentile, correct value is not always returned if using MAX consolidation -issue#3060: When upgrading from older MySQL databases, format is not changed from compact to dynamic -issue#3061: When running automation, allow SNMP to be used as a ping method -issue#3068: When administrating users, some input variables are not properly checked -issue#3070: Improve database logging when a crashed table is encountered -issue#3073: Automation network range does not always produce the correct start/end values -issue#3078: When viewing graph debug from remote data collector, File Not Found warnings can appear incorrectly -issue#3079: Allow domain names to be stripped from a device's long description -issue#3080: Remote Agent throws warnings that graph_nolegend has not been sanitized -issue#3085: When editing a poller, ensure each listening IP is unique -issue#3081: External Links are not showing a glyph when they appear on the Console menu -issue#3089: When viewing graphs in realtime, undefined variable can be logged for 95th Percentile graphs -issue#3099: Graph template 'Linux - Memory Usage' has the wrong unit on its vertical_label -issue#3101: Polling times can be slightly inconsistent due -issue#3104: When viewing graphs, a byref error can be seen in the error logs -issue#3105: When viewing hosts, some input variables are not properly checked -issue#3111: When adding devices via command line, bad SNMP versions are not reported -issue#3112: When zooming on Graphs, too many requests are being made causing slowness -issue#3114: Support for USB devices that change name due to their hosts restarting -issue#3118: When converting tables, the dynamic row format should be selected -issue#3119: Main Data Collector should perform a Full Sync whenever it is installed/upgraded -issue#3120: Correct issues causing incompatibility with PHP 7.4 -issue#3121: When converting tables during install, show what will be changed -issue#3123: Named colors table is not properly imported/upgraded -issue#3124: When a second data collector is added, boost is not enabled automatically -issue#3128: i18n handler checks for existence of wrong mo file -issue#3129: Logout repeated occurs even when already logged out -issue#3132: Installer fails to continue if automation range is array of networks -issue#3098: Support percent sign(%) in graph gprint item like legend area. -feature#3077: Allow disabling remote poller resource cache replication to support upgrade testing
(net/cacti) Updated 1.2.3 to 1.2.7 1.2.7 -security#2964: CVE-2019-16723 Security issue allows to view all graphs -issue#1181: When opening the Scheduler, it may appear off screen when opened near the bottom of a window -issue#2894: When using Remote Data Collectors, database information and recommendations may show Incorrect values -issue#2895: When using data sources from different RRDs, Percentile calculation may be incorrect -issue#2899: When displaying a form, variable substitution may not always work as expected -issue#2922: When running a data query, the result may come back as undefined -issue#2925: When using consolidation functions, retrieving the first step can cause errors -issue#2926: When editing a graph, variable validation errors may prevent changes from being saved -issue#2929: Boost performance may become poor even in single server mode -issue#2930: RRDtool can generate errors to standard output which can corrupt images -issue#2932: When RRDTool generates an error creating an image, it is not always reportedly properly -issue#2936: Installer will loop when number of tables exceeds PHP's max_input_vars limit -issue#2938: Under CentOS packages, upgrade_database.php script uses incorrect location for DB upgrade scripts -issue#2940: Images are not always properly sized until the page size changes -issue#2949: Order icons may not be properly aligned -issue#2951: Allow legends to be modified for Aggregate Graphs -issue#2958: Drop down autocomplete lists do not always open as expected -issue#2961: When syncing device templates, undefined function may be raised -issue#2963: When running ss_cpoller script, avgTime incorrect returns maxTime -issue#2966: Realtime popup windows do not always honor settings -issue#2967: When using Spikekill, gap and range fill are not operating as expected -issue#2970: When a user edits their profile, buttons may appear as unusable whilst still being enabled -issue#2973: User menu does not always display properly on mobile devices -issue#2974: Script Server can raise unexpected warnings when 'arg_num_indexes' set but not found in data source -issue#2975: Datasource Debug does not properly handle European numbers in certain circumstances -issue#2976: Boost messages should be stored in their own log file -issue#2977: Data updates with past timestamps can cause boost errors -issue#2978: Moving hosts between data collectors is slow -issue#2979: Multi Output Fields are not parsed correctly -issue#2984: When checking SQL fields, value was not always primed -issue#2986: Selecting 'Devices' menu pick closes 'Management' menu -feature#2943: Allow all Data Queries of a device to be re-indexed at once -feature#2952: If device is down or threshold breached, highlight in tree view -feature#2985: Update phpseclib to 2.0.23 1.2.6 -issue#2794: Graph template not saved on graph edit -issue#2825: "innodb_doublewrite = off" possibly dangerous recommendation -issue#2829: PHP recommendations always see memory limit as unlimited -issue#2830: Disabled Top/Bottom external links should not be displayed -issue#2832: Install/Upgrade log does not show anything -issue#2833: Undefined index can occur when data source does not have an snmp_index -issue#2834: Boost performance drops on very large systems -issue#2835: When creating graphs and inneficient query is causing long creation times -issue#2837: Sunrise theme does not render checkboxes 100% correctly -issue#2838: jQueryMultiselect does not match upstream due to forking -issue#2839: Non regular expression search filters don't support international characters -issue#2841: Total count is wrong after searching for External Link pages -issue#2843: DSStats reruns Daily Aggregation every minute -issue#2844: Autocomplete settings for passwords are not properly defined -issue#2845: Data Template can't be edited when it is in use -issue#2846: Allow tooltips for section headers with 'question' icon -issue#2847: Permanently convert an Aggregate to a regular graph -issue#2848: Aggregate graphs get clipped due to incorrect date range -issue#2856: Aggregate issues with very long RRDtool command lines -issue#2857: When trying to find the best index to use, a 'must implement Countable' warning appears -issue#2860: When testing remote poller connections during install, undefined variable warning can occur -issue#2862: Automation does not calculate network information correctly for single hosts -issue#2866: Add poller ID to subject for admin notifications -issue#2869: When creating aggregates from Graphs, JavaScript issues can occur -issue#2872: Add support for MySQL 8 and use of grouping as name for a column -issue#2875: Undefined variable when removing spikes in some cases -issue#2877: When attempting to send report, undefined function 'get_tinespan' messages appear -issue#2878: Function get_magic_quotes_gpc() is now deprecated in PHP 7.4 -issue#2879: Switching from authPriv to authNoPriv produces error when saving -issue#2884: Replication continues to occur when poller has been disabled by sysres-dev -issue#2891: Script server script ss_fping.php generates error when not called by script server -issue#2901: Poller overrun warning message is badly worded -issue#2902: Mailer incorrectly reports it is sending to noone -issue#2903: PHP recommendations can generate a warning causing JSON issues -issue#2905: Sorting plugins by version can lead to unexpected ordering -issue#2907: SSL column for multiple pollers can be incorrectly set causing SQL errors -issue#2908: When URL_PATH is blank, it should assume that it is '/' -issue#2909: Correct usage of affect vs effect in strings -issue#2910: Can not show user menu when in portrait mode on mobile devices -issue#2911: Graph variables are not always encoded to JSON properly resulting in warnings -issue#2912: Navigation cache can sometimes be corrupted resulting in a non-array value -issue#2913: When adding new graphs, the type of graph is not remembered -issue#2917: Action icons next to graphs can sometimes become unselectable due to zoom -issue#2919: When refreshing menu, selected items are sometimes lost and submenu items can become hidden 1.2.5 -issue#1978: Popup Menus can appear off screen when using Graph Thumbnails -issue#2282: Installation wizard does not detect RRDtool version correctly -issue#2524: When editing a tree, Drag and Drop of Devices does not always work as expected -issue#2573: Associated Graph Template for Data Query can sometime disappear -issue#2656: GPRINT text_format does not replace Data Query and Host Fields -issue#2661: Automation does not always calculate network range/subnet correctly -issue#2663: Some legacy Data Queries can not determine their index order causing broken graphs -issue#2674: Large strings can sometimes cause language translation can fail -issue#2719: Automation may sometimes create empty graphs -issue#2721: When replacing '|input_xxxx|' strings, undefined index can occur -issue#2722: Calls to _db_replace() are not consistent resulting in warnings -issue#2723: When replicating to remote pollers, Undefined Variable errors may be seen -issue#2724: When graphing HRULE items, 'Only Variables should be passed by reference' error may be seen -issue#2725: When viewing logs in utilities, filenames should be limited the same as clog -issue#2726: During Automation logging, include the Rule ID that triggers the creation of an item by xmacan -issue#2732: When using basic authentication, automatically strip any @domain information -issue#2734: Allow non-english labels to be used on Graph Templates -issue#2727: When using Polling Hosts Template, warnings can be issued when CMD.PHP is the poller -issue#2733: When processing SNMP data, space delimited hex strings do not always convert into MAC addresses -issue#2735: Mouse cursor should show as default pointer if column is not sortable -issue#2736: When using MySQL 8 or above, 'function' is considered a reserved word unless quoted by xmacan -issue#2741: Various errors can occur due to undefined or incorrect variable names -issue#2742: Various errors can occur due to undefined or incorrect variable names -issue#2743: Attempts to close a tooltip when no tooltip has been set may cause errors -issue#2744: When changing password, undefined index error can occur if user is not logged in -issue#2748: If PHP location setting is invalid during install/upgrade, this should be notified on modules page -issue#2750: When performing multiple sort, highlighting of content occurs -issue#2751: When editing a Tree, display filter may not allow 'All' option to work -issue#2752: When running verbose query on device, you are unable to copy text from items -issue#2753: Unable to copy entire verbose query using clipboard command -issue#2757: Page Navigation can be subject to XSS injection -issue#2758: Various sensitive directories are browsable if web server directory browsing is enabled -issue#2760: Unable to add items into a report -issue#2762: Creating an aggregate graph can sometimes fail due to unknown RRD tools error -issue#2766: When modifying Aggregate Templates, changes are not always cascaded to Graph -issue#2768: Aggregate Graphs may sometimes show the wrong row count -issue#2770: ItemType is not updated when saving Report Items -issue#2772: Add tooltip support to html_header() and html_header_checkbox() -issue#2775: Remote pollers may sometimes fail to replicate data back to main system -issue#2777: Attempting to edit a non-existent report generates an error -issue#2778: When rendering graphs, resizing can sometimes occur repeatedly -issue#2779: On new installations, automation rules for Interface Graphs are broken -issue#2780: Upgrade database script not actually upgrading Cacti -issue#2782: When replicating the syslog plugin, the configuration file is ignored causing errors -issue#2783: When limiting the number of displayed characters, international characters may sometimes display incorrectly -issue#2784: When removing a device with graphs but no data sources , errors are generated -issue#2785: When editing a graph rule, warnings incorrectly appear about unsaved changes -issue#2792: When a checkbox 'friendly name' has a comma, checkbox functionality stops working -issue#2797: When upgrading from before 1.x, SuperLinks view permissions may not be correct -issue#2799: Under heavy use of Real Time Graphs, SQL errors may start appearing -issue#2800: When editing a tree, using a comma in the search field stops search from working -issue#2802: If a Device lacks ifName, an alternative field is not always found even if available -issue#2807: When editing a Data Template that has dependant graphs, some attributes should not be modifiable -issue#2808: When navigating a tree, the layout may unexpectedly move -issue#2814: When viewing the utilities page, HTML tags may be seen rather than rendered -issue#2816: When viewing logs, paging does not always working correctly -issue#2818: Automation can sometimes incorrectly add duplicate devices with the same sysname -issue#2820: When path is blank, is_resource_writable() will generate 'Uninitialized string offset: -1' -issue#2821: When the desired locale can not be located, a number format issue may occur -feature#2728: Update phpseclib to 2.0.17 by DavidLiedke -feature#2809: Update c3.js & d3.js by DavidLiedke -feature#2730: Update jstree.js to 3.3.8 by DavidLiedke -feature#2754: Allow Devices, Graphs and Data Sources to be searched by ID -feature#2765: When editing a tree, allow cascading selection of available graphics -feature#2805: Merged plugins are not always upgraded correctly -feature#2823: Enhance the splice_rrd.php to be able to merge RRDfiles of differing step 1.2.4 -issue#2523: Send A Test Email stops working under PHP 7.3 -issue#2589: Missing RRD file can cause DSSTATS to throw errors -issue#2590: When installing, chosen language is sometimes lost -issue#2591: Menu selection does not always match selected page/section -issue#2592: When viewing an aggregate graph, 'Display graphs from this aggregate' option does always not work -issue#2593: Unable to migrate aggregate graphs to matching aggregate template -issue#2598: Creating an aggregate graph without associated template causes RRDtool error -issue#2599: Creating/Updating an Aggregate Graph to use LINE/STACK's generates invalid SQL statements -issue#2604: When adding a dataquery, SQL errors can be generated -issue#2605: When installing, checking database tables can cause errors -issue#2608: db_update_table() function should not require an engine type or comment -issue#2609: When updating from earlier than 1.2, timezone column might not exist -issue#2610: Data Sources troubleshooter generates warning that each() function is deprecated -issue#2612: When RRDtool fails to initialize, DSStats generates lots of warnings -issue#2618: ifAdminStatus in snmp_queries/interfaces.xml -issue#2621: File paths that accept blanks are not allowing blanks -issue#2622: Various undefined variables generate errors within database.php -issue#2623: When using form_text_area(), invalid HTML can be generated -issue#2627: Some filenames can be lost in log file selection list -issue#2629: When upgrading, ldap library is not loaded properly due to incorrect paths -issue#2632: Automated Networks are not being properly replicated to additional pollers -issue#2635: When running automation scans, database connection should be forced to central database -issue#2638: Support disabling PHP SNMP extension by mhoran -issue#2645: Some URLs are incorrectly calculated -issue#2649: Automation not creating graphs when there are custom items -issue#2650: Several undefined variables are generating warnings -issue#2662: HRULE objects broken in some cases -issue#2668: Trailing parentheses are removed from the SNMP system description -issue#2672: Cacti Install on Windows Fails -issue#2676: Skin paper plane not working on iPhone XR -issue#2678: Call to undefined function _() in data_queries.php -issue#2679: Users with passwords that do not meet complexity requirements are not redirected to the Change Password page -issue#2680: Remove deprecated $php_errormsg usage -issue#2689: Increase boost maximum memory limits -issue#2693: Graph links do not contain URL path causing links to fail -issue#2698: Avoid duplicated icon in the main.js of all themes -issue#2699: Login option "Show the page that user pointed their browser to" does not work properly -issue#2702: sqltable_to_php.php does not always generate valid table data arrays -issue#2707: Some pages that have permission errors dont raise proper messages -issue#2712: PHP memory should be unlimited in scripts that need more memory than the default -issue#2713: SNMP System Description with UTF8 strings properly are not properly parsed -issue#2718: When links are converted to ajax calls, mailto links should not be included -issue#2720: When calculating percentiles, the value is incorrect as the steps are not placed in correct order -issue#2822: When stderr log file is not populated, clog generates 'empty needle' error -feature#2538: Allow users to change default method of removing data sources when deleting graphs -feature#2539: Allow users to set the default graph lock status -feature#2540: Allow users to enable/disable graph tree history -feature#2646: Allow application of automation rules on CLI by rb83 -feature#2654: New hook to notify plugins of user profile changes ('auth_profile_update_data') -feature#2664: Add option to purge spikekill backups -feature#2701: Provide option to continue graphing objects that loose their index -feature#2704: Device and template cache do not refresh properly
Completing the upgrade to Cacti v1.2.3. Funny enough, the previous commit coincided with my own work on a package upgrade. It brought a few bits and bobs I had been missing, and my work closes a few of its gaps. In detail: INSTALL - set CACTI_USER and APACHE_GROUP properly MESSAGES - mention newer PHPs' php.d, while updating the extension list mention <https://github.com/Cacti/cacti/issues/2621> setup problem Makefile - add mandatory dependencies: php-{json,zlib,mbstring,posix} add patched files to 'paths' substitution files/httpd-cacti.conf - convert to Apache 2.4 ACL syntax patches/ - comments, CACTI_LOGDIR substitution Minor touch-ups everywhere - I am sure there is more to do. The result pkglints, builds, installs, configures (taking the above #2621 into account), and runs.
cacti: update to 1.2.3 Changes since 0.8.8h: 1.2.3 -issue#1063: Tree View does not display the last item correctly under 'Modern' theme -issue#2282: Install Wizard does not Detect RRDtool Version on Windows -issue#2430: "New Device" menu item showing as selected incorrect when "Devices" clicked -issue#2435: Tree View becomes narrower and narrower when expanding/collapsing nodes with long names -issue#2449: Index incorrectly changed to 1 if the index is alphanumeric when OID/REGEXP: or OIDVALUE/REGEXP: -issue#2452: Missing 'getSNMPQueries()' function when calling add_data_query.php -issue#2453: When running add_graphs.php, cannot retrieve list of valid snmp values -issue#2460: sqltable_to_php.php does not export 'default' value of columns correctly -issue#2456: When attempting to display actions that can be taken, having no actions caused error -issue#2457: When creating a graph, undefined function prevents confirmation from appearing -issue#2459: ss_host_disk.php attempts to return an empty array instead of a string -issue#2463: Partial Fix: Display zombie data sources without graphs -issue#2464: When viewing a User's effective permissions, disabled devices should show denied -issue#2465: Too many groups hide effective permission column when viewing User's effective permissions -issue#2466: Manual data source creation is broken -issue#2469: When using Matching Objects filter within Automation Graph Rules, unexpected redirect occurs -issue#2471: When Creating a new Graph Template, clear the Graph Template permissions cache -issue#2472: Bad navigation items cause Array to string conversion errors -issue#2474: REGEXP_SNMP_TRIM does not handle Gauge fields properly -issue#2475: When resetting filters, multiple sort session variables do not always reset properly -issue#2476: When using CMD.PHP for polling, device polling time is not updated -issue#2477: When saving a Data Input Method, Output Field name changes to incorrect value -issue#2478: When saving a LINEX type Graph Item, the Line Width value is too restrictive -issue#2479: RPN function select list should be sorted when editing CDEF and VDEF's -issue#2480: RRDtool versions in Cacti not granular enough -issue#2482: When upgrading past 1.1.34, upgrade attempts to drop a non-existing primary key -issue#2491: Data Source Info suggests commands RRDTool can't honor -issue#2492: When data templates are filtered by profile, data source list does not get same filter applied -issue#2493: Data Source Info is not separated properly -issue#2494: User Login History is not fully enabled for translations -issue#2497: When linking to Graphs, unless both start and end are specified, only defaults are used -issue#2499: Data Source reapply names does not update name from data query or template. -issue#2500: Allow Data Source repairs from the Data Source Debug and Data Source Info pages -issue#2502: Unable to have a min or max value for RRDfile at zero '0' -issue#2503: The Cacti Statistics Device Template is not include in release -issue#2509: When checking for correct Unicode, minimum MySQL version is incorrect -issue#2513: When a plugin INFO file is malformed or missing elements, plugin_load_info_file() should fill missing elements with defaults -issue#2519: When editing a data query, graph template picker shows poor performance -issue#2518: Unexpected errors when filtering Data Sources with invalid 'rows' value -issue#2522: When upgrading from pre-1.0.0, colors were not upgraded properly by Givo29 -issue#2525: Tree branches that includes sites which have valid devices do not appear on Graph Tree -issue#2527: When importing a package, if Cacti version is below the version which that exported, a clear message should be shown -issue#2531: When updating color template items, the table name used is incorrect by Givo29 -issue#2535: Ensure Graph ListView uses same UI logic as Graph Management -issue#2537: Incorrect title showing when changes are made to Tree -issue#2543: Poor performance showing a device's graphs on a tree -issue#2547: RRD values are not being properly trimmed -issue#2551: When checking MySQL configuration values, consider ON/OFF to be equal to 1/0 -issue#2553: When upgrading from 1.0.0 or below, renaming automation columns can cause issues -issue#2555: Missing configuration defaults prevent installations/upgrades without showing reason -issue#2563: When sorting Data Sources, missing index causes unnecessary delays -issue#2564: Filtering for Orphan Data Sources is unreliable -issue#2565: Pages with 500+ selectable items in a single able can suffer from poor performance -issue#2568: When querying for diagnostic data, devices on remote pollers should proxy the request -issue#2571: External Links do not properly validate user permissions -issue#2575: Poller errors occur if a file exists that the website cannot read -issue#2576: Spikekill API does not work when called from plugins -issue#2578: When importing packages, missing/new resources are not created -issue#2581: When viewing poller cache, Device SNMP community is not properly escaped -issue#2583: When JSON module is not installed, Installer does not correctly show missing message -issue#2584: When user/group permissions are reset, this is not reflected immediately to the end user -feature#2505: Improve performance of Data Source Statistics -feature#2515: Allow more than one SNMP port to be specified when adding devices via CLI -feature: Update phpseclib to version 2.0.15 -feature: Adjust the max table rows based upon value of 'max_input_vars' 1.2.2 -issue#599: Aggregate graph templates assume AVG consolidation function -issue#2312: Retrieving Device Information appears to fail on Safari -issue#2317: Unabe to add new records to 'poller_time' table -issue#2327: Memory exhausted whilst running poller replication -issue#2334: Some browsers report JavaScript errors when switching to console -issue#2337: When running an upgrade, the path of the log file is reset -issue#2339: Certain characters in recipient address can cause email to fail -issue#2343: Export hooks no longer work due to missing default keyword -issue#2346: When listing plugin permissions, "Legacy 1.x Plugins" can appear in the wrong cell -issue#2347: Allow sort output to inject returned data into a specific object -issue#2350: Unable to Select Data Source for HRULES and COMMENTS that include nth Percentile and Bandwidth -issue#2352: SNMP description field can sometimes contain mangled data -issue#2354: When reindexing in Automation, titles are not updated for Graph and Data Source -issue#2355: Data Sources are sometimes duplicated when Custom Data is specified -issue#2357: When indexes are incorrect, poller should log more information -issue#2359: When upgrading, "Install/Upgrade" privilege may have been previously lost -issue#2360: When retrieving database / table / column information, schema name is not always applied -issue#2362: No way to default an interface speed when ifSpeed and ifHighSpeed come back as zero -issue#2365: When editing Aggregate Graphs, orphaned items were not always removed -issue#2372: Data Query reindexing leads gaps in Graphs -issue#2376: Manually adding a device discovered by Automation causes errors to be logged -issue#2380: Devices may experience constant reindexing -issue#2384: When authentication method is set to None, change to Builtin as None has been removed -issue#2393: When reindexing a device, Graph Automation creates duplicate graphs every time -issue#2416: SELinux wants APPEND not WRITE permission for Fedora/EPEL (RHEL, Centos) -issue#2419: Host state time was not correctly calculated -issue#2426: Reinstate missing plugin hooks for 'custom_logout_message' and 'custom_denied' -issue#2431: Default value for 'Mail Method' (settings_how) is incorrect resulting in errors -issue#2432: Undefined variable warnings when updating RRD data -issue#2451: Drag and drop does not always function correctly -feature: Update JavaScript library c3.js to version 0.6.12 -feature: Update phpseclib to version 2.0.14 -feature: Update PHPMailer to version 6.0.7 -feature: Update JavaScript library d3.js to version 5.9.1 1.2.1 -issue#2259: Unable to View Aggregate Graphs -issue#2267: Remove unnecessary includes in aggregate template code -issue#2270: Realtime Graphs consuming too much memory -issue#2272: Site Tree Branches not showing Graphs -issue#2273: Error when saving changes to Data Collectors -issue#2279: SQL Errors in add_graphs.php -issue#2280: SQL Errors in snmpagent cache table inserts -issue#2281: Database audit cli giving incorrect results -issue#2285: Allow HRULEs for bandwith and ptile -issue#2292: Allow Realtime to use 1 second data collection -issue#2298: Ambiguous Toggle Switches in Sunrise Theme -issue#2303: Problem with "Notify Primary Admin of Issues" function -issue#2304: Installation progress stays at 0% -issue#2305: BOOST PROGERR: ERRNO:'8' -issue#2311: Unable to update PHP location during installation due to incorrect CLI environment -issue#2319: Primary admin account not always given access to a plugin when that plugin is enabled -issue#2321: Date separator not being used properly for graphs -issue#2322: Modifying plugin realm registration files and description not supported -issue: Installer does not identify when shell_exec()/exec() are disabled -issue: Removing a Device or Graph Template can not be seen till next login -issue: Visual issues with custom data when using paper-plane theme -issue: Undefined function errors attempting to sync device templates -issue: Plugin dependency handling inconsistant -issue: Editing a report shows incorrect graphs from dropdown 1.2.0 -feature: Add a Timeout setting for Remote Agent calls -feature: Add Graphs and Data Sources hyperlinks on Device page -feature: Add One Minute Sampling to the default Data Source Profiles -feature: Add support for DDERIVE and DCOUNTER to Cacti -feature: Add Timezone support for Remote Data Collectors -feature: Allow Adding Aggregate Graphs to a Report -feature: Allow ASCII filepath paths to not be found on settings save -feature: Allow drill down from Graphs to Data Queries or Templates -feature: Allow Import/Export to be hookable -feature: Allow snmpagent to be disabled for very large installs -feature: Allow Top tabs to be Glyphs or Text or both -feature: Big Spanish translation update plus massive QA fixes -feature: Change password page provides visible confirmation of password rules -feature: Do not allow second data source to be added to an SNMP Get data template -feature: Don't allow removal of Data Sources from Data Template once its in use -feature: Inform the primary Cacti administrator of problems by Email -feature: Make all user settings dynamic and allow resetting to default. -feature: Make Graph and Data Source suggested naming more efficient -feature: Make it easy to find Data Query based graphs that have lost indexes -feature: Make Top Tabs use Ajax Callback -feature: Make tree editing responive -feature: New Install/Upgrade user permission to limit access to being able to upgrade -feature: Provide option to debug width errors where output exceeds column width -feature: Removed the Authentication Method of 'None' -feature: Tree automation is now defaulted to on for new install -feature: Update JavaScript library c3.js to version 0.6.8 -feature: Update JavaScript library Chart.js to 2.7.3 -feature: Update JavaScript library d3.js to version 5.7.0 -feature: Update JavaScript library jquery.js to 3.3.1 -feature: Update JavaScript library jquery-migrate.js to 3.0.1 -feature: Update JavaScript library jquery.tablesorter.js to version 2.30.7 -feature: Update JavaScript library jstree.js to 3.3.7 -feature: Update JavaScript library screenfull.js to 3.3.3 -feature: Update phpmailer to version 6.0.6 -feature: Update phpseclib to version 2.0.13 -feature#289: Allow external nologin access for Realtime Graphs -feature#553: When display a host, include Aggregated Graphs as well as standard graphs -feature#614: Allow users to duplicate Data Input Methods -feature#973: When creating a new user authenticated via LDAP, attempt to retrieve users email and full name -feature#122: Support a Site Branch Type -feature#1060: Design Enhancement for Large scale Cacti Implementations -feature#1142: Add Site dropdown to the Graphs and Data Source pages -feature#1184: Improve Data Input Methods editability and message handling -feature#1200: Aggregate Graphs can now include COMMENT -feature#1282: Email notification for Automation Network discovery process -feature#1347: Update automation logging to work better -feature#1395: Ensure messages have each new line keep the same prefix in cacti_log() -feature#1399: Allow 'requires' to include version against a plugin -feature#1400: User settings are now dynamic and can be reset (removed) to return to global settings -feature#1422: Automatically select the next unused data input field when clicking add on data input method -feature#1505: When displaying a graph, provide breadcrumb link to edit device -feature#1527: Update Fontawesome from 4.7 to 5.0.10 -feature#1580: Support Drag & Drop for Builtin Report Items -feature#1581: Allow Mass Adding of Graphs to Reports -feature#1584: Allow theme selection when installing -feature#1588: Check that PHP can run a test file -feature#1593: Allow External links to auto refresh -feature#1597: Ensure synchronised files have same attributes as originals -feature#1610: On Unix, redirect error messages to log files when running external scripts -feature#1628: Allow the User to define an initial Automation Network for discovery when installing -feature#1670: Improve Graph Management to show type of source for a graph -feature#1671: When duplicating a Graph Template, properly duplicate Data Query Graph Template Mappings -feature#1677: Default Tree nodes sorting to be inherited -feature#1691: On Graph context menu, add a 'Copy graph' option to copy graph image -feature#1692: Separate option for logging Input Validation issues -feature#1703: On Graph context menu, text is now multi-lingual -feature#1708: Allow the User to override global Automation email recipients at the Automation Network level -feature#1709: Suppress warning from RRDTool when attempting to make updates in the past -feature#1711: Add support for SSL connections to MySQL -feature#1731: Prevent loss of changes by warning user about unsaved items -feature#1734: When displaying a graph, provide more information when error image is displayed (see also #1428) -feature#1763: Enable automatic refresh for Time Graph View -feature#1806: Control low level debug routines via config.php (Develoepr Use) -feature#1819: Provide CLI program to enable graphs to be removed by scripts -feature#1969: Graph previews can now be linked using a host's external id -feature#2006: Introduce new Data Source Profile to handle decade long graphs -feature#2173: Introduce Device and Graph Template Caching to Speed UI -feature#2228: Add Device ID to Device search field -issue: Fix issue with display_custom_error_message() causing problem with system error message handling -issue: Graph List View was not fully responsive -issue: Move Graph removal function to Graph API -issue: On the Data Sources page, if there is no filtered Device and a Data Source is edited, device association is lost -issue: Typo in Dutch translations when an error occurred while downgrading -issue: Unable to display user profile tabs -issue: Verify all Fields not working due to Cacti 1.x upgrade error -issue#186: Cacti does not support jQueryUI 1.12.x -issue#187: Remove the use of jQuery Migrate plugin -issue#948: Do not create a new datasource when adding a new Graph for the same device/field -issue#454: Cacti Re-Index does not resolve index changes properly during re-index -issue#983: Import Template Preview is misleading -issue#1097: When copying template user, newly created user should always be enabled to allow logging in -issue#1097: When copying template user, it should be disable to prevent logging in as template user directly -issue#1174: When display a tree, disable drag and drop unless in edit mode -issue#1298: Display fatal error to prevent issues caused when system log is not writable -issue#1350: When switching an Automation Tree Rule's leaf type, remove invalid Automation Rule Items -issue#1383: CSRF Timeout does not obey session timeout -issue#1408: Update SQL / Backtrace to use new clean_up_lines() function -issue#1414: DSSTATS reports incorrectly that a data source does not exist -issue#1420: Fix issues found by Debian package builds -issue#1421: Fix issue when SQL had all bad modes, missing variable warning was generated -issue#1426: Fix issue where remote poller was not using unique filenames when attempting to verify files -issue#1437: Plugin install hover message sometimes shows line breaks rather than formatted text -issue#1454: When using oid_regexp_parse, filter indexes to those that match -issue#1473: Recovery Date overwritten by subsequent checks -issue#1494: Unable to Deep Link/Bookmark Trees -issue#1503: Undefined function clearstatscache in DSSTATS -issue#1507: When saving graph settings from the graph page, the graph template id should not be included -issue#1510: New Graphs Undefined Variable $graph_template_name -issue#1521: Force boost to be enabled when there are Remote Data Collectors -issue#1528: Saving a device can result in WARNINGS related to string vs array handling -issue#1529: Allow Aggregate Graphs to Sum Bandwidth and Percentile COMMENTS -issue#1543: Graph Preview appends header=false too many times -issue#1553: Poller does not set rrd_step_counter correctly if no steps taken -issue#1559: CLI Output Issues due to over escaping -issue#1560: Warning that escapeshellarg() is escaping a null -issue#1567: Technical support - add notification if Cacti and Spine version is different -issue#1574: User templates are not correctly being applied -issue#1589: Installer now checks that the temporary folder is writable -issue#1590: User Admin generates SQL error if user is not part of any groups -issue#1601: Aggregate Graphs can not include some classes of COMMENT -issue#1602: PHP ERROR: Call to undefined function api_data_source_cache_crc_update() -issue#1604: Failed to connect to remote collector -issue#1606: Boost debug log not functional -issue#1607: Boost next run time occurs in the past -issue#1608: Possible boost race conditions -issue#1609: Remote pollers update 'stats_poller' on main poller -issue#1617: Editing a data query results in missing $header variable -issue#1621: Realtime Popup can cause automatic logout -issue#1626: httpd-error.log have message about Fontconfig -issue#1634: Default snmp quick print setting resulting in false poller ASSERTS on some php releases -issue#1651: Check temporary folder has write access during import -issue#1655: Correct Cacti to handle new MySQL 8.0 reserved word `system` -issue#1658: Devices drop down should be filtered by Site -issue#1660: Reports based upon Tree don't maintain graph order -issue#1665: Must change password not working for local users when main realm is not local -issue#1669: Console log header grammar issue -issue#1674: Threads and Processes values not migrated to Poller table during upgrade -issue#1676: Allow automation discovery to add the same sysname on different hosts -issue#1682: Slow Select Statement lib/api_automation.php -issue#1689: Technical Support's RRDTool version should show detected RRD version -issue#1690: Report a warning if the default collation is not utf8mb4_unicode_ci -issue#1700: Mail sent without auth causes errors to appear in logs -issue#1710: RRDtool create command causes first update to fail -issue#1721: Console Side Bar not correct on first login -issue#1723: die() messages should include PHP_EOF for better logging -issue#1726: Poor page performance editing a Graphs Graph Items -issue#1746: Poller with no hosts does not exit until timeout is reached -issue#1761: Graph Management page shows bogus template names -issue#1783: Browser Back button still does not working -issue#1796: Import: Fixed handling of references to objects not included in file -issue#1799: Default User log sort should be date descending -issue#1810: Correct SQL errors with authentication set to no authentication -issue#1839: Dummy cosmetic bug on down device selection option -issue#1841: Data Source Stats table not properly migrated from pre 1.x Cacti plugin -issue#1849: SNMPAgent not sending traps -issue#1852: Reports Preview/Mails show no graphs -issue#1889: Insecure $ENV{ENV} which running setgid -issue#1901: Upgrade from 0.8.8h fails on external_links statement -issue#1921: Data Query XML field method 'rewrite_index' does not correctly query for value -issue#1926: Deselecting items should present warning or disable GO button -issue#1948: Device Template should warn about need to re-sync -issue#1953: set_default_action() should warn if more than one action provided -issue#1973: SpikeKill Menu does not display properly -issue#1976: Default admin permissions do not allow everything -issue#1982: Certain hooks should occur within api functions rather than UI functions -issue#2002: api_plugin_db_table_create should support non-string defaults -issue#2012: For kernel 3.2+, "Linux - Memory - Free" should grep for "MemAvailable:", not "MemFree:" -issue#2085: CLOG Regex Parser does not verify registered function exists -issue#2126: api_device.php generates undefined function poller_push_to_remote_db_connect() -issue#2127: Unable to save error when duplicating graph -issue#2135: api_tree_lock() and api_tree_unlock() forcing redirection incorrectly -issue#2143: export.php Illegal string offset 'method' -issue#2144: Device Management "Status" column does not sort properly -issue#2152: When editing a device, should show disable/enable option -issue#2153: Utilities page issues the wrong hook for tabs -issue#2163: LDAP functions are not consistent -issue#2164: Login page does not remember selected realm -issue#2171: datepicker and timepick translation not available -issue#2178: Header/Footer included more than once -issue#2182: Graph View missing 'html_graph_template_multiselect()' function -issue#2184: html_host_filter() does not handle host_id consequently -issue#2186: Boost generates invalid SQL during on demand update -issue#2188: SNMP timeout errors are being duplicated -issue#2191: i18n_themes is not properly primed in global_arrays.php -issue#2202: Can't create more than one graph with add_graphs.php from one template -issue#2207: Removing Graph Template does not Remove Data Query Associations -issue#2217: cmd.php not handling quoted snmp values properly -issue#2240: SNMP system Data Input Methods should not be modified on import -issue#2241: Spike removal not functional due to Debian packaging -security#1072: Prevent exploitation of Data Input Methods to escalate privileges (CVE-2009-4112) -security#1882: Bypass output validation in select cases -security#2212: Stored XSS in "Website Hostname" field -security#2213: Stored XSS in "Website Hostname" field - Devices -security#2214: Stored XSS in "Vertical Label" field - Graph -security#2215: Stored XSS in "Name" field - Color 1.1.38 -issue#1501: cmd.php poller not stripping alpha from snmp get values -issue#1515: Special characters not rendered properly in settings -issue#1530: Inconsistent behaviour handling blank Field Name/Value when editing data query suggested values -issue#1537: Numeric validation not ignoring blank elements 1.1.37 -issue#274: Allow Realtime Graph Popup Mode -issue#1405: When Data Query columns are wide, they cause rendering issues -issue#1414: DSSTATS reports incorrectly that a data source does not exist -issue#1419: Filtering log results in errors in the log -issue#1420: PHP NOTICE editing cdef and vdef items -issue#1421: CLI upgrade_database.php PHP Warning on execution -issue#1426: Remote poller erroring attempting to verify files -issue#1432: Delete confirmation does not disappear -issue#1443: Partial Save warnings under Settings -> Mail/Reporting/DNS -issue#1447: CLI audit_database.php not detecting database name, and failed to create audit tables when run fresh -issue#1453: CLI add_graph.php not allowing title to be set -issue#1456: Increase minimum php version maintaining support for RHEL6 -issue#1457: Path-Based Cross-Site Scripting (XSS) issues -issue#1458: Error in logs when creating new graphs -issue#1459: Automation filter not applied correctly -issue#1461: Setting output_format on input type causes no values to be returned -issue#1464: Poller stuck in infinitely loop causing excess logging -issue#1466: No scrollbars in mobile browsers -issue#1468: Increase max length of host.snmp_sysObjectID column -issue#1471: Undefined function found in global_languages.php -issue#1472: Change Device Options - Style needs updating -issue#1474: Check possibility for creation of temporary tables on install -issue#1487: Undefined constant in ldap.php -issue#1483: Create New Graphs - Paw Styling Issue -issue#1493: Can't create tree branches with '#' sign -feature#1489: Add ability to use parts of OID as value via regex -feature: Updated Chinese Simplified translations -feature: Updated Dutch translations -feature: JavaScript library Chart.js updated 2.7.2 -feature: Allow snmp formatting functions to detect UTF-8 output 1.1.36 -issue#934: Template names missing in graph management list -issue#1211: CDEF and VDEF Item Edit do not use correct procedures -issue#1250: Language support does not support localization properly -issue#1331: Log Rotation should occur at midnight on system -issue#1334: Console->Users->(Edit) Permissions checkmark descriptions missing -issue#1336: Debian test suite reports php error -issue#1338: Allow automation to be run in debug mode from GUI -issue#1339: First graph of second page does not render -issue#1340: Unable to open Time Graph View in new tab -issue#1348: Toggle context menu of Zoom -issue#1351: Errorimage does not render on systems without GD ttf support -issue#1353: New installation without config.php silently throws errors -issue#1355: Single tree can have the order of the tree changed -issue#1357: Data Profile disable fields shown temporarily as editable -issue#1359: Settings page generates error for removed plugin tab -issue#1362: DSStats Avg/Peak function broken due to change in RRDtool processing -issue#1365: Plugin Management enforce folder name -issue#1366: Improve error/info message display -issue#1380: Potential failure when updating script type -issue#1384: When installing/enabling plugins, current user and admin should get permissions -issue#1386: form_selectable_cell() ignores width if no style_or_class is passed -issue#1389: Poller is including plugins that are not installed -issue#1390: Plugin uninstall should prompt user before removal -issue#1396: Prevent installation/uninstallation of a plugin if dependency is present -issue#1397: Distinguish between plugin tabs and core tabs in settings -issue#1371: Allow dynamic setting of from name when emailing -issue: Data Query Cache filter layout more consistent -issue: Minor plugin permissions format change -issue: Implementation of error handling causes errors creating New Graphs -issue: Deprecated DDStats setting removed -issue: Graph context menu items are now context aware -issue: Validate spine path before allowing enabling of spine -issue: Errored settings fields now highlighted correctly on error -issue: Add the Default Device to the Default Tree at install time -issue: Secpass password verification error message unuseful -feature: Searching of SNMP Index in View Data Query Cache now works -feature: Presets now have default device Template -feature: JavaScript library c3.js updated (v0.4.21) / jstree.js (3.3.5) -feature: PHPSecLib updated 2.0.10 -feature: Updated Dutch translations 1.1.35 -issue#114: *all_max_peak* percentile calculations incorrect -issue#430: Pressing Back often fails to work as expected -issue#564: Fail to move items in graph template as desired -issue#981: Hyperlinks for Data Profile stats -issue#993: Realtime not working on remote pollers for certain data query -issue#1244: Errors importing templates with deprecated hashes -issue#1251: Allow zoom out through mouse mmiddle button -issue#1281: Max OIDs setting is for bulkget and not bulkwalk operations -issue#1286: Correct CHUNKED_ENCODING error when retrieving graph with some browsers -issue#1306: Graphs are not always refreshed properly -issue#1309: Provide meaningful authentication errors in graph_json.php and graph_image.php -issue#1310: Return button fails on change password page -issue#1315: Realtime not working on local data collector -issue#1316: CDEF Item Value dialog does not update creating items -issue#1319: Front end + remote poller - connection timeout issue -issue#1321: Use RRDtool pipelining functions within DSSTATS -issue#1323: Enhance form layout for readability -issue#1329: Spelling errors in automation_networks.php -issue: Validate regular expressions if specified in add_graphs.php -issue: Ensure compression levels are consistent when importing package 1.1.34 -issue#1040: PHP version 7.2 - ERROR PHP WARNING: sizeof() -issue#1195: Improved Javascript error message handling -issue#1245: Unable to reorder graph name suggested values -issue#1256: Error reporting of custom errors not displayed correctly -issue#1257: Boost excessively logging updates -issue#1258: cacti.sql updated to match expected schema -issue#1260: Tab images fail to render due to TrueType support in PHP GD Module -issue#1261: Automatic logout timeout does not apply to web basic authenication -issue#1263: CLI utility to validate database schema -issue#1266: Inconsistent usage graphWrapper CSS causes odd graph zoom behavior -issue#1268: Regex filters not working properly -issue#1274: Host CPU script checks value existance to avoid error -issue#1275: SNMP v3 authPriv fails to work -issue#1287: JSON calls return validation error in HTML format -issue#1289: Script Server should output parameter array rather than parameters -issue#1292: Chrome to aggressively caches Javascript files -issue#1293: Correctly identify if command 'snmpbulkwalk' is available -issue#1296: CactiErrorHandler does not ignore PHP suppressed errors -issue#1300: Automation discovery : New devices added by automation discovery have empty SNMP community field -issue#1302: Automatic logout should not be enforced on login page -issue#1304: mib_cache.php file contains unsafe transactions for binary logging -feature: CLI utilily to generate and verify file hashes for installed Cacti files -feature: Logging links back to appropriate areas for troubleshooting -feature: Logging lists filenames in reverse order 1.1.33 -issue#1253: Automatically generated RRDtool DEF names in Cacti 1.1.32 break existing Graph Templates 1.1.32 -issue#969: Undefined index: color_id / task_item when viewing graphs -issue#1166: Fix typo of 'locale' in global_languages.php -issue#1222: Graphs with large number of items causes RRDTool to error -issue#1230: PHP Fatal error: Call to undefined function get_max_tree_sequence() -issue#1238: SNMP functions fail to handle "Invalid object identifier" error -issue#1239: Browser console error in layout.js -issue#1240: Page layout issues caused by library update -issue#1246: Make SNMP Error return more info -issue: Missing or corrupted theme files can corrupt user settings -issue: Theme may not change until next login -issue: Tree edit Tree/Device/Graph drag areas incorrect -issue: Make callback error handling compatible with jQuery 3.x -issue: Ensure the snmp_error is cleared before every call -issue: Indicate unknown error when RRDTool returns no error message -feature: Update Javascript library: js.storage.js, d3.js, jquery.js, jquery.tablednd.js, jquery.timepicker.js 1.1.31 -issue#629: Site reload after delete the last letter in the searchbar -issue#1022: Discovery network stuck in "running" state does not return results -issue#1164: Version compare function fails on major/minor only versions -issue#1166: Invalid New User default language selection -issue#1175: Automatic logout inconsistent redirect -issue#1179: Warn during installation if installing moving to older version -issue#1183: Automatically detect missing Theme and use alternate -issue#1185: Layout with Graphs having large number of data columns -issue#1189: Allow ability to sort tree list by name asc/desc -issue#1190: Enabling, Disabling, Uninstalling plugin, you should page refresh -issue#1191: Tree sequences were not set or checked -issue#1197: Add more collection intervals to Data Source Profiles -issue#1206: Display issue with internationalization number format -issue#1210: CDEF and VDEF Items can not be properly edited -issue#1212: Navigation breadcrumbs fail to handle External links correctly -issue#1213: PHPMailer trying TLS despite SMTPSecure setting -issue#1215: Show version when installation prompts for license -issue#1217: Add ability to view/edit Input/Query when editing Data Template -issue: Named colors fail to import on install or upgrade -issue: Drag and Drop issues on multiple pages could corrupt sequencing -feature: Enhance filter to permit more glyphs for table headers -feature: Add a page refresh dropdown to the Automation Networks -feature: Enhanced SNMP v3 input forms -feature: Allow Trees to be rearranged using Drag and Drop -feature: Trap GUI callback errors and present error message 1.1.30 -issue#1155: Non-secure mail setting not functional due to changes in phpmailer -issue#1157: Resolve issue with branch permission api -issue#1158: Change CLOG to use regex replacement so line details are not mangled -issue#1161: Graph View regex's are not preserved during automatic page refresh -issue#1162: Error messages are not display when editing a user -issue#1166: Default language was not correctly set when editing a user -issue: basename function undefined during upgrade to 1.0.x -issue: Storage API and translations required for Change password function -issue: ALTER IGNORE still throws an error when attempting to drop the primary key -issue: Data Source profile form API generates error when system is half upgraded -issue: Resolve issue with importing packages -feature: Update package versions for Cacti version 1.1.29 1.1.29 -issue#871: Allow Nth Percentile and Bandwidth Summation to respect 'Base Value' in template -issue#965: Duplicate error message and incorrect error code when using LDAP authentication -issue#1084: Graph Tree Branch not properly populating when editing report item -issue#1104: Datetime formatting in developer debug mode incorrect -issue#1106: Template Filters has empty row -issue#1109: URL used in redirection when referrer already has parameters in it -issue#1110: Add CPU Total to 'SNMP - Get Processor Information' -issue#1111: PHP NOTICE when using LDAP authenication -issue#1116: Filters not allowing "None" or "All" when editing report item -issue#1119: Reduced amount of data fetched for CPU usage to just the data used -issue#1121: Bandwidth summation not using correct locale -issue#1122: Fix issue with local login / potential password problems -issue#1128: Resolve php warning when raising messages -issue#1130: Fix logging level issue where logs of same level as setting where not logged -issue#1131: Make upgrade_database.php use same version compare as /install/ system -issue#1133: Fix issues with variable name and debug log -issue#1141: When viewing graphs from list view, pagination causes list view filter to be cleared -issue#1143: ss_host_cpu.php - Division by zero / Invalid Return Value -issue#1146: Installation now checks URI path matchs with configuration option URL_PATH -issue: Updated Graph pagenation and filter reset -issue: Resolve issues with cacti_version_compare() processing -issue: Zoom context menu stays open after zoom out actions -issue: Paginator object was not always translated 1.1.28 -issue#958: User Group Tree permissions not calculated fully -issue#959: Issue viewing email reports due to email client decoding problems -issue#992: RRDfile naming issues that result from random sorting during export -issue#1012: Issue where disabled devices will not appear in Tree editor -issue#1044: Handle invalid exclusion regex properly when viewing the log -issue#1045: Issue with multiple pages and confirmation dialogs -issue#1048: Problem importing vdefs from templates -issue#1053: Remote Data Collector now works with https and self signed certificates -issue#1055: Errors in data source statistics inserts when invalid output is encountered -issue#1057: CVE-2017-16641 - Potential vulnerability in RRDtool functions -issue#1058: ICMP Ping to and IPv6 address fails to gather data for ping latency -issue#1059: Aggregate item filter should use regular expressions to avoid SQL errors due to flawed filter logic -issue#1064: When a Device Template is removed, Automation Templates for that Device Template remain -issue#1066: CVE-2017-16660 in remote_agent.php logging function -issue#1066: CVE-2017-16661 in view log file -issue#1071: CVE-2017-16785 in global_session.php Reflection XSS -issue#1074: Boost records get stuck in archive -issue#1079: Undefined index in lib/snmpagent.php -issue#1085: Undefined function html_log_input_error -issue#1086: Rerun data queries in automation process has no effect -issue#1087: cli/add_device.php --proxy option does not work with non-snmp devices -issue#1088: Set timeout for remote data collector context -issue: Minor performance increase in boost processing -issue: Poller output not empty not processed correctly on Log tab -feature: Timeout to the remote agent for realtime graphs -feature: Updated Dutch translations -feature: Database update adding additional indexes for increased performance -feature: Updated PHPMailer to version 5.2.26 -feature: Updated phpseclib to version 2.0.7 1.1.27 -issue#1033: Issues inserting into dsstats table due to legacy data -issue#1039: Using html_escape still double escapes. Use strip_tags instead -issue#1040: Resolving compatibility issue with PHP7.2 1.1.26 -issue#841: --input-fields variable not working with add_graphs.php cli -issue#986: Resolve minor appearance problem on Modern theme -issue#989: Resolve issue with data input method commands loosing spaces on import -issue#1000: add_graphs.php not recognizing input fields -issue#1003: Reversing resolution to Issue#995 due to adverse impact to polling times -issue#1008: Remove developer debug warning about thumbnail validation -issue#1009: Resolving minor issue with cmd_realtime.php and a changing hostname -issue#1010: CVE-2017-15194 - Path-Based Cross-Site Scripting (XSS) -issue#1027: Confirm that the PHP date.timezone setting is properly set during install -issue: Fixed database session handling for PHP 7.1 -issue: Fixed some missing i18n -issue: Fixed typo's -feature: Updated Dutch translations -feature: Schema changes; Examined queries without key usage and added/changed some keys -feature: Some small improvements 1.1.25 -issue#966: Email still using SMTP security even though set to none -issue#995: Redirecting exec_background() to dev null breaks some functions -issue#998: Allow removal of external data template and prevent their creation -issue: Remove spikes uses wrong variance value from WebGUI -issue: Changing filters on log page does not reset to first page -issue: Allow manual creation of external data sources once again -feature: Updated Dutch translations 1.1.24 -issue#932: Zoom positioning breaks when you scroll the graph page -issue#970: Remote Data Collector Cache Synchronization missing plugin sub-directories -issue#980: Resolve issue where a new tree branches refreshs before you have a chance to name it -issue#982: Data Source Profile size information not showing properly -issue: Long sysDescriptions on automation page cause columns to be hidden -issue: Resolve visual issues in Classic theme -feature: Allow Resynchronization of Poller Resource Cache -feature: Update Spanish Translation 1.1.23 -issue#963: SQL Errors with snmpagent and MariaDB 10.2 -issue#964: SQL Mode optimization failing in 1.1.22 1.1.22 -issue#950: Automation - New graph rule looses name on change -issue#952: CSV Export not rendering chinese characters correctly (Second attempt) -issue#955: Validation error trying to view graph debug syntax -issue: MySQL/MariaDB database sql_mode NO_AUTO_VALUE_ON_ZERO corrupts Cacti database -issue: When creating a data source, the data source profile does not default to the system default -feature: Enhance table filters to support new Cycle plugin -feature: Updated Dutch Translations 1.1.21 -issue#938: Problems upgrading to 1.1.20 with one table alter statement -issue#952: CSV Export not rendering chinese characters correctly -issue: Minor alignment issue on tables 1.1.20 -issue#920: Issue with scrollbars after update to 1.1.19 related to #902 -issue#921: Tree Mode no longer expands to accomodate full tree item names -issue#922: When using LDAP domains some setings are not passed correctly to the Cacti LDAP library -issue#923: Warninga in cacti.log are displayed incorrectly -issue#926: Update Utilities page to provide more information on rebuilding poller cache -issue#927: Minor schema change to support XtraDB Cluster -issue#929: Overlapping frames on certain themes -issue#931: Aggregate graphs missing from list view -issue#933: Aggregate graphs page counter off -issue#935: Support utf8 printable in data query inserts -issue#936: TimeZone query failure undefined function -issue: Taking actions on users does not use callbacks -issue: Undefined constant in lib/snmp.php on RHEL7 -issue: Human readable socket errno's not defined -issue: Audit of ping methods tcp, udp, and icmp ping. IPv6 will still not work till php 5.5.4 1.1.19 -issue#810: Scripts in packages don't match distribution -issue#919: Unable to upgrade to 1.1.18 -issue: Update documentation for minimum PHP 5.4 1.1.18 -issue#902: Correcting some issues with Console and External Links -issue#903: Upgrade pace.js to v0.7.8 -issue#904: Allow user to hide Graphs from disabled Devices -issue#906: Create a separate Realm for Realtime Graphs -issue#907: XSS issue in spikekill.php -issue#910: Boost last run duration generates an error on new install -issue#914: Unable to purge Cacti logfile from System Utilities -issue#915: Non-numeric data in ss_host_disk.php -issue#916: Resolve display of errors when encountering ldap issues -issue#918: Minor XSS and create generalized escape function -issue: Resolve JavaScript errors on Login page -issue: Resolve JavaScript errors on Permission Denied pages -issue: Graphs tab would appear in non-classic even if you did not have permissions -feature: Updated dutch translations 1.1.17 -issue#450: List View to Preview shows no results -issue#486: Export Device table results to CSV -issue#544: Allow Log Rotation to be other than Daily -issue#673: Downtime/Recovery time/date is set incorrectly -issue#819: Customized timespans for graphs -issue#888: Rebuilding Poller Cache when External data sources are present results in false positive warnings in the log -issue#891: Database.php unable to connect to MySQL when using port different than 3306 -issue#893: Warning messages when duplicating CDEF objects -issue#897: Due to browser use of special key, deprecate ctrl-shift-x for clearing filter -issue#898: Issue with tcp and udp ping due to file description allocation changes -issue: Unable use ipv6 ip addresses for snmp ping in the Cacti GUI -issue: Update language of the Rebuild Poller Cache menu pick -issue: Broken design for input controls with Sunrise theme -issue: Timespan switching not switching to Custom in Preview Mode -issue: Log rotation would not occur under certain conditions. Provide more control over log functions -issue: Purge log file always purged the cacti.log, not the selected log -issue: Unable to view graphs for errored data sources from Cacti log 1.1.16 -issue#865: Escape Data Query arguments to prevent issues with special characters -issue#872: Can't add device items to graphs generated with no device and no template -issue#875: When modifying Realm permissions, realms that are listed multiple times don't stay in sync -issue#877: Improving resolution to issue#847 and one additional vulnerability -issue#878: Ambiguous language in purge log function -issue#879: SQL Error when adding a report item to a report -issue#880: Device drop down is limited to 20 devices and lacks a scroll bar -issue#885: Graph generated with no device and no graph template forgets device definitions -issue#886: Unable to export templates other than Device templates -issue: Address additional corner cases around get_order_string usage -issue: Data Queries sharing a Data Source can result in poller output table not empty errors -issue: Fix Sunrise theme to properly theme multiselect widgets -issue: Increase height of multiselects so that more options are visible -issue: When a graph is locked, anchor tags are still functional -issue: Autocomplete does not populate none-value when the selected value is not set 1.1.15 -issue: PHP Fatal Exception on upgrade from 1.1.11 or earlier -feature: Added test to detect install upgrade code problems 1.1.14 -issue#849: Unable to select host in Graph Item pick -issue#850: Reporting not allowing Non-templated Graphs -issue#858: Pagination on SNMP Options wrong -issue#860: Network Discovery Subnet Range character limit too small -issue#861: The search filter does not support Cyrillic -issue#862: Automation - When editing Graph Rules, unable to Change Data Query -issue#863: Typo error in auth_login.php for LDAP authentication -issue#867: Cross-site scripting (XSS) vulnerability in auth_profile.php -issue: Link's not showing in Automation Graph and Tree rules on Sunshine theme -issue: Make Templates Export responsive -issue: Don't wrap menu glyphs and menuitems -issue: The function get_order_string() can fail when encountering reserved word columns -issue: Data Query Delete is not using callback -feature: Resize Graphs on Graph page to be responsive -feature: Make import text a hidden field as it is likely seldom used 1.1.13 -issue#605: Remove Spikes feature not fully functional -issue#814: Allow 'Save' feature from New Graphs -issue#837: Using the add_device.php CLI script, you can not 'default' the device threads to other than 1 -issue#838: CVE-2017-10970: XSS Issue in link.php -issue#839: The Database column name 'rows' is a reserved word in MariaDB 10.2+ -issue#845: External links tabs should appear at the end of the tab view -issue#846: Web crawl of Cacti site shows errors in the log -issue#847: CVE-2017-10970: XSS Issue in lib/html_form.php. -issue#853: Go and Clear buttons do not work in all cases on Graph Rules pages -issue: Up/Down arrow titles labeled incorrectly on Tree Management page -issue: Make the default Export Type a Device Template -issue: Fix SNMPagent MIB cache issues -issue: Realtime cache cleanup now only removes rrd and png -issue: When redirected from reports, you can receive a validation error -feature: updated Dutch language 1.1.12 -issue#822: Aggregate Graph Items are incorrectly editable -issue#823: Allow Filters to be hidden -issue#834: Add spacing on graphs pages -issue: Uninstalled plugins can not install -issue: Location of filter functions in host.php prevent full responsive filter implementation -feature: Implement first phase of responsive search filters 1.1.11 -issue#642: RRA not written or WARNING: Poller Output Table not Empty -issue#779: PHP running out of memory due to date format issues -issue#791: SeLinux causing problems due to recent enhancement of the Cacti log -issue#818: Unable to unselect all SpikeKill templates under settings -issue#831: Unable to add devices from automation devices that don't have a snmpSysname -issue: incorrect version of pace: fix progess bar -issue: date_format(): fix date separator character -issue: host.php: fix itemCount en rowCount when result = null -issue: clog: fix scandir for systems with limited permissions to log directory -issue: clog: fix listing of logfiles -issue: Stop New Graphs filter interface from taking too much space -issue: Pagination of clog is not done via ajax -issue: Unable to dry run spikekill's from Graphs page -issue: Default sort order does not highlight on Aggregate Template page -issue: Correct display issue with Graph Templates when editing Device -issue: External Data Sources show as having poller interval on Data Source page -issue: Allow Selecting 'External' as the Data Source Profile when creating non-templated Data Source -issue: Remove Field Order on Data Input output data as it's not required -issue: Data Templates not using Ajax callbacks to switch Data Sources -issue: Visual issue when creating non-templated Aggregate Graphs -feature: new skin: Sunrise -feature: Provide Non Compatible explanation when a plugin is not compatible -feature: Updated Dutch translations -feature: Allow Graph Templates with multiple flag to be created repeatedly from Graphs New interface -feature: Allow plugins to exclude files and directories from their remote poller synchronization process -feature: Add Device Description to View Poller Cache UI 1.1.10 -issue#779: Resolve random Apache segfault due to recursion -issue#786: Unable to create second RRA for a Data Source Profile with collection rate less than 5 minutes -issue#789: Unable to Clear Filter due to JavaScript name space collision -issue#791: cacti 1.1.9 and clog_webapi.php permission issue -issue#794: SQL Error when creating graphs manually -issue#798: Cosmetic issue when checking checkboxes in Cacti -issue#800: Unchecked loop in lib/html_utility.php causing race condition -issue#802: Issue updating device hostname with SNMP data queries -issue#803: Issues with utf8mb4 introduced via optimization -issue: If the device is down and snmp_sysUpTimeInstance is 0, time in state can be wrong -feature: Updated Dutch translations 1.1.9 -issue#788: Fails on PHP Fatal error if LDAP auth enabled 1.1.8 -issue#529: Issue on Graph New page with checkbox unselected -issue#552: Minor selectable row checkbox issue -issue#577: Dragging multiple items causes the tree to refresh too early -issue#617: Correct poller timeouts when no devices are associated with active data collector -issue#706: Classic external link template images missing -issue#726: Undefined variable in upgrade script -issue#728: Resolve issues with jQueryUI empty dialogs -issue#731: Add class to radio button labels to correct display issue -issue#736: Sequence numbers not visible when editing templates using modern theme -issue#739: Graph Titles missing on aggregate graphs -issue#740: Spacer manipulation broken after update to responsive forms -issue#741: Errors in dsstats with very large RRDfiles with more than 60 data sources -issue#748: Search results are not cleared on Aggregates -issue#754: Default Language for user and system are not set on new installation -issue#755: RRDtool Graph Watermark is incorrect -issue#756: Resolving some translation issues -issue#763: Template Export not functional -issue#765: Validation error when viewing Utility View -issue#771: Editing a report renders no options after creation -issue#780: Preview always shows thumbnails in reports interface -issue: Hide Aggregate system cdefs when editing graphs and graph templates -issue: Updating Utility View zoom was not updating table data -feature#723: Convert Data Source dropdown to autocomplete when editing standalone graphs -feature#735: Allow color selection in graphs and templates to be autocomplete -feature#753: Preliminary support for RRDtool 1.7. -feature: Add function to obtain the current execution user -feature: Implement Site timezones as autocomplete for performance -feature: For themes other than classic, make color id selection autocomplete -feature: CLOG timestamp is now formatted as defined in settings -feature: CLOG can show loginformation from rotated logfiles 1.1.7 -issue#470: Enhance Cacti's SNMP function and Data Query XML, add <output_format>hex|string|guess</output_format> -issue#653: Devices with empty sysNames are not added to discovered devices -issue#655: Data source not displaying device name -issue#658: Scheduled Reports (type "tree") not working -issue#662: Sending test Email should optionally bypass ping -issue#667: In Classic theme initial view of Tree view broken -issue#669: Invalid SQL Messages when upgrading to Cacti 1.0.5 -issue#670: Validation error when you do "Change Graph Template" in Cacti -issue#672: Cacti unable to enable snmp notification receiver mibs -issue#680: Sort order in Time Graph View -issue#687: Cacti DB access not compatible with PHP 7 -issue#696: Multiple issues with snmpagent notification UI -issue#699: Add custom error handler for ping functions -issue#704: Fix GUI issues for Graphs not belonging to a device -issue#707: Back button not working -issue#708: Issues finding lib/snmp.php in host disk functions -issue#712: Change Graph Template dropdown invalid -issue#717: Allow ajax callbacks when adding non-templated graph items -issue: Reports were not using Cacti's permission system for checking access -issue: User Admin page reported wrong permissions at Tree level missing some i18n as well -issue: Short data_name can cause data collection issues -feature: Updated Dutch language -feature: Updating PHPMailer to 5.2.23 -feature: Support input-output Data Query types -feature: Introduce new get_cacti_version() to reduce database calls on pages 1.1.6 -issue#620: The table poller_data_template_field_mappings can get out of sync when manipulating data templates -issue#622: Can not connect to MySQL over a socket -issue#628: Cacti upgrade process is complex and error pront for developers -issue#635: Error when saving change to data template -issue#637: When displaying tree graphs, use the same layout as preview mode -issue#646: When a plugin is disabled during page operations, warnings can appear -issue#651: Unable to view cacti log (because of allowed memory size exhausted) -issue#657: Error in log when host is down, using icmp and using cmd.php on FreeBSD -issue: List for creating a Graph type shows already added Graph Templates -issue: Fix and undefined variable on data source page when first creating a manual data source -issue: Remove tabindex and other non-required manual aria controls from pages -issue: Table type and column type in poller_output table wrong -issue: FILTER_VALIDATE_MAC not defined on PHP less than 5.5 -issue: When changing your language Cacti would not do a full page refresh -feature#106: Paginated CLOG and log administration -feature: Dutch translations -feature: Responsive Graphs page -feature: Convert forms from table based to div based for responsive design -feature: Better support for phones and tablets -feature: Simplified installation code to facilitate easier release cycle -feature: Updating Tablesorter to v2.28.9, adding widgets and pager 1.1.5 -issue#580: Data collection warnings when using cmd.php -issue#592: Incorrectly formatted HTML -issue#606: Replace <path_php_binary> in data input methods -issue#607: Allow draw_menu to specify multiple actions for the same URL -issue#608: Spaces adjacent to double quotes are eliminated during data input method import -issue#609: Honor the column setting in graph tree view mode -issue#610: Change Graph Template action not available -issue#611: Cacti Installation Wizard - Spine page incorrect on Windows -issue#612: Uncaught Error: Call to a member function row() on a string -issue#613: Network Automation, now requires a site or your are unable to save rules -issue#615: Data Input field length too short for longer scripts -issue#619: Export logging option in settings no longer used 1.1.4 -issue#524: Reporting not working when Tree branch is device -issue#560: Add 'Duplicate' and 'Convert to Graph Template' back to Graph Management page for Advanced mode -issue#573: Missing Graph Template dropdown items -issue#575: Very large hex strings result in scientific notation that RRDtool rejects -issue#579: Problems logging in using nginx web server -issue#581: session_start() warnings when manually sending reports -issue#584: Issues reporting memory recommendation on utilities page -issue#586: Overrunning pollers can cause system load spikes -issue#587: Data Collector setting under Network Discovery is not being used -issue#588: Devices with blank sysDescr are added to the first Device Template in error -issue#589: Automation discovery does not allow site association -issue#590: Unable to create a plugin based menu -issue#591: Row selection in Device Automation Templates not sane with drag-n-drop enabled -issue#601: Resolving some translation issues -issue#604: Unexpected backtrace on regular expression filters -issue#605: Remove Spikes non-numeric data causes warnings -issue: Ping email does not use a from email address -issue: Automation does not recognize default size or poller -issue: Unable to drag-n-drop on automation templates pages when enabled -issue: Fixed number of hosts in poller stats for first poller -issue: Fixed screenwidth issue in tab PHP-Info of Utilities module -issue: Recovery poller could get stuck in some situations -issue: Fix JavaScript errors when managing Aggregate Graphs -feature: Reorganize defaults to place more on device defaults page -feature: Update jQuery tableDnD to version 0.9 -feature: More tolerant of empty PHP_SELF found with some web servers 1.1.3 -issue#515: Unable to import color CSV file -issue#519: In non-classic themes its not possible to remove Cacti log or reporting tabs -issue#520: SQL error in graph automation -issue#521: Cacti allows removal of Data Query Graph Template associations when they are in use -issue#525: LAST GPRINT type not rendered correctly due to lack of escaping -issue#530: Undefined function get_vdef in lib/rrd.php -issue#531: Issues with TextAlign and Tick graph items -issue#532: Unreliable scroll height causes issues in Chrome -issue#533: User settings not cleared after saving profile -issue#534: Automation issue with AS clause -issue#538: Unable to rename tree folder -issue#541: Issues with mobile graph viewing -issue#555: DSStats SQL insert errors due to data collection issues -issue#563: Division by zero in removespikes.php -issue: Fixed rendering issues with HRULE's on graphs -issue: Update jsTree to 3.3.4 version -feature: Improved responsiveness UI tables, filters, and menus 1.1.2 -issue#492: Error while adding non data query (cg) graphs -issue#494: CLI error while importing template -issue#499: SQL error in graph automation resulting in no graphs on tree -issue#500: Generic SNMP device package damaged - Unix Ping Host -issue#505: Log rotation does not work in some cases -issue#506: Undefined index: cactiStatsDeviceFailedPolls -issue#507: Nextwork discovery 'export' produces no results -issue#509: Minor bug with device ownership selection -feature: Add new legend type that includes Current/Average/Minimum/Maximum -feature: Update d3.js to latest version 4.7.4 1.1.1 -issue#457: Continued LDAP issues with initial user creation -issue#461: The function escapeshell arg not appropriate on Windows -issue#462: LDAP authorization issues: group membership check broken for 'Group Member Type' = 'Username' -issue#464: Change default batch spike removal limits for standard deviation and variance -issue#465: Less than sign inside items and labels of graph break graph -issue#466: Call to member function row() on a non-object in lib/snmpagent.php -issue#467: Reduce the number of queries in log function -issue#472: Schema changes to improve performance -issue#485: When editing a device, the ping status was not always returned -issue: Back button issues due to syntax problems in JavaScript -issue: Zoom periodically would loose it's crosshairs after zooming -issue: Zoom would zoom out into the future even when disabled -issue: Fixing lite corruption in graph_templates_item table -feature: Make SpikeKill options more consistent -feature#459: Add variable date time option to report mail subject -feature#460: Add external_id to host variables -feature#469: Change re-index method of Data Query from Device edit -feature: Support generalized date format approach in the GUI -feature: Use localStorage over a Cookie for Zoom setting storage -feature: Fully implement 'Remove Orphans' from Package import process 1.1.0 -issue#337: Generic SNMP OID Graph Template damanged -issue#338: Extremely slow new graph/DS creation -issue#353: Broadcast & Multicast Packet counters missing -issue#376: Structured RRD path permission issues -issue#389: Manual template based graph creation not working -issue#407: The RRDfile does not exist message is misleading -issue#410: Select character data was interpreted as hex by cacti_snmp_walk() -issue#422: additional issues with LDAP authentication -issue#424: Automation does not discover devices w/o resolvable hostnames -issue#427: undefined index TotalVisibleMemorySize on FreeBSD -issue#432: SpikeKill menu wonky on Paw Theme -issue#434: password_verify not compatible in php5.4- -issue#435: urlPath missing from paw theme links -issue#436: Restricted user does not see graphs in tree view -issue#443: Allow remote_agent.php through a NAT -issue#446: No local admin when using multiple LDAP configuration -issue#447: Creating another non data query graph from same template reuses first data source -issue#449: exec_poll_php does not flush pipes when using script server -issue#450: Graph list view - No Graphs Found -issue: Improve email test exception errors and change default timeout to 10 seconds -issue: When on links page, breadcrumbs would become corrupted -issue: When upgrading from any version of Cacti to 1.0.5, SQL's relative to poller_reindex might appear -issue: Color page performance poor -issue: The Device dropdown on the Graph View page was unreliable -issue: Aggregate and non-Device Graphs in list view had not Device or Title description -issue: Re-engineer back button design to accomocate ajax and native navigation -issue: Make Graph Template filter wider -issue: Resolve some visual issues in Classic theme -feature: Add page refresh API to make page refreshing in Ajax easier to accomplish -feature: Update fontawesome to version 4.7 -feature: Use fontawesome glyphs for menu items -feature: Support multiple column sort in table library -feature: Add glyphs to main Cacti console menu 1.0.6 -issue#386: Allow special characters in graph title -issue#414: Install Wizard check path for spine -issue#415: SNMP session handling broken -issue#418: LDAP create user from template not working 1.0.5 -issue#296: Poller warning for Non-SNMP device -issue#319: Add default 'High Collection Rate' data source profile to new installs to demonstrate concept of multiple rates -issue#330: Import templates to non-default Data Profile -issue#337: Error when try create new graph - SNMP - Generic OID -issue#342: Infinite loop in poller_automation.php with invalid schedule -issue#343: Device discovery cannot handle dots in device name -issue#344: Unable to upgrade to latest Cacti on FreeBSD -issue#353: Legacy broadcast & multicast packet counters missing in interface.xml -issue#354: Place on tree dashes / ordering is not correct -issue#355: Replace table rows with count when using InnoDB tables -issue#357: If recovery mode runs longer than a polling interval, a second is spawned -issue#358: Sending test e-mail results in warning -issue#360: Issue importing cacti.sql with some charsets -issue#364: Moving graph item causes page render issue -issue#365: ss_host_disk.php and ss_host_cpu.php should use return -issue#367: Upgrade chart.js to version 2.5 -issue#368: Issue with device automation ip vs. ip_address -issue#369: Interface bits/second total Bandwidth wrong CDEF -issue#375: Drag and Drop of Devices and Graphs allows dropping onto self -issue#380: Ignores a non-standard SNMP port -issue#382: When using php5.5+ new users unable to change their password -issue#384: graph_view.php backtrace errors -issue#385: Unable to place an aggregate grapn on a subtree -issue#390: Display graphs from this aggregate icon next to graph not displaying -issue#392: cdef.php missing sql where for system cdef's -issue#398: checkbox is not honored when creating tree -issue#399: External link configuration: Order buttons don't work -issue#400: SNMP Engine ID (v3) field too short -issue#401: Graphs -> Apply Automation Rules fails -issue#404: Success even when test mail fails -issue#406: HRULE text format special characters not escaped -issue#408: Suppress SNMP units suffix from cacti_snmp_get() output -issue: Improve is_ipaddress functions -issue: Drag & drop showing when disabled on page automation_templates.php -issue: Output messages displayed incorrectly in automation_templates.php and automation_snmp.php -issue: Importing template from old Cacti would not show data templates -issue: Handle snmp error exceptions better -issue: Update Apache .htaccess files to support multiple version -issue: When executing a full sync, if the table structured has changed, recreate the remote table -issue: Multiple domains not working as expected -feature#197: Add external_id to Cacti for linking Cacti to other monitoring systems -feature#332: Support copy user groups -feature: Log proper IP address if logging in behind a NAT -feature: New qquery parsing rules: VALUE/TEST, VALUE/TABLE, VALUE/HEX2IP 1.0.4 -feature: Javascript: make menu movement smooth and use localStorage -feature: Added cacti_snmp_get_raw() for plugin developers -issue#288: Function cacti_snmp_get bad handling of wierd value into snmp_value -issue#298: Graph generation issue with SNMP - Bits/Sec + Total Bandwith -issue#301: Unresolvable DNS hostname causing backtraces -issue#302: spikekill memory leak -issue#303: Error when creating tree items with "&" in the name -issue#307: Aggregate graph gives CMDPHP errors -issue#308: UI resize issue -issue#309: Show "Save Successful" notification permanently -issue#311: Graph thumbnail settings in profile setting does not work -issue#320: Users can not change their own password -issue#324: Aggregate template graph template JavaScript error -issue#352: Add configurable auto-logout and page-reload options -issue#329: Customize the favicon -issue#334: primary key on poller output boost table not efficient/not being used correctly -issue: Fixed issues with Dark theme -issue: Fixed issues with Paw theme -issue: Fix timespan calculation -issue: Added misplaced join condition when generating RRDtool graphs -issue: Fix the selection of timestan based on local_graph_id and rra_id -issue: Correct error in discovery not adding devices -issue: Action message did not always display -issue: fix regex to use Domains like www.t-online.de -issue: Properly align Order columns. -issue: address renaming issues with tree items. -issue: Add device snmp --version is ambiguous -issue: SNMP Availability failed to report down devices - This only was occuring for cmd.php collector. -issue: i18n remove embedded HTML syntax -issue: Wrap menu items to avoid scrolling 1.0.3 -issue#297: Upgrade 0.8.8h to 1.0.0 fails to create poller_output_boost table -issue: Added missing template import hash for 1.0.2 1.0.2 -issue#279: Correct Boost Status display issue -issue#275: Permission View issue and Device Dropdown when in Classic Theme -issue#270: Major Mib Cache corruption. Rebuild your MIB Cache after upgrading -issue: Resolve Cacti logo on Graphs page in Classic Theme 1.0.1 -feature: SpikeKill allows filling range to last known good value -issue#261: Add IPv4 and IPv6 Specific Counters to interfaces.xml -issue#257: Poller Output Table not Empty WARNING messages in cacti.log -issue#256: New Graph - Add Graph Items Fails (Data Sources shows None) -issue#255: Errors Creating new Graphs - Undefined Index Errors -issue#254: Unable to Properly add Data Source -issue#251: Remote Data Collector stuck on upgrade page -issue#247: Devices missing from tree device list -issue#245: Drag and Drop in Tree Edit Erratic -issue#243: SMTP Ping Failure with not SNMP Authentication -issue#241: Authentication Method: None not functional -issue#240: SQL error when install plugin -issue#238: Duplicate color id's cause error during Upgrade -issue#231: SNMPv3 - PHP ERROR WARNING: Fatal error: Unknown user name in file -issue: Resolving visual issues with row counts. -issue: When deleting Graphs prevent the removal of Data Sources that are still in use -issue: Improve SNMP agent performance through SQL optimizations 1.0.0 -feature: Support for remote data collectors -feature: Support Internationalization (i18n) for the main Cacti site, and supported plugins -feature: Data Source Profiles replace RRA settings allowing a single system to have multiple polling intervals -feature: Redesigned Tree page including Drag & Drop functionality -feature: New Graph Permissions system designed to make permissions simple to manage -feature: Add Themes 'Classic', 'Modern', 'Dark', and 'Paw' -feature: Debug Data Sources by comparing them to the Data Template -feature: New special Data Source type to detect the poller interval -feature: Bulk inserts in PHP poller to address latency issues -feature: Optimize data collection through in memory caching giving a 50% reduction in polling times when dealing with large sites -feature: Support RRDtool VDEFs -feature: Support new Graph Items: AREA:STACK, GPRINT:AVERAGE, GPRINT:LAST, GPRINT:MAX, GPRINT:MIN, LINE:STACK, TEXTALIGN, TICK -feature: Support RRDtool features: Right Axis Support, Dynamic Labels, Tab Width, Legend Position, Legend Direction -feature; Resizeable table columns -feature: Deprecated Single Pane Tree View -feature: Role Based Access Control (RBAC) -feature: Support User Group Permissions -feature: Show number of in use Graphs, Data Sources, and Devices for a given Template -feature: Support bulk re-sync of graphs to assigned Graph Template -feature: Bulk Device Settings changes -feature: CDEFs, Colors, GPrint Presets consolidated to Presets menu -feature: Authentication cookies for 'remember me' functionality -feature: Automatic logout after session inactivity -feature: Replace Boost server in favor of RRDtool Proxy -feature: Graph Details include CSV output, zoom, debug, and download links -feature: Graph Export moved to a plugin -feature: User change password functionality -feature: Automation added to core functionality through the merge of the Discovery and AutoM8 plugins -feature: Change interface graphs from 32 bit to 64 bit with ease -feature: Plugins now have hooks in device templates and automation -feature: Allow users to preview template imports to determine if there will be issues from importing -feature: Automatic removal of orphaned graph items when importing newer versions of graph templates -feature: Support for MySQL 5.7 -feature: Support for PHP 7.0 -feature: Merge Aggregate Plugin - Aggregate graph creation -feature: Merge AutoM8 Plugin - Automation of graph creation -feature: Merge Boost Plugin - Faster polling, result caching, on-demand RRDtool file updates -feature: Merge CLog Plugin - View Cacti logs -feature: Merge Discovery Plugin - Device discovery -feature: Merge Domains Plugin - Support for domain (ADS/LDAP) specific user templates -feature: Merge DSStats Plugin - Cache Data Source values for easy retrieval -feature: Merge Logrotate Plugin - Rotate Cacti logs -feature: Merge Realtime Plugin - Realtime graph viewing -feature: Merge Reporting (Nectar) Plugin - Reporting -feature: Merge RRDclean Plugin - RRD file cleanup and management -feature: Merge Secpass Plugin - User password policy enforcement -feature: Merge Settings Plugin - Shared settings for plugins -feature: Merge SNMP Agent Plugin - SNMP Agent for Cacti providing system statistics -feature: Merge SpikeKill Plugin - Remove unwanted spikes from graphs -feature: Merge SSL Plugin - Force https -feature: Merge SuperLinks Plugin - Add external links within Cacti -feature: Merge UGroup Plugin - User groups with permissions -feature: Merge Watermark Plugin - Watermark your Cacti graphs -bug: Fixed issue where old graph templates (0.8.6-), could import bogus data causing issues with Data Input Methods -bug#0000168: Duplicate data sources should be avoided when creating new graphs -bug#0000851: Review an imported template -bug#0001155: When viewing graph tree do not show empty nodes -bug#0001337: Form to filter for graphs in host view mode -bug#0001552: Date ranges not shown on graphs in the view with Daily, Weekly, Monthly & Yearly graphs -bug#0001573: RRA templates/grouping -bug#0001577: Override session handling and store session in Database -bug#0001790: Allow for XML delimiter in fields of a script query -bug#0001820: Unable to use a Data Input Method Output Field in more than one Data Source Item -bug#0001827: Changing the graph template messes up the graph item fields -bug#0001836: Add mysql error message to log -bug#0001877: Cookies path is not properly set -bug#0001966: Expand Devices in tree view not honored -bug#0001970: Data query index order cache should be populated on re-index -bug#0001981: Cacti is not full UTF-8 -bug#0001986: CLI allow add_graphs.php to have multiples --snmp-field and --snmp-value options -bug#0001996: Allow using data input field in graph title -bug#0002096: Enumerated SNMP values not parsed correctly -bug#0002112: CLI add configurable parameters for device_add.php -bug#0002133: Restrict User to only manage specific device(s) -bug#0002135: Regular expression support for filter -bug#0002137: Data query oid_suffix parameter does not function -bug#0002159: Database creation file not fully compliant with strict SQL mode -bug#0002162: Unable to authenticate user with password containing UTF-8 -bug#0002196: Incorrect script server instance number in log -bug#0002225: Make -Cc SNMP option configurable -bug#0002255: Script query_unix_partitions.pl should only query local mounts -bug#0002336: Implement php-snmp class library -bug#0002340: Data query script execution should be escaped -bug#0002350: SNMP Data Query index_order ignored -bug#0002351: Ping does not work with non-English locale -bug#0002361: Spine does not log unknowns the same way cmd.php -bug#0002362: Poller cmd.php makes wrong hex-string to decimal conversion -bug#0002370: Cacti prints wrong date formats, does not honor a systems locale -bug#0002403: Typo in DELETE statement leading to poor graphing performance -bug#0002412: Graph Template duplication causes \t to be converted to TAB char -bug#0002418: Data Source Items named 'ds' break UI ability to add more items -bug#0002419: SNMP enum results not parsed correctly by cmd.php poller -bug#0002452: CVE-2014-4000 PHP Object Injection Vulnerabilities -bug#0002454: OS Command Injection -bug#0002468: Changing graph format to anything but PNG causes no output -bug#0002476: Add support for SNMP v3 EngineID -bug#0002483: Cisco ASA using Re-index method of verify all causes recache event every time -bug#0002484: Incorrect SQL request in cli script repair_database.php -bug#0002521: Unable to create two devices via CLI with the same IP-Address -bug#0002522: Zero padded hex strings are parsed incorrectly -bug#0002535: Graph Template Changes not updating RRDtool command -bug#0002636: Creating Data Template with "U" for min and max saves field data_input_field_id as 0 for first item -bug#0002697: CVE-2016-2313 allows remote authenticated users who use web authentication to bypass intended access -bug#0002698: When the host is down the wrong data type are used for some columns in the host table -bug#0002723: Renaming a disabled device still attempts to connect and get SNMP host information -bug#0002724: Multipage graphs the menu can disappear -bug#0002725: Changing graph template does not mark correct interfaces disabled on data query generated list
Update net/cacti to 0.8.8h - see the changelog at <http://www.cacti.net/changelog.php>. The log and rrd database directories have been moved under VARBASE.
Add SHA512 digests for distfiles for net category Problems found with existing digests: Package haproxy distfile haproxy-1.5.14.tar.gz 159f5beb8fdc6b8059ae51b53dc935d91c0fb51f [recorded] da39a3ee5e6b4b0d3255bfef95601890afd80709 [calculated] Problems found locating distfiles: Package bsddip: missing distfile bsddip-1.02.tar.Z Package citrix_ica: missing distfile citrix_ica-10.6.115659/en.linuxx86.tar.gz Package djbdns: missing distfile djbdns-1.05-test25.diff.bz2 Package djbdns: missing distfile djbdns-cachestats.patch Package djbdns: missing distfile 0002-dnscache-cache-soa-records.patch Package gated: missing distfile gated-3-5-11.tar.gz Package owncloudclient: missing distfile owncloudclient-2.0.2.tar.xz Package poink: missing distfile poink-1.6.tar.gz Package ra-rtsp-proxy: missing distfile rtspd-src-1.0.0.0.tar.gz Package ucspi-ssl: missing distfile ucspi-ssl-0.70-ucspitls-0.1.patch Package waste: missing distfile waste-source.tar.gz Otherwise, existing SHA1 digests verified and found to be the same on the machine holding the existing distfiles (morden). All existing SHA1 digests retained for now as an audit trail.
Changes 0.8.8c: Important Security Fixes CVE-2013-5588 - XSS issue via installer or device editing CVE-2013-5589 - SQL injection vulnerability in device editing CVE-2014-2326 - XSS issue via CDEF editing CVE-2014-2327 - Cross-site request forgery (CSRF) vulnerability CVE-2014-2328 - Remote Command Execution Vulnerability in graph export CVE-2014-4002 - XSS issues in multiple files CVE-2014-5025 - XSS issue via data source editing CVE-2014-5026 - XSS issues in multiple files Important Updates New graph tree view Updated graph list and graph preview Refactor graph tree view to remove GPL incompatible code Updated command line database upgrade utility Graph zooming now from everywhere
Fixes for: CVE-2014-2326 Unspecified HTML Injection Vulnerability CVE-2014-2328 Unspecified Remote Command Execution Vulnerability CVE-2014-2708 Unspecified SQL Injection Vulnerability CVE-2014-2709 Unspecified Remote Command Execution Vulnerability
Pullup ticket #4290 - requested by tron net/cacti: security update Revisions pulled up: - net/cacti/Makefile 1.21 - net/cacti/PLIST 1.4 - net/cacti/distinfo 1.4 - net/cacti/patches/patch-host.php 1.1 - net/cacti/patches/patch-install_index.php 1.2 - net/cacti/patches/patch-lib_api_device.php 1.1 ------------------------------------------------------------------- Module Name: pkgsrc Committed By: tron Date: Wed Jan 8 20:51:28 UTC 2014 Modified Files: pkgsrc/net/cacti: Makefile PLIST distinfo pkgsrc/net/cacti/patches: patch-install_index.php Added Files: pkgsrc/net/cacti/patches: patch-host.php patch-lib_api_device.php Log Message: Update the "cacti" package to version 0.8.8b. Changes since 0.8.8a: - bug: Fixed issue with custom data source information being lost when saved from edit - bug: Repopulate the poller cache on new installations - bug: Fix issue with poller not escaping the script query path correctly - bug: Allow snmpv3 priv proto none - bug: Fix issue where host activate may flush the entire poller item cache -security: SQL injection and shell escaping issues Also add the fix for the security vulnerability reported in SA54531 taken from the SVN repository. To generate a diff of this commit: cvs rdiff -u -r1.20 -r1.21 pkgsrc/net/cacti/Makefile cvs rdiff -u -r1.3 -r1.4 pkgsrc/net/cacti/PLIST pkgsrc/net/cacti/distinfo cvs rdiff -u -r0 -r1.1 pkgsrc/net/cacti/patches/patch-host.php \ pkgsrc/net/cacti/patches/patch-lib_api_device.php cvs rdiff -u -r1.1.1.1 -r1.2 pkgsrc/net/cacti/patches/patch-install_index.php
Update the "cacti" package to version 0.8.8b. Changes since 0.8.8a: - bug: Fixed issue with custom data source information being lost when saved from edit - bug: Repopulate the poller cache on new installations - bug: Fix issue with poller not escaping the script query path correctly - bug: Allow snmpv3 priv proto none - bug: Fix issue where host activate may flush the entire poller item cache -security: SQL injection and shell escaping issues Also add the fix for the security vulnerability reported in SA54531 taken from the SVN repository.
Update to 0.8.8a, slightly based on PR 46399 by Nils Ratusznik. 0.8.8a: Important Notices Plugin Architecture is now part of Cacti Changelog bug#0002207: cannot export graph templates bug#0002208: Graphs with CDEFs fail to generate bug#0002209: External auth does not work behind a reverse proxy bug#0002211: creating an index USING BTREE fails ony MySQL < 5.0.60 bug#0002213: CLI upgrade script is missing 0.8.7i as a target bug#0002214: SQL error during non-PIA upgrade to 088 when giving a default for a text field in plugin_realms bug#0002216: use of define_syslog_variables() gone in PHP 5.4 bug#0002217: url_path should default to /cacti/ bug#0002221: Missing plugin directory causes endless loop in plugins.php bug#0002222: tail_logfile hangs when cacti.log not readable, filling apache log with fgets warnings 0.8.8: Important Notices Plugin Architecture is now part of Cacti Changelog bug#0002056: un-initialized datetime used for host status (was: Zero length string != NULL) bug#0002081: In Graph Management, search display graph title breaks when using pattern symbol "/" bug#0002132: need to include pa.sql with the 0.8.7i and future releases bug#0002134: rebuild_poller_cache.php --host-id deletes table poller_item completely bug#0002141: cacti.sql missing BTREE PRIMARY KEY for poller_output bug#0002146: Utilities -> View Log File -> refresh does not work bug#0002150: usort_data_query_index() is broken -> graph order for hosts with data query sort option fails bug#0002151: When building HTML forms with sub_checkbox on_change parameter is not used bug#0002152: Issue with filter on graphs_new.php bug#0002153: Cant search for patterns containing a forward-slash bug#0002156: CDEF strings are not escaped before passed to rrdtool command bug#0002158: Minor changes to grammar of displayed messages bug#0002165: Using data input field in data source name (related to 2079 in 0.8.7i) bug#0002167: New poller hook poller_finishing bug#0002172: structure_rra_paths.php does not handle disabled data sources bug#0002174: poller_item.host_id has wrong type bug#0002178: typo in include/global_form.php: Mimimum -> Minimum bug#0002181: session_unregister (use in functions.php) doesn't exist anymore in PHP 5.4 bug#0002182: When there is no suitable (unique) index, graphs are not shown in data query ordering on host leafs bug#0002189: Proper graph hooks bug#0002191: Refresh issues bug#0002194: changing data query XML does not propagate to existing data sources bug: Fix input validation on cli/api_device.php bug: Fix issue with data source template associate command line script inserting incorrect rra information bug: Fix minor display issue on data source pages bug: Fix minor issue with counting items in the poller_output table bug: Graph settings and settings check boxes do not allow unchecking to be saved bug: Fix minor issue with plugin library caused by non-session bug: Fix SQL error on data input save for non-templated graphs bug: user_log index added to increase performance feature: Merge Plugin Architecture into Cacti feature: Added index to data_template_data to increase performance
security update to 0.8.7i (with Plugin Architecture version 3.1) bug#0001963: Bandwidth summation "total in" and "total out" are always 0 bug#0002040: ICMP ping errors for Windows 7 with PHP 5.3 bug#0002062: Multiple security vulnerabilities bug#0002063: Multiple value poller output incorrectly interpreted as hexadecimal value bug#0002064: Removing "~" (tilde) by sanitize_uri() conflicts with Apache UserDir translation bug#0002066: Graph without host id "Notice: Undefined variable: host_id" bug#0002067: Custom time range filter not working bug#0002068: Missing header include in analyze_database.php bug#0002071: MySQL table poller_item is dropped always when "Data Input Method" is changed or added. bug#0002079: Using input field of a script in graph title does not work bug#0002080: Database password containing "@" does not connect bug#0002083: Adding a new users generates errors in apache logs bug#0002084: Incorrect normalization of hrStorageTable values over 2^31 bug#0002086: Incorrect usage of mysql custom tcp port bug#0002087: PHP recache problems due to missing slashes in reindex table bug#0002093: Unit exponent value of 0 not imported with graph template bug#0002094: CDEF: "another cdef" references not included in template export bug#0002106: Command line add device does not accept "None" for host template bug: Update host template cli script help to fix incorrect options bug: Refresh of Cacti log viewer not working bug: Problems saving User Graph Permissions in IE9 bug: Bandwidth summation fails if NAN values are present bug: Special Type Code "host_id" available in Data Queries by Not Data Input Methods bug: Do not generate error messages when creating non host based graphs bug: Wrong index used for Data Queries using VALUE/REGEXP bug: Fix issue with title variable replacement failing when no host is associated with graph bug: Cacti generating MySQL 1100 Errors when modifying the tree bug: Resolved "Fatal error: Cannot use string offset as an array" in lib/data_query.php feature: Properly support ifHighSpeed replacement variable feature: Increase granularity of availability options to correct spine bug feature: Replace "event count" with last changed date for host availability
Cacti is a complete frontend to rrdtool, it stores all of the necessary information to create graphs and populates them with data in a MySQL database. The frontend is completely PHP driven. Along with being able to maintain Graphs, Data Sources, and Round Robin Archives in a database, cacti handles the data gathering also. There is also SNMP support for those used to creating traffic graphs with MRTG. The Plugin Architecture for Cacti was designed to be both simple in nature and robust enough to allow freedom to do almost anything in Cacti. The Plugin Architecture for Cacti is integrated into this package. (created from wip/cacti by pettai)
Initial revision