forked from Cacti/cacti
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathCHANGELOG
3212 lines (3099 loc) · 219 KB
/
CHANGELOG
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
Cacti CHANGELOG
1.3.0-dev
-issue#2205: Allow admins to disable RRDtool watermark
-issue#3066: Enable the secure flag on cookies when HTTPS is enabled.
-issue#3074: ss_net_snmp_disk_bytes.php and ss_net_snmp_disk_io.php do now report mmcblk data.
-issue#3141: Fix FreeBSD IPv6 ping
-issue#3547: Database Audit utility does not check database permissions
-issue#3555: Increase device threads up to 10
-issue#3559: When a developer uses backtracing, HTML output can be seen from command line bug confirmed
-issue#3760: Devices showing blank after deleteing and Poller sync
-issue#3560: When using `input_validate_xxx`, calls to `die_html_input_error()` do not pass variable name bug confirmed
-issue#3710: When fetching tree information, database is not queried properly
-issue#3636: Spikekill method variable is misinterpreted when calculating overall statistics
-issue#3675: Spikekill fills in NaN values outside specified time range
-issue#3793: Calling function read_config_option in plugin's setup.php leads to error
-feature#1214: Move Tree Create/Remove/Modify Functions to lib/api_tree.php
-feature#1523: Value above RRD maximum value
-feature#2437: Create system-wide Proxy settings for plugins
-feature#2474: Enable better version reporting for GitHub/Source/Package editions
-feature#2550: Enable use of authenticator codes for Two-Factor Authentication
-feature#2607: Allow adding sites from command line
-feature#2767: Plugins should be temporarily disabled if a required plugin is also disabled
-feature#3139: Added option in CLI tool remove_graphs for deletion of single graph
-feature#3187: Feature: rra path should be configurable
-feature#3260: When a device is added, populate the created date/time
-feature#3513: Add hooks for plugins to show customize graph source and customize template url
-feature#3558: Allow copy_user cli script to set various additional fields
-feature#3584: Verify passwords against Pwned databases using API
-feature#3585: CLI script to show database permissions that Cacti has
-feature#3568; Allow exclusion of snmp fields / value(s) when adding graphs via CLI
-feature#3620: Spikekill operation changed from left-to-right to highest-downward
-feature#3677: Relocate the delete button for collectors to the edit page
-feature#3679: Allow searching logs by name, not just id
-feature#3724: Create Spikekill method to kill values over an absolute maximum
-feature#3725: Create the ability for Spikekill to modify only certain DSes within an RRD
-feature#3738: Ability to see MySQL permissions associated with current database user
-feature#3417: Add worst poller hosts to support page, log and email warning when poller time reached defined threshold
-feature#3845: Allow non-standard Remote Agent port to be used
1.2.15
-issue#3643: Maximum OIDs Per Get Request - field empty
-issue#3656: Cacti V1.2.12 Boost running too often
-issue#3693: Uptime Recache Event Loop on Devices Causing Interface Graph Gaps
-issue#3703: Graph Tree search problem
-issue#3711: Graphs New interface not validating page variables
-issue#3722: External Links - switch between tabs
-issue#3730: Change wording for the 21st century, but let's not forget our past
-issue#3741: Replicate deleted device status instead of poller sync
-issue#3743: Description field allows more characters entered than is stored
-issue#3747: ldap.php cannot be loaded while installer is running
-issue#3748: Unable to remove discovered device
-issue#3753: Invalid argument supplied for foreach()
-issue#3755: Graph Templates has duplicate SQL delete statement
-issue#3759: Errors when doing a graph Sync 1.2.12
-issue#3760: Devices showing blank after deleteing and Poller sync
-issue#3761: Cacti 1.2.12 backtraces when deleting devices
-issue#3763: Function inject_form_variables not replacing all arguments
-issue#3764: Suggested values on Data Queries with multiple data templates gives error
-issue#3767: Progress bar does not provide enough visual information during long page loads
-issue#3768: When using the Paw, Paper-plan, and Sunrise themes, there is no way to remind the user who is logged on
-issue#3769: Some users prefer to see all columns on the screen and do not wish that they be hidden despite the page size
-issue#3770: Column sizing is being lost between pages refreshes
-issue#3771: All Cacti Console pages should include the ID of the object and the Data Input Method page is missing that ID
-issue#3775: Search field strange behavior when hitting enter in 1.2.14
-issue#3778: Export DataQuery show PHP Error: ERROR PHP NOTICE: Undefined index: fname
-issue#3781: Cacti V1.2.14 php backtraces on Auth.php errors upon login
-issue#3782: Remove Devices shows undefined variable error
-issue#3786: Cacti 1.2.12 Realtime index errors
-issue#3790: Error Upgrading Cacti from Pre 1.x from Recent MariaDB version
-issue#3793: Calling function read_config_option in plugin's setup.php leads to error
-issue#3803: Allow Users to Specify Alternate Sources for Content-Security Policy
-issue#3809: The version number of plugin is not correct because the version length is too small in plugin_config schema
-issue#3815: Issues with Cacti login when session_autostart is configured in php.ini
-issue#3820: Removal of several items that require a confirmation have inconsistent bahavior
-issue#3821: The refresh circle still exist after export color done
-issue#3825: Unable to pass tree and leaf ID to 'graph_button' hook
-issue#3827: rrdcleaner not logging correctly on 1.2.14
-issue#3828: Early 'return' makes $current_user empty
-issue#3831: Minor errors in sep 8 of upgrade web page
-issue#3835: The function number_format_18n() does not properly use the decimal and thousands separators in some cases
-issue#3836: Undefined index in lib/timespan_settings.php
-issue#3844: Minor memory leaks and refresh issues when zooming on graph.php page
-issue#3847: Cacti 1.2.14 Real-Time Graphs not working
-issue#3849: Graph Tree - Redirect to host/tree/Graph Management
-issue#3850: Trees management screen not reporting correct number of trees
-issue#3858: Tree sequence wrongly increments
-issue#3862: Console > Setting > Auth > Guest User drop-down list should not list current log on user
-issue#3864: A link text in cacti table header cannot show clearly when in modern theme
-issue#3868: Under some cases tree logic leads to undefined index errors
-issue#3869: Cacti Data Debug can show errors if the Data Source is damaged or has been removed
-issue#3871: Import DataQuery show PHP Error: ERROR PHP NOTICE: Undefined index: fname
-issue#3874: The SHIFT functionnality in graphs does not accept negative values
-issue#3881: Fixed wrong error message when file was not readable in import_package.php
-issue#3883: No way to remove integrated/orphaned Plugin references from the Plugin Management interface
-issue#3884: Improve MySQL Settings Recommendations for Character Set and Colation
-issue#3888: Fix to IP sorting in single column
-issue#3890: Saving a Device Should not always repopulate the poller cache
-feature: Update FontAwesome to Version 5.14
1.2.14
-issue#3676: Device not showing up in device page but showing up in Monitor tab
-issue#3678: More or Equal incorrect highlighting max_heap_table_size and tmp_table_size
-issue#3694: Spikekill `percent` is converted from percent to decimal twice, making it 1/100 of the true size
-issue#3713: When sorting data debug checks by user, no results are shown and errors recorded
-issue#3719: When tooltip is too long, the scroll bar exists, and cannot be scrolled, which makes the tooltip be hided
-issue#3723: Improper escaping of error message leads to XSS during template import preview
-issue#3728: Invalid uptime is not handled properly
-issue#3737: Poller functions may not run if 'processes' table is missing
-feature#3615: Poller keeps using old IP address for a device
1.2.13
-security#3544: jQuery XSS vulnerabilities require vendor package update (CVE-2020-11022 / CVE-2020-11023)
-security#3549: Lack of escaping on some pages can lead to XSS exposure
-security#3582: Update PHPMailer to 6.1.6 (CVE-2020-13625)
-security#3622: SQL Injection vulnerability due to input validation failure when editing colors (CVE-2020-14295)
-security#3628: Lack of escaping on template import can lead to XSS exposure
-issue#3517: When generating reports, function looping can occur resulting in 100% cpu usage
-issue#3525: When viewing Graphs, zoom functionality prevents drag and drop of image
-issue#3527: When using 95th Percentiles, undefined index errors can be generated
-issue#3532: When using Realtime, if no graph contents are present an error is generated
-issue#3533: When exporting data, Start date for RRDfile does not match start date of first data row
-issue#3536: When using Navigation Menu, Show/Hide in Response mode does not always work
-issue#3538: When using Realtime, race conditions between browser and function loading can occur
-issue#3543: When exporting CSV data, Unicode prefix is not properly set
-issue#3551: Authentication can fail when using Web Basic Authentication and Template User
-issue#3553: When attempting to view an aggregate graph that does not exist, many errors are generated
-issue#3563: Current orphan handling disrupts graphing transient indexes
-issue#3566: Automation incorrectly attempts to use MacTrack to duplicate options
-issue#3567: When Boost runs, locks are not always released properly and crash is detected
-issue#3569: Invalid font results in large number of log entries
-issue#3571: Correct various runtime errors due to incorrect message variables
-issue#3574: Saving Graph Template Items take a long time on large systems
-issue#3577: Hosts are being incorrectly filtered when first displaying with filter set to all
-issue#3579: Graphs can incorrectly show as 'Empty Graph'
-issue#3581: Realtime graph window is not resizing properly
-issue#3588: Validation warnings are generated when viewing/editing devices
-issue#3594: Automation hangs for certain schedule types
-issue#3595: Template to Device sync text is not consistent
-issue#3596: When importing template, resources aren't checked properly
-issue#3597: Template to Device sync provides no feedback
-issue#3598: When editing graphs and graph templates, back button results in broken page
-issue#3599: When downgrading, templates are fully selected for install
-issue#3601: When a device is down, instate can show wrong time
-issue#3607: When session timeout occurs, subsequent authorized access to areas can become blocked
-issue#3611: Allow CHANGELOG to be viewable from the GUI
-issue#3613: When modifying trees, devices and graphs lists ignore Autocomplete Rows setting
-issue#3614: When section tabs wrap, the title of the first section can become obscured
-issue#3624: When previewing graphs, sometimes the images fail to appear
-issue#3629: Log files are not rotated properly on remote pollers
-issue#3631: Command line scripts do not allow an unlimited runtime causing timeouts
-issue#3632: When mysql connection fails, various unexpected errors are recorded
-issue#3635: Automate generates undefined index errors when communicating with remote pollers
-issue#3639: When updating a device, duplicate entry errors occur when inserting to the database
-issue#3646: Adding datasource fails from CLI due to missing function
-issue#3651: Editing any item on an Aggregate Graph that has been converted to a normal graph breaks entire graph
-issue#3655: Rare race condition between Boost and Poller can result in unexpected missing table errors
-issue#3659: When viewing logs, unexpected 'needle' errors can be seen on rare occasions
-issue#3663: Disabling a Data Collector can cause unexpected errors
-issue#3668: When Input Field is in error, message reports field will be highlighted which is incorrect
-issue#3669: When adding an Input Field, the Input Method can be renamed unexpected
-issue#3673: Spikekill does not receive correct `avgnan` value when launching from GUI
-issue#3676: Device not showing up in device page but showing up in Monitor tab
-issue#3681: Item movement arrows do not properly align on all themes
-issue#3682: When in 'Time Graph View' mode, Zoom features do not work correctly
-feature#3611: Allow CHANGELOG to be viewable from the GUI
-feature#3647: When adding datasource fails from CLI, created Datasource ID should be printed
-feature#3666: Update jstree.js to 3.3.10
-feature#3688: Update phpseclib to 2.0.28
1.2.12
-security#3467: Lack of escaping of color items can lead to XSS exposure (CVE-2020-7106)
-issue#3422: When Graph Item is not linked to a data source, Comments do not always get variables substituted correctly
-issue#3424: Hosts are being incorrectly filtered when no location filter is set
-issue#3427: When exporting to a CSV with unicode characters, contents can become garbled
-issue#3429: When using SNMP v3, Automation can report extraneous warnings
-issue#3432: Rare race condition exists when both boost and dsstats enabled
-issue#3434: When attempting to exploit Cacti using alert, unexpected errors can be seen
-issue#3436: Unable to login due to incorrect default of Cookie Domains in config.php.dist
-issue#3438: When upgrading to 1.2.11, installer can appear to stop at 42%
-issue#3447: SNMP Issues on recent version of PHP
-issue#3449: When viewing the installation wizard's directory permission step, items are overlapping unexpectedly
-issue#3450: When installing Cacti under XAMPP and PHP 7.4, exceptions are being recorded and installation fails
-issue#3452: New Content-Security-Policy prevents External Links from being opened
-issue#3454: Cacti's Reports are not displaying messages correctly
-issue#3457: Graphs can not properly handle negative axis values
-issue#3459: When installing a new remote poller, connection tests can incorrectly fail
-issue#3460: Addtional changes to allow plugin folder/display names to be handled better
-issue#3462: Increase default memory limit for cli scripts to prevent runtime memory issues
-issue#3463: When listing VDEF's, selecting 'has graph' can cause unexpected exceptions in logs
-issue#3468: Graph rules cannot be created for automation
-issue#3474: The SSL option to set the SSL_CA should be optional for Client Connections
-issue#3477: Boost leaking memory when a large number of Data Sources disabled
-issue#3478: Reindexing can sometimes run longer than expected
-issue#3479: When viewing the Data Query table interface, the Data Input Method should be right aligned
-issue#3483: When recording log entries, cacti should default to hyphenated date format
-issue#3484: When editing SNMP v3 passwords, previous setting is not obfuscated
-issue#3488: In automation, when viewing an 'SNMP option set', the private passphrase is in clear
-issue#3495: When installing templates, default 'all' selection will reset all existing graphs, removing customisations
-issue#3496: Graph Items can show a double percent sign incorrectly
-issue#3502: When viewing Graphs, can not switch between list, preview and tree submodes
-issue#3504: Viewing graphs before the poller has run for the first time can produce unexpected errors
-issue#3505: When viewing graph previews, clicking Go or Refresh prevents calendars from working
-issue#3506: After successfully logging in, a user can become automatically logged out again
-issue#3507: Changes to JavaScript's Storage API cause exceptions to be thrown
-issue#3510: Only guests can actually guest only pages, logged in users are denied access incorrectly
-issue#3512: When plugins update, registered files list cannot always be updated
-issue#3520: When viewing graphs, shifting time does not work when using non-english languages
-issue#3576: LDAP Authentication succeeds, but login fails due to bad session handling
-issue#3629: Log files are not rotated properly on remote pollers
-feature#3480: Created 'custom_denied' hook to allow customisation of permission denied notifications
-feature#3498: Update js.storage.js to 1.1.0
-feature#3499: Update jstree.js to 3.3.9
-feature#3500: Update phpseclib to 2.0.27
1.2.11
-security#1566: Add SameSite support for cookies
-security#1985: Cookie should be properly verified against password
-security#3342: CSRF at Admin Email
-security#3343: Improper Access Control on disabling a user.
-security#3414: Update to jQuery 3.4.1 to resolve XSS issues with jQuery 3.3.1
-issue#2265: When attempting to save Graph field, query_ifSpeed is not properly validated
-issue#2400: Allow ability to duplicate site settings
-issue#2428: Make plugins non-case sensitive for folder names, whilst allowing nicer display names
-issue#2580: When running DSSTATS, system isn't properly detecting that another is already running
-issue#2853: Discovered Devices filtering do not include snmp description or name
-issue#3231: Allow user to unlock a tree that has been locked for editing by another
-issue#3237: Report gets resent every poller cycle
-issue#3247: Language source files do not update "PO-Revision-Date" attribute
-issue#3261: Automation rules aren't run for new devices on remote data collectors
-issue#3296: Bad PHP memory limit values can result in failed upgrades
-issue#3299: When using php-snmp and setting SNMPv3, warning is now shown as library does not support it properly
-issue#3303: When installing under Windows OS, path expansion is not converted to PHP required format
-issue#3310: When using 32-bit OS, automation errors can be seen due to subnet mask calculations
-issue#3312: Console menu does not auto-expand for graph item editor page
-issue#3313: When installing, multiple issues can be seen due to bad packages
-issue#3314: Script Server has invalid debug code left in
-issue#3317: Warnings can appear from CSRF Magic library due to multiple token values being found
-issue#3319: Errors can occur upgrading from 0.8.x due to incorrectly detected data source profile id
-issue#3322: When searching for LDAP accounts, allow recursive searching
-issue#3330: Packages that are not properly formatted can cause installation issues
-issue#3334: When upgrading from 0.8.x Automation SNMP Options should be populated
-issue#3335: Unable to hide Device based Aggregate Graphs on Tree
-issue#3336: Plugins need the ability to relax some content security policies in order to work properly
-issue#3340: Undefined variable warning can appear when using 95th percentile graphs
-issue#3341: MoTranslator does not appear to be handing null values properly
-issue#3345: When attempting to refresh datetime picker, unexpected results can appear
-issue#3346: When attempting to rewrite octet strings, extra space breaks pattern matching
-issue#3348: When attempting to handle Orphans and/or Sync Graphs, results are not as expected
-issue#3349: Prevent setting the PHP variable max_input_vars since it is read only
-issue#3350: When editing a data source template, inconsistent results can be seen due to database query
-issue#3355: When viewing raw graph data via the GUI, values are not always calculated correctly
-issue#3357: Tree Search textbox resizes to 0 in some cases
-issue#3360: When using guest accounts, after several timeouts result in refreshes, guest becomes logged out
-issue#3363: The current user and user group permissions pages are not responsive
-issue#3367: When Data Queries timeout, data is removed from the Host SNMP Cache table causing issues
-issue#3368: Saving a Graph Template Item fails due to missing includes
-issue#3373: When logging in via LDAP, ActiveDirectory would sometimes report insufficient access
-issue#3375: When polling more often than default period of collecting data, distribution of collected data was not occurring
-issue#3376: Improve speed when recovering from a poller from offline state
-issue#3378: When attempting to check whether to include MoTranslator, typo makes it appear unavailable
-issue#3380: php error when trigger threshold sendmail
-issue#3386: Second data collector shows as running when its has no items to gather
-issue#3387: Minor corrections to CSRF Magic
-issue#3388: Naming of CLI programs does not always match name used within syntax usage advice
-issue#3390: Incorrect breadcrumb bar if current tab is not "Graphs"
-issue#3402: Cacti scores low on performance audit on lighthouse audit
-issue#3408: CSRF Secret path is not passed properly when attempting to initialize secret
-issue#3409: Issues with navigation link activations to other base Cacti pages
-issue#3410: Zoom looses focus in advanced mode while crossing chart border
-issue#3411: When upgrading a primary server, full synchronization is not happening as expected
-issue#3412: When upgrading a primary server, automation templates are removed
-issue#3413: When upgrading and choosing to upgrade your packages, installer finishes without package data in log
-feature#1551: Allow system uptime to be a variable for use with graphs
-feature#1990: Plugin Realm should have a 'role' to help maintain changes between plugins
-feature#2110: Add Refresh Interval to Data Collectors display
-feature#2156: Add Location based filtering
-feature#2236: Allow for Purging of Data Source Statistics from the GUI
-feature#2268: Restore ability to duplicate a data profile
-feature#2534: Enhance table navigation bars to support systems with larger number of items
-feature#2688: Increase length of Graph Item 'value' field to support pango-markup better
-feature#3304: Allow Basic Auth Accounts to be mapped by CSV file
-feature#3366: Make form elements under checkbox_groups flow using flex grid style
-feature#3374: Set the domain attribute to secure cookies for the 'remember me' option
-feature#3403: Enhance the "Graph Debug Mode" to display RRDtool Command lengths and excess warnings
1.2.10
-security#3285: When guest users have access to realtime graphs, remote code could be executed (CVE-2020-8813)
-issue#3240: When using User Domains, global template user is used instead of the configured domain template user
-issue#3245: Unix timestamps after Sep 13 2020 are rejected as graph start/end arguments
-issue#3246: When upgrading with remote collectors, sync status does not always return properly
-issue#3250: When PHP memory limit is set to -1, recommendation value fails
-issue#3253: Upgrade can stall when checking permissions on csrf-secret.php
-issue#3254: Installer shows script owner rather than running user for suggested chown command
-issue#3266: When setting User Groups to 'Defer to the User', setting can lead to user being told they have no permissions
-issue#3269: When searching Graphs under a Chinese language, an unexpected error as sometimes shown
-issue#3274: When editing a tree, multiple device drag/drop does not work
-issue#3276: When spine aborts, script server can be left wanting or generating unnecessary logs
-issue#3277: When boost does not find an initial time, numeric errors can be raised
-issue#3281: When changing Graph Template options, incorrect image format may be selected
-issue#3282: Graph's can be sized incorrectly if image is SVG format
-issue#3283: When setting a file path, valid characters not recognised properly
-issue#3287: When using graph template 'Cacti Stats - User Logins', an incorrect count of invalid users can be seen
-issue#3288: When on Device page, pressing 'Go' on the filter caused Device New menu pick to appear
-issue#3289: When using CMD.PHP, poller id is not always shown properly
-issue#3290: When using CMD.PHP, inconsistent device logging levels may occur
-issue#3298: When initialising fields in JavaScript, text/textarea elements have width set to zero if it is hidden by parent
-issue#3302: Editing a Graph Template does not show the Data Template name
1.2.9
-security#3191: Lack of escaping on some pages can lead to XSS exposure (CVE-2020-7106)
-security#3201: Remote Code Execution due to input validation failure in Performance Boost Debug Log (CVE-2020-7237)
-issue#2937: Devices still show in lists despite being deleted
-issue#3038: When editing an aggregate on smaller screens, layout may not be correct
-issue#3136: Upgrade may fail between 1.2.7 and 1.2.8 if incompatible database format used
-issue#3142: Chrome sets graphs tree navigation view to width 0px
-issue#3146: Unable to create aggregate graphs on new installations
-issue#3149: After refresh of page, tooltips stop working
-issue#3150: When using Time Graph View, Zooming can cause errors
-issue#3151: Passing glue string after array is deprecated in PHP 7.4
-issue#3155: Aggregate does not correctly follow color template when reordered
-issue#3156: On new installs, gprint_format was missing from table aggregate_graphs
-issue#3157: Back button not working properly with Classic theme
-issue#3158: Classic theme show only 3 tabs on mobile device. Don't show Console menu
-issue#3159: PHP Memory is not correctly identified when value is not in megabytes
-issue#3161: When the poller_output_boost table is missing, recreate it before a poller run
-issue#3163: When using RPMlint, Free Software Foundation address is shown to be incorrect
-issue#3165: Zoom looses its focus after all graphs on page rendered
-issue#3166: When changing zoom level, graphs are resized inappropriately at the end
-issue#3167: Installer should initialize the csrf-secret.php file automatically
-issue#3168: sqltable_to_php.php script does not pick up row_format
-issue#3177: Remove legacy plugin hook that presents potential 3rd party security issues
-issue#3178: The change password page is not displaying the rules
-issue#3180: Receiving undefined index errors when working with some Data Queries
-issue#3181: When configuration file is unreadable, Cacti shows database connection errors if non defaults are needed
-issue#3182: When a database connection error occurs, there is no way to report actual error
-issue#3184: Improve program path detection by using system path and PHP_BINDIR
-issue#3193: Starting with MySQL 5.7 some sql_mode variables are required for some plugins
-issue#3196: Minimize use of eval() in JavaScript due to emerging Content-Security-Context guidelines
-issue#3200: Unable to mass change Graph Template image format in mass
-issue#3206: Converted aggregate graph cannot be edited
-issue#3209: Error occurs when Creating New Graphs through Automatically Added Devices using Sync Device Template
-issue#3216: When editing a Data Source Profile size is shown as 'N/A'
-issue#3224: When removing graphs by command line, regex is not properly validated when empty
-issue#3225: Unable to Import Templates due to invalid dependency hash
-issue#3226: When processing secpass login, failed logins are not recorded
-issue#3228: Login page does not remember the last realm used by user
-issue#3232: When editing HRULE and VRULE items, color selector was not presented
-issue#3233: When working with non-templated graphs, it can be difficult to determine what items represent
-issue#3235: Transient errors may occur with table poller_output_boost_arch
1.2.8
-security#3025: CVE-2019-17357 When viewing graphs, some input variables are not properly checked (SQL injection possible)
-security#3026: CVE-2019-17358 When deserializating data, ensure basic sanitization has been performed
-security#3066: When using HTTPS, secure cookie to prevent potential weakness
-issue#1228: Any tree or branch with a long name force main content off screen
-issue#2133: Long snmp_indexes are being cut off
-issue#2888: Long hostnames cause template filter to go off page
-issue#2987: Changing Color Template does not update Aggregate
-issue#2989: Allow Remote Data Collectors to maintain their own path variables
-issue#2991: Cacti Statistics device template can generate unexpected errors
-issue#2995: When editing a report, column setting may be ignored incorrectly
-issue#2996: When editing a user, graph options do not properly reflect previously saved settings
-issue#2998: Session performance issues due to excessive use for database storage
-issue#2999: Blank arguments can lead to extra spaces in script arguments
-issue#3006: Boost generates undefined variables warning during poller run
-issue#3011: i18n logging does not check write permission exists
-issue#3012: When viewing realtime graphs, some input variables are not properly checked
-issue#3013: Allow legends to be modified for Aggregate Graphs
-issue#3017: Automation network range with spaces fails validation
-issue#3019: User selected language is not always adhered to
-issue#3021: Tree view cuts off at the bottom of page on modern theme
-issue#3023: When clicking highlighted tab, side panel is not always shown/hidden correctly
-issue#3027: Aggregate Graph re-ordering does not work
-issue#3028: When zooming a graph, unable to reach edge of graph without losing focus
-issue#3030: Pace continues to run even after a page is finished rendering
-issue#3032: Graphs may select MAX instead of AVERAGE as consolidation function even if there is no item with MAX present.
-issue#3035: When editing a tree, can not remove entries due to CSS bug
-issue#3037: When emptying poller output using cli, debug functions are not properly included
-issue#3039: Allow packagers to be able to specify an alternate location of csrf-secret.php file
-issue#3040: When running automation, discovery can still run even if cancelled
-issue#3041: When running automation, scans do not always respond to being cancelled
-issue#3042: When running automation, scan can fail when selecting remote pollers
-issue#3045: When viewing Aggregate Graphs, an error due to undefined referrer may occur
-issue#3047: When saving settings, ignore remote pollers who have not checked in recently
-issue#3050: When viewing graph trees, some input variables are not properly checked
-issue#3052: When editing CDEF's, slow database performance can occur
-issue#3053: When viewing graph thumbnails, some input variables are not properly checked
-issue#3055: During install/upgrade, database tests are not performed correctly
-issue#3059: When using nth_percentile, correct value is not always returned if using MAX consolidation
-issue#3060: When upgrading from older MySQL databases, format is not changed from compact to dynamic
-issue#3061: When running automation, allow SNMP to be used as a ping method
-issue#3068: When administrating users, some input variables are not properly checked
-issue#3070: Improve database logging when a crashed table is encountered
-issue#3073: Automation network range does not always produce the correct start/end values
-issue#3078: When viewing graph debug from remote data collector, File Not Found warnings can appear incorrectly
-issue#3079: Allow domain names to be stripped from a device's long description
-issue#3080: Remote Agent throws warnings that graph_nolegend has not been sanitized
-issue#3085: When editing a poller, ensure each listening IP is unique
-issue#3081: External Links are not showing a glyph when they appear on the Console menu
-issue#3089: When viewing graphs in realtime, undefined variable can be logged for 95th Percentile graphs
-issue#3099: Graph template 'Linux - Memory Usage' has the wrong unit on its vertical_label
-issue#3101: Polling times can be slightly inconsistent due
-issue#3104: When viewing graphs, a byref error can be seen in the error logs
-issue#3105: When viewing hosts, some input variables are not properly checked
-issue#3111: When adding devices via command line, bad SNMP versions are not reported
-issue#3112: When zooming on Graphs, too many requests are being made causing slowness
-issue#3114: Support for USB devices that change name due to their hosts restarting
-issue#3118: When converting tables, the dynamic row format should be selected
-issue#3119: Main Data Collector should perform a Full Sync whenever it is installed/upgraded
-issue#3120: Correct issues causing incompatibility with PHP 7.4
-issue#3121: When converting tables during install, show what will be changed
-issue#3123: Named colors table is not properly imported/upgraded
-issue#3124: When a second data collector is added, boost is not enabled automatically
-issue#3128: i18n handler checks for existence of wrong mo file
-issue#3129: Logout repeated occurs even when already logged out
-issue#3132: Installer fails to continue if automation range is array of networks
-issue#3098: Support percent sign(%) in graph gprint item like legend area.
-feature#3077: Allow disabling remote poller resource cache replication to support upgrade testing
1.2.7
-security#2964: CVE-2019-16723 Security issue allows to view all graphs
-issue#1181: When opening the Scheduler, it may appear off screen when opened near the bottom of a window
-issue#2894: When using Remote Data Collectors, database information and recommendations may show Incorrect values
-issue#2895: When using data sources from different RRDs, Percentile calculation may be incorrect
-issue#2899: When displaying a form, variable substitution may not always work as expected
-issue#2922: When running a data query, the result may come back as undefined
-issue#2925: When using consolidation functions, retrieving the first step can cause errors
-issue#2926: When editing a graph, variable validation errors may prevent changes from being saved
-issue#2929: Boost performance may become poor even in single server mode
-issue#2930: RRDtool can generate errors to standard output which can corrupt images
-issue#2932: When RRDTool generates an error creating an image, it is not always reportedly properly
-issue#2936: Installer will loop when number of tables exceeds PHP's max_input_vars limit
-issue#2938: Under CentOS packages, upgrade_database.php script uses incorrect location for DB upgrade scripts
-issue#2940: Images are not always properly sized until the page size changes
-issue#2949: Order icons may not be properly aligned
-issue#2951: Allow legends to be modified for Aggregate Graphs
-issue#2958: Drop down autocomplete lists do not always open as expected
-issue#2961: When syncing device templates, undefined function may be raised
-issue#2963: When running ss_cpoller script, avgTime incorrect returns maxTime
-issue#2966: Realtime popup windows do not always honor settings
-issue#2967: When using Spikekill, gap and range fill are not operating as expected
-issue#2970: When a user edits their profile, buttons may appear as unusable whilst still being enabled
-issue#2973: User menu does not always display properly on mobile devices
-issue#2974: Script Server can raise unexpected warnings when 'arg_num_indexes' set but not found in data source
-issue#2975: Datasource Debug does not properly handle European numbers in certain circumstances
-issue#2976: Boost messages should be stored in their own log file
-issue#2977: Data updates with past timestamps can cause boost errors
-issue#2978: Moving hosts between data collectors is slow
-issue#2979: Multi Output Fields are not parsed correctly
-issue#2984: When checking SQL fields, value was not always primed
-issue#2986: Selecting 'Devices' menu pick closes 'Management' menu
-feature#2943: Allow all Data Queries of a device to be re-indexed at once
-feature#2952: If device is down or threshold breached, highlight in tree view
-feature#2985: Update phpseclib to 2.0.23
1.2.6
-issue#2794: Graph template not saved on graph edit
-issue#2825: "innodb_doublewrite = off" possibly dangerous recommendation
-issue#2829: PHP recommendations always see memory limit as unlimited
-issue#2830: Disabled Top/Bottom external links should not be displayed
-issue#2832: Install/Upgrade log does not show anything
-issue#2833: Undefined index can occur when data source does not have an snmp_index
-issue#2834: Boost performance drops on very large systems
-issue#2835: When creating graphs and inneficient query is causing long creation times
-issue#2837: Sunrise theme does not render checkboxes 100% correctly
-issue#2838: jQueryMultiselect does not match upstream due to forking
-issue#2839: Non regular expression search filters don't support international characters
-issue#2841: Total count is wrong after searching for External Link pages
-issue#2843: DSStats reruns Daily Aggregation every minute
-issue#2844: Autocomplete settings for passwords are not properly defined
-issue#2845: Data Template can't be edited when it is in use
-issue#2846: Allow tooltips for section headers with 'question' icon
-issue#2847: Permanently convert an Aggregate to a regular graph
-issue#2848: Aggregate graphs get clipped due to incorrect date range
-issue#2856: Aggregate issues with very long RRDtool command lines
-issue#2857: When trying to find the best index to use, a 'must implement Countable' warning appears
-issue#2860: When testing remote poller connections during install, undefined variable warning can occur
-issue#2862: Automation does not calculate network information correctly for single hosts
-issue#2866: Add poller ID to subject for admin notifications
-issue#2869: When creating aggregates from Graphs, JavaScript issues can occur
-issue#2872: Add support for MySQL 8 and use of grouping as name for a column
-issue#2875: Undefined variable when removing spikes in some cases
-issue#2877: When attempting to send report, undefined function 'get_tinespan' messages appear
-issue#2878: Function get_magic_quotes_gpc() is now deprecated in PHP 7.4
-issue#2879: Switching from authPriv to authNoPriv produces error when saving
-issue#2884: Replication continues to occur when poller has been disabled by sysres-dev
-issue#2891: Script server script ss_fping.php generates error when not called by script server
-issue#2901: Poller overrun warning message is badly worded
-issue#2902: Mailer incorrectly reports it is sending to noone
-issue#2903: PHP recommendations can generate a warning causing JSON issues
-issue#2905: Sorting plugins by version can lead to unexpected ordering
-issue#2907: SSL column for multiple pollers can be incorrectly set causing SQL errors
-issue#2908: When URL_PATH is blank, it should assume that it is '/'
-issue#2909: Correct usage of affect vs effect in strings
-issue#2910: Can not show user menu when in portrait mode on mobile devices
-issue#2911: Graph variables are not always encoded to JSON properly resulting in warnings
-issue#2912: Navigation cache can sometimes be corrupted resulting in a non-array value
-issue#2913: When adding new graphs, the type of graph is not remembered
-issue#2917: Action icons next to graphs can sometimes become unselectable due to zoom
-issue#2919: When refreshing menu, selected items are sometimes lost and submenu items can become hidden
1.2.5
-issue#1978: Popup Menus can appear off screen when using Graph Thumbnails
-issue#2282: Installation wizard does not detect RRDtool version correctly
-issue#2524: When editing a tree, Drag and Drop of Devices does not always work as expected
-issue#2573: Associated Graph Template for Data Query can sometime disappear
-issue#2656: GPRINT text_format does not replace Data Query and Host Fields
-issue#2661: Automation does not always calculate network range/subnet correctly
-issue#2663: Some legacy Data Queries can not determine their index order causing broken graphs
-issue#2674: Large strings can sometimes cause language translation can fail
-issue#2719: Automation may sometimes create empty graphs
-issue#2721: When replacing '|input_xxxx|' strings, undefined index can occur
-issue#2722: Calls to _db_replace() are not consistent resulting in warnings
-issue#2723: When replicating to remote pollers, Undefined Variable errors may be seen
-issue#2724: When graphing HRULE items, 'Only Variables should be passed by reference' error may be seen
-issue#2725: When viewing logs in utilities, filenames should be limited the same as clog
-issue#2726: During Automation logging, include the Rule ID that triggers the creation of an item by xmacan
-issue#2732: When using basic authentication, automatically strip any @domain information
-issue#2734: Allow non-english labels to be used on Graph Templates
-issue#2727: When using Polling Hosts Template, warnings can be issued when CMD.PHP is the poller
-issue#2733: When processing SNMP data, space delimited hex strings do not always convert into MAC addresses
-issue#2735: Mouse cursor should show as default pointer if column is not sortable
-issue#2736: When using MySQL 8 or above, 'function' is considered a reserved word unless quoted by xmacan
-issue#2741: Various errors can occur due to undefined or incorrect variable names
-issue#2742: Various errors can occur due to undefined or incorrect variable names
-issue#2743: Attempts to close a tooltip when no tooltip has been set may cause errors
-issue#2744: When changing password, undefined index error can occur if user is not logged in
-issue#2748: If PHP location setting is invalid during install/upgrade, this should be notified on modules page
-issue#2750: When performing multiple sort, highlighting of content occurs
-issue#2751: When editing a Tree, display filter may not allow 'All' option to work
-issue#2752: When running verbose query on device, you are unable to copy text from items
-issue#2753: Unable to copy entire verbose query using clipboard command
-issue#2757: Page Navigation can be subject to XSS injection
-issue#2758: Various sensitive directories are browsable if web server directory browsing is enabled
-issue#2760: Unable to add items into a report
-issue#2762: Creating an aggregate graph can sometimes fail due to unknown RRD tools error
-issue#2766: When modifying Aggregate Templates, changes are not always cascaded to Graph
-issue#2768: Aggregate Graphs may sometimes show the wrong row count
-issue#2770: ItemType is not updated when saving Report Items
-issue#2772: Add tooltip support to html_header() and html_header_checkbox()
-issue#2775: Remote pollers may sometimes fail to replicate data back to main system
-issue#2777: Attempting to edit a non-existent report generates an error
-issue#2778: When rendering graphs, resizing can sometimes occur repeatedly
-issue#2779: On new installations, automation rules for Interface Graphs are broken
-issue#2780: Upgrade database script not actually upgrading Cacti
-issue#2782: When replicating the syslog plugin, the configuration file is ignored causing errors
-issue#2783: When limiting the number of displayed characters, international characters may sometimes display incorrectly
-issue#2784: When removing a device with graphs but no data sources , errors are generated
-issue#2785: When editing a graph rule, warnings incorrectly appear about unsaved changes
-issue#2792: When a checkbox 'friendly name' has a comma, checkbox functionality stops working
-issue#2797: When upgrading from before 1.x, SuperLinks view permissions may not be correct
-issue#2799: Under heavy use of Real Time Graphs, SQL errors may start appearing
-issue#2800: When editing a tree, using a comma in the search field stops search from working
-issue#2802: If a Device lacks ifName, an alternative field is not always found even if available
-issue#2807: When editing a Data Template that has dependant graphs, some attributes should not be modifiable
-issue#2808: When navigating a tree, the layout may unexpectedly move
-issue#2814: When viewing the utilities page, HTML tags may be seen rather than rendered
-issue#2816: When viewing logs, paging does not always working correctly
-issue#2818: Automation can sometimes incorrectly add duplicate devices with the same sysname
-issue#2820: When path is blank, is_resource_writable() will generate 'Uninitialized string offset: -1'
-issue#2821: When the desired locale can not be located, a number format issue may occur
-feature#2728: Update phpseclib to 2.0.17 by DavidLiedke
-feature#2809: Update c3.js & d3.js by DavidLiedke
-feature#2730: Update jstree.js to 3.3.8 by DavidLiedke
-feature#2754: Allow Devices, Graphs and Data Sources to be searched by ID
-feature#2765: When editing a tree, allow cascading selection of available graphics
-feature#2805: Merged plugins are not always upgraded correctly
-feature#2823: Enhance the splice_rrd.php to be able to merge RRDfiles of differing step
1.2.4
-issue#2523: Send A Test Email stops working under PHP 7.3
-issue#2589: Missing RRD file can cause DSSTATS to throw errors
-issue#2590: When installing, chosen language is sometimes lost
-issue#2591: Menu selection does not always match selected page/section
-issue#2592: When viewing an aggregate graph, 'Display graphs from this aggregate' option does always not work
-issue#2593: Unable to migrate aggregate graphs to matching aggregate template
-issue#2598: Creating an aggregate graph without associated template causes RRDtool error
-issue#2599: Creating/Updating an Aggregate Graph to use LINE/STACK's generates invalid SQL statements
-issue#2604: When adding a dataquery, SQL errors can be generated
-issue#2605: When installing, checking database tables can cause errors
-issue#2608: db_update_table() function should not require an engine type or comment
-issue#2609: When updating from earlier than 1.2, timezone column might not exist
-issue#2610: Data Sources troubleshooter generates warning that each() function is deprecated
-issue#2612: When RRDtool fails to initialize, DSStats generates lots of warnings
-issue#2618: ifAdminStatus in snmp_queries/interfaces.xml
-issue#2621: File paths that accept blanks are not allowing blanks
-issue#2622: Various undefined variables generate errors within database.php
-issue#2623: When using form_text_area(), invalid HTML can be generated
-issue#2627: Some filenames can be lost in log file selection list
-issue#2629: When upgrading, ldap library is not loaded properly due to incorrect paths
-issue#2632: Automated Networks are not being properly replicated to additional pollers
-issue#2635: When running automation scans, database connection should be forced to central database
-issue#2638: Support disabling PHP SNMP extension by mhoran
-issue#2645: Some URLs are incorrectly calculated
-issue#2649: Automation not creating graphs when there are custom items
-issue#2650: Several undefined variables are generating warnings
-issue#2662: HRULE objects broken in some cases
-issue#2668: Trailing parentheses are removed from the SNMP system description
-issue#2672: Cacti Install on Windows Fails
-issue#2676: Skin paper plane not working on iPhone XR
-issue#2678: Call to undefined function _() in data_queries.php
-issue#2679: Users with passwords that do not meet complexity requirements are not redirected to the Change Password page
-issue#2680: Remove deprecated $php_errormsg usage
-issue#2689: Increase boost maximum memory limits
-issue#2693: Graph links do not contain URL path causing links to fail
-issue#2698: Avoid duplicated icon in the main.js of all themes
-issue#2699: Login option "Show the page that user pointed their browser to" does not work properly
-issue#2702: sqltable_to_php.php does not always generate valid table data arrays
-issue#2707: Some pages that have permission errors dont raise proper messages
-issue#2712: PHP memory should be unlimited in scripts that need more memory than the default
-issue#2713: SNMP System Description with UTF8 strings properly are not properly parsed
-issue#2718: When links are converted to ajax calls, mailto links should not be included
-issue#2720: When calculating percentiles, the value is incorrect as the steps are not placed in correct order
-issue#2822: When stderr log file is not populated, clog generates 'empty needle' error
-feature#2538: Allow users to change default method of removing data sources when deleting graphs
-feature#2539: Allow users to set the default graph lock status
-feature#2540: Allow users to enable/disable graph tree history
-feature#2646: Allow application of automation rules on CLI by rb83
-feature#2654: New hook to notify plugins of user profile changes ('auth_profile_update_data')
-feature#2664: Add option to purge spikekill backups
-feature#2701: Provide option to continue graphing objects that loose their index
-feature#2704: Device and template cache do not refresh properly
1.2.3
-issue#1063: Tree View does not display the last item correctly under 'Modern' theme
-issue#2282: Install Wizard does not Detect RRDtool Version on Windows
-issue#2430: "New Device" menu item showing as selected incorrect when "Devices" clicked
-issue#2435: Tree View becomes narrower and narrower when expanding/collapsing nodes with long names
-issue#2449: Index incorrectly changed to 1 if the index is alphanumeric when OID/REGEXP: or OIDVALUE/REGEXP:
-issue#2452: Missing 'getSNMPQueries()' function when calling add_data_query.php
-issue#2453: When running add_graphs.php, cannot retrieve list of valid snmp values
-issue#2460: sqltable_to_php.php does not export 'default' value of columns correctly
-issue#2456: When attempting to display actions that can be taken, having no actions caused error
-issue#2457: When creating a graph, undefined function prevents confirmation from appearing
-issue#2459: ss_host_disk.php attempts to return an empty array instead of a string
-issue#2463: Partial Fix: Display zombie data sources without graphs
-issue#2464: When viewing a User's effective permissions, disabled devices should show denied
-issue#2465: Too many groups hide effective permission column when viewing User's effective permissions
-issue#2466: Manual data source creation is broken
-issue#2469: When using Matching Objects filter within Automation Graph Rules, unexpected redirect occurs
-issue#2471: When Creating a new Graph Template, clear the Graph Template permissions cache
-issue#2472: Bad navigation items cause Array to string conversion errors
-issue#2474: REGEXP_SNMP_TRIM does not handle Gauge fields properly
-issue#2475: When resetting filters, multiple sort session variables do not always reset properly
-issue#2476: When using CMD.PHP for polling, device polling time is not updated
-issue#2477: When saving a Data Input Method, Output Field name changes to incorrect value
-issue#2478: When saving a LINEX type Graph Item, the Line Width value is too restrictive
-issue#2479: RPN function select list should be sorted when editing CDEF and VDEF's
-issue#2480: RRDtool versions in Cacti not granular enough
-issue#2482: When upgrading past 1.1.34, upgrade attempts to drop a non-existing primary key
-issue#2491: Data Source Info suggests commands RRDTool can't honor
-issue#2492: When data templates are filtered by profile, data source list does not get same filter applied
-issue#2493: Data Source Info is not separated properly
-issue#2494: User Login History is not fully enabled for translations
-issue#2497: When linking to Graphs, unless both start and end are specified, only defaults are used
-issue#2499: Data Source reapply names does not update name from data query or template.
-issue#2500: Allow Data Source repairs from the Data Source Debug and Data Source Info pages
-issue#2502: Unable to have a min or max value for RRDfile at zero '0'
-issue#2503: The Cacti Statistics Device Template is not include in release
-issue#2509: When checking for correct Unicode, minimum MySQL version is incorrect
-issue#2513: When a plugin INFO file is malformed or missing elements, plugin_load_info_file() should fill missing elements with defaults
-issue#2519: When editing a data query, graph template picker shows poor performance
-issue#2518: Unexpected errors when filtering Data Sources with invalid 'rows' value
-issue#2522: When upgrading from pre-1.0.0, colors were not upgraded properly by Givo29
-issue#2525: Tree branches that includes sites which have valid devices do not appear on Graph Tree
-issue#2527: When importing a package, if Cacti version is below the version which that exported, a clear message should be shown
-issue#2531: When updating color template items, the table name used is incorrect by Givo29
-issue#2532: Ensure Graph ListView table is displayed in line with Management -> Graphs
-issue#2535: Ensure Graph ListView uses same UI logic as Graph Management -> Graphs
-issue#2537: Incorrect title showing when changes are made to Tree
-issue#2543: Poor performance showing a device's graphs on a tree
-issue#2547: RRD values are not being properly trimmed
-issue#2551: When checking MySQL configuration values, consider ON/OFF to be equal to 1/0
-issue#2553: When upgrading from 1.0.0 or below, renaming automation columns can cause issues
-issue#2555: Missing configuration defaults prevent installations/upgrades without showing reason
-issue#2563: When sorting Data Sources, missing index causes unnecessary delays
-issue#2564: Filtering for Orphan Data Sources is unreliable
-issue#2565: Pages with 500+ selectable items in a single able can suffer from poor performance
-issue#2568: When querying for diagnostic data, devices on remote pollers should proxy the request
-issue#2571: External Links do not properly validate user permissions
-issue#2575: Poller errors occur if a file exists that the website cannot read
-issue#2576: Spikekill API does not work when called from plugins
-issue#2578: When importing packages, missing/new resources are not created
-issue#2581: When viewing poller cache, Device SNMP community is not properly escaped
-issue#2583: When JSON module is not installed, Installer does not correctly show missing message
-issue#2584: When user/group permissions are reset, this is not reflected immediately to the end user
-feature#2505: Improve performance of Data Source Statistics
-feature#2515: Allow more than one SNMP port to be specified when adding devices via CLI
-feature: Update phpseclib to version 2.0.15
-feature: Adjust the max table rows based upon value of 'max_input_vars'
1.2.2
-issue#599: Aggregate graph templates assume AVG consolidation function
-issue#2312: Retrieving Device Information appears to fail on Safari
-issue#2317: Unabe to add new records to 'poller_time' table
-issue#2327: Memory exhausted whilst running poller replication
-issue#2334: Some browsers report JavaScript errors when switching to console
-issue#2337: When running an upgrade, the path of the log file is reset
-issue#2339: Certain characters in recipient address can cause email to fail
-issue#2343: Export hooks no longer work due to missing default keyword
-issue#2346: When listing plugin permissions, "Legacy 1.x Plugins" can appear in the wrong cell
-issue#2347: Allow sort output to inject returned data into a specific object
-issue#2350: Unable to Select Data Source for HRULES and COMMENTS that include nth Percentile and Bandwidth
-issue#2352: SNMP description field can sometimes contain mangled data
-issue#2354: When reindexing in Automation, titles are not updated for Graph and Data Source
-issue#2355: Data Sources are sometimes duplicated when Custom Data is specified
-issue#2357: When indexes are incorrect, poller should log more information
-issue#2359: When upgrading, "Install/Upgrade" privilege may have been previously lost
-issue#2360: When retrieving database / table / column information, schema name is not always applied
-issue#2362: No way to default an interface speed when ifSpeed and ifHighSpeed come back as zero
-issue#2365: When editing Aggregate Graphs, orphaned items were not always removed
-issue#2372: Data Query reindexing leads gaps in Graphs
-issue#2376: Manually adding a device discovered by Automation causes errors to be logged
-issue#2380: Devices may experience constant reindexing
-issue#2384: When authentication method is set to None, change to Builtin as None has been removed
-issue#2393: When reindexing a device, Graph Automation creates duplicate graphs every time
-issue#2416: SELinux wants APPEND not WRITE permission for Fedora/EPEL (RHEL, Centos)
-issue#2419: Host state time was not correctly calculated
-issue#2426: Reinstate missing plugin hooks for 'custom_logout_message' and 'custom_denied'
-issue#2431: Default value for 'Mail Method' (settings_how) is incorrect resulting in errors
-issue#2432: Undefined variable warnings when updating RRD data
-issue#2451: Drag and drop does not always function correctly
-feature: Update JavaScript library c3.js to version 0.6.12
-feature: Update phpseclib to version 2.0.14
-feature: Update PHPMailer to version 6.0.7
-feature: Update JavaScript library d3.js to version 5.9.1
1.2.1
-issue#2259: Unable to View Aggregate Graphs
-issue#2267: Remove unnecessary includes in aggregate template code
-issue#2270: Realtime Graphs consuming too much memory
-issue#2272: Site Tree Branches not showing Graphs
-issue#2273: Error when saving changes to Data Collectors
-issue#2279: SQL Errors in add_graphs.php
-issue#2280: SQL Errors in snmpagent cache table inserts
-issue#2281: Database audit cli giving incorrect results
-issue#2285: Allow HRULEs for bandwith and ptile
-issue#2292: Allow Realtime to use 1 second data collection
-issue#2298: Ambiguous Toggle Switches in Sunrise Theme
-issue#2303: Problem with "Notify Primary Admin of Issues" function
-issue#2304: Installation progress stays at 0%
-issue#2305: BOOST PROGERR: ERRNO:'8'
-issue#2311: Unable to update PHP location during installation due to incorrect CLI environment
-issue#2319: Primary admin account not always given access to a plugin when that plugin is enabled
-issue#2321: Date separator not being used properly for graphs
-issue#2322: Modifying plugin realm registration files and description not supported
-issue: Installer does not identify when shell_exec()/exec() are disabled
-issue: Removing a Device or Graph Template can not be seen till next login
-issue: Visual issues with custom data when using paper-plane theme
-issue: Undefined function errors attempting to sync device templates
-issue: Plugin dependency handling inconsistant
-issue: Editing a report shows incorrect graphs from dropdown
1.2.0
-feature: Add a Timeout setting for Remote Agent calls
-feature: Add Graphs and Data Sources hyperlinks on Device page
-feature: Add One Minute Sampling to the default Data Source Profiles
-feature: Add support for DDERIVE and DCOUNTER to Cacti
-feature: Add Timezone support for Remote Data Collectors
-feature: Allow Adding Aggregate Graphs to a Report
-feature: Allow ASCII filepath paths to not be found on settings save
-feature: Allow drill down from Graphs to Data Queries or Templates
-feature: Allow Import/Export to be hookable
-feature: Allow snmpagent to be disabled for very large installs
-feature: Allow Top tabs to be Glyphs or Text or both
-feature: Big Spanish translation update plus massive QA fixes
-feature: Change password page provides visible confirmation of password rules
-feature: Do not allow second data source to be added to an SNMP Get data template
-feature: Don't allow removal of Data Sources from Data Template once its in use
-feature: Inform the primary Cacti administrator of problems by Email
-feature: Make all user settings dynamic and allow resetting to default.
-feature: Make Graph and Data Source suggested naming more efficient
-feature: Make it easy to find Data Query based graphs that have lost indexes
-feature: Make Top Tabs use Ajax Callback
-feature: Make tree editing responive
-feature: New Install/Upgrade user permission to limit access to being able to upgrade
-feature: Provide option to debug width errors where output exceeds column width
-feature: Removed the Authentication Method of 'None'
-feature: Tree automation is now defaulted to on for new install
-feature: Update JavaScript library c3.js to version 0.6.8
-feature: Update JavaScript library Chart.js to 2.7.3
-feature: Update JavaScript library d3.js to version 5.7.0
-feature: Update JavaScript library jquery.js to 3.3.1
-feature: Update JavaScript library jquery-migrate.js to 3.0.1
-feature: Update JavaScript library jquery.tablesorter.js to version 2.30.7
-feature: Update JavaScript library jstree.js to 3.3.7
-feature: Update JavaScript library screenfull.js to 3.3.3
-feature: Update phpmailer to version 6.0.6
-feature: Update phpseclib to version 2.0.13
-feature#289: Allow external nologin access for Realtime Graphs
-feature#553: When display a host, include Aggregated Graphs as well as standard graphs
-feature#614: Allow users to duplicate Data Input Methods
-feature#973: When creating a new user authenticated via LDAP, attempt to retrieve users email and full name
-feature#122: Support a Site Branch Type
-feature#1060: Design Enhancement for Large scale Cacti Implementations
-feature#1142: Add Site dropdown to the Graphs and Data Source pages
-feature#1184: Improve Data Input Methods editability and message handling
-feature#1200: Aggregate Graphs can now include COMMENT
-feature#1282: Email notification for Automation Network discovery process
-feature#1347: Update automation logging to work better
-feature#1395: Ensure messages have each new line keep the same prefix in cacti_log()
-feature#1399: Allow 'requires' to include version against a plugin
-feature#1400: User settings are now dynamic and can be reset (removed) to return to global settings
-feature#1422: Automatically select the next unused data input field when clicking add on data input method
-feature#1505: When displaying a graph, provide breadcrumb link to edit device
-feature#1527: Update Fontawesome from 4.7 to 5.0.10
-feature#1580: Support Drag & Drop for Builtin Report Items
-feature#1581: Allow Mass Adding of Graphs to Reports
-feature#1584: Allow theme selection when installing
-feature#1588: Check that PHP can run a test file
-feature#1593: Allow External links to auto refresh
-feature#1597: Ensure synchronised files have same attributes as originals
-feature#1610: On Unix, redirect error messages to log files when running external scripts
-feature#1628: Allow the User to define an initial Automation Network for discovery when installing
-feature#1670: Improve Graph Management to show type of source for a graph
-feature#1671: When duplicating a Graph Template, properly duplicate Data Query Graph Template Mappings
-feature#1677: Default Tree nodes sorting to be inherited
-feature#1691: On Graph context menu, add a 'Copy graph' option to copy graph image
-feature#1692: Separate option for logging Input Validation issues
-feature#1703: On Graph context menu, text is now multi-lingual
-feature#1708: Allow the User to override global Automation email recipients at the Automation Network level
-feature#1709: Suppress warning from RRDTool when attempting to make updates in the past
-feature#1711: Add support for SSL connections to MySQL
-feature#1731: Prevent loss of changes by warning user about unsaved items
-feature#1734: When displaying a graph, provide more information when error image is displayed (see also #1428)
-feature#1763: Enable automatic refresh for Time Graph View
-feature#1806: Control low level debug routines via config.php (Develoepr Use)
-feature#1819: Provide CLI program to enable graphs to be removed by scripts
-feature#1969: Graph previews can now be linked using a host's external id
-feature#2006: Introduce new Data Source Profile to handle decade long graphs
-feature#2173: Introduce Device and Graph Template Caching to Speed UI
-feature#2228: Add Device ID to Device search field
-issue: Fix issue with display_custom_error_message() causing problem with system error message handling
-issue: Graph List View was not fully responsive
-issue: Move Graph removal function to Graph API
-issue: On the Data Sources page, if there is no filtered Device and a Data Source is edited, device association is lost
-issue: Typo in Dutch translations when an error occurred while downgrading
-issue: Unable to display user profile tabs
-issue: Verify all Fields not working due to Cacti 1.x upgrade error
-issue#186: Cacti does not support jQueryUI 1.12.x
-issue#187: Remove the use of jQuery Migrate plugin
-issue#948: Do not create a new datasource when adding a new Graph for the same device/field
-issue#454: Cacti Re-Index does not resolve index changes properly during re-index
-issue#983: Import Template Preview is misleading
-issue#1097: When copying template user, newly created user should always be enabled to allow logging in
-issue#1097: When copying template user, it should be disable to prevent logging in as template user directly
-issue#1174: When display a tree, disable drag and drop unless in edit mode
-issue#1298: Display fatal error to prevent issues caused when system log is not writable
-issue#1350: When switching an Automation Tree Rule's leaf type, remove invalid Automation Rule Items
-issue#1383: CSRF Timeout does not obey session timeout
-issue#1408: Update SQL / Backtrace to use new clean_up_lines() function
-issue#1414: DSSTATS reports incorrectly that a data source does not exist
-issue#1420: Fix issues found by Debian package builds
-issue#1421: Fix issue when SQL had all bad modes, missing variable warning was generated
-issue#1426: Fix issue where remote poller was not using unique filenames when attempting to verify files
-issue#1437: Plugin install hover message sometimes shows line breaks rather than formatted text
-issue#1454: When using oid_regexp_parse, filter indexes to those that match
-issue#1473: Recovery Date overwritten by subsequent checks
-issue#1494: Unable to Deep Link/Bookmark Trees
-issue#1503: Undefined function clearstatscache in DSSTATS
-issue#1507: When saving graph settings from the graph page, the graph template id should not be included
-issue#1510: New Graphs Undefined Variable $graph_template_name
-issue#1521: Force boost to be enabled when there are Remote Data Collectors
-issue#1528: Saving a device can result in WARNINGS related to string vs array handling
-issue#1529: Allow Aggregate Graphs to Sum Bandwidth and Percentile COMMENTS
-issue#1543: Graph Preview appends header=false too many times
-issue#1553: Poller does not set rrd_step_counter correctly if no steps taken
-issue#1559: CLI Output Issues due to over escaping
-issue#1560: Warning that escapeshellarg() is escaping a null
-issue#1567: Technical support - add notification if Cacti and Spine version is different
-issue#1574: User templates are not correctly being applied
-issue#1589: Installer now checks that the temporary folder is writable
-issue#1590: User Admin generates SQL error if user is not part of any groups
-issue#1601: Aggregate Graphs can not include some classes of COMMENT
-issue#1602: PHP ERROR: Call to undefined function api_data_source_cache_crc_update()
-issue#1604: Failed to connect to remote collector
-issue#1606: Boost debug log not functional
-issue#1607: Boost next run time occurs in the past
-issue#1608: Possible boost race conditions
-issue#1609: Remote pollers update 'stats_poller' on main poller
-issue#1617: Editing a data query results in missing $header variable
-issue#1621: Realtime Popup can cause automatic logout
-issue#1626: httpd-error.log have message about Fontconfig
-issue#1634: Default snmp quick print setting resulting in false poller ASSERTS on some php releases
-issue#1651: Check temporary folder has write access during import
-issue#1655: Correct Cacti to handle new MySQL 8.0 reserved word `system`
-issue#1658: Devices drop down should be filtered by Site
-issue#1660: Reports based upon Tree don't maintain graph order
-issue#1665: Must change password not working for local users when main realm is not local
-issue#1669: Console log header grammar issue
-issue#1674: Threads and Processes values not migrated to Poller table during upgrade
-issue#1676: Allow automation discovery to add the same sysname on different hosts
-issue#1682: Slow Select Statement lib/api_automation.php
-issue#1689: Technical Support's RRDTool version should show detected RRD version
-issue#1690: Report a warning if the default collation is not utf8mb4_unicode_ci
-issue#1700: Mail sent without auth causes errors to appear in logs
-issue#1710: RRDtool create command causes first update to fail
-issue#1721: Console Side Bar not correct on first login
-issue#1723: die() messages should include PHP_EOF for better logging
-issue#1726: Poor page performance editing a Graphs Graph Items
-issue#1746: Poller with no hosts does not exit until timeout is reached
-issue#1761: Graph Management page shows bogus template names
-issue#1783: Browser Back button still does not working
-issue#1796: Import: Fixed handling of references to objects not included in file
-issue#1799: Default User log sort should be date descending
-issue#1810: Correct SQL errors with authentication set to no authentication
-issue#1839: Dummy cosmetic bug on down device selection option
-issue#1841: Data Source Stats table not properly migrated from pre 1.x Cacti plugin
-issue#1849: SNMPAgent not sending traps
-issue#1852: Reports Preview/Mails show no graphs
-issue#1889: Insecure $ENV{ENV} which running setgid
-issue#1901: Upgrade from 0.8.8h fails on external_links statement
-issue#1921: Data Query XML field method 'rewrite_index' does not correctly query for value
-issue#1926: Deselecting items should present warning or disable GO button
-issue#1948: Device Template should warn about need to re-sync
-issue#1953: set_default_action() should warn if more than one action provided
-issue#1973: SpikeKill Menu does not display properly
-issue#1976: Default admin permissions do not allow everything
-issue#1982: Certain hooks should occur within api functions rather than UI functions
-issue#2002: api_plugin_db_table_create should support non-string defaults
-issue#2012: For kernel 3.2+, "Linux - Memory - Free" should grep for "MemAvailable:", not "MemFree:"
-issue#2085: CLOG Regex Parser does not verify registered function exists
-issue#2126: api_device.php generates undefined function poller_push_to_remote_db_connect()
-issue#2127: Unable to save error when duplicating graph
-issue#2135: api_tree_lock() and api_tree_unlock() forcing redirection incorrectly
-issue#2143: export.php Illegal string offset 'method'
-issue#2144: Device Management "Status" column does not sort properly
-issue#2152: When editing a device, should show disable/enable option
-issue#2153: Utilities page issues the wrong hook for tabs
-issue#2163: LDAP functions are not consistent
-issue#2164: Login page does not remember selected realm
-issue#2171: datepicker and timepick translation not available
-issue#2178: Header/Footer included more than once
-issue#2182: Graph View missing 'html_graph_template_multiselect()' function
-issue#2184: html_host_filter() does not handle host_id consequently
-issue#2186: Boost generates invalid SQL during on demand update
-issue#2188: SNMP timeout errors are being duplicated
-issue#2191: i18n_themes is not properly primed in global_arrays.php
-issue#2202: Can't create more than one graph with add_graphs.php from one template
-issue#2207: Removing Graph Template does not Remove Data Query Associations
-issue#2217: cmd.php not handling quoted snmp values properly
-issue#2240: SNMP system Data Input Methods should not be modified on import
-issue#2241: Spike removal not functional due to Debian packaging
-security#1072: Prevent exploitation of Data Input Methods to escalate privileges (CVE-2009-4112)
-security#1882: Bypass output validation in select cases
-security#2212: Stored XSS in "Website Hostname" field
-security#2213: Stored XSS in "Website Hostname" field - Devices
-security#2214: Stored XSS in "Vertical Label" field - Graph
-security#2215: Stored XSS in "Name" field - Color
1.1.38
-issue#1501: cmd.php poller not stripping alpha from snmp get values
-issue#1515: Special characters not rendered properly in settings
-issue#1530: Inconsistent behaviour handling blank Field Name/Value when editing data query suggested values
-issue#1537: Numeric validation not ignoring blank elements
1.1.37
-issue#274: Allow Realtime Graph Popup Mode
-issue#1405: When Data Query columns are wide, they cause rendering issues
-issue#1414: DSSTATS reports incorrectly that a data source does not exist
-issue#1419: Filtering log results in errors in the log
-issue#1420: PHP NOTICE editing cdef and vdef items
-issue#1421: CLI upgrade_database.php PHP Warning on execution
-issue#1426: Remote poller erroring attempting to verify files
-issue#1432: Delete confirmation does not disappear
-issue#1443: Partial Save warnings under Settings -> Mail/Reporting/DNS
-issue#1447: CLI audit_database.php not detecting database name, and failed to create audit tables when run fresh
-issue#1453: CLI add_graph.php not allowing title to be set
-issue#1456: Increase minimum php version maintaining support for RHEL6
-issue#1457: Path-Based Cross-Site Scripting (XSS) issues
-issue#1458: Error in logs when creating new graphs
-issue#1459: Automation filter not applied correctly
-issue#1461: Setting output_format on input type causes no values to be returned
-issue#1464: Poller stuck in infinitely loop causing excess logging
-issue#1466: No scrollbars in mobile browsers
-issue#1468: Increase max length of host.snmp_sysObjectID column
-issue#1471: Undefined function found in global_languages.php
-issue#1472: Change Device Options - Style needs updating
-issue#1474: Check possibility for creation of temporary tables on install
-issue#1487: Undefined constant in ldap.php
-issue#1483: Create New Graphs - Paw Styling Issue
-issue#1493: Can't create tree branches with '#' sign
-feature#1489: Add ability to use parts of OID as value via regex
-feature: Updated Chinese Simplified translations
-feature: Updated Dutch translations
-feature: JavaScript library Chart.js updated 2.7.2
-feature: Allow snmp formatting functions to detect UTF-8 output
1.1.36
-issue#934: Template names missing in graph management list
-issue#1211: CDEF and VDEF Item Edit do not use correct procedures
-issue#1250: Language support does not support localization properly
-issue#1331: Log Rotation should occur at midnight on system
-issue#1334: Console->Users->(Edit) Permissions checkmark descriptions missing
-issue#1336: Debian test suite reports php error
-issue#1338: Allow automation to be run in debug mode from GUI
-issue#1339: First graph of second page does not render
-issue#1340: Unable to open Time Graph View in new tab
-issue#1348: Toggle context menu of Zoom