Comprehensive 0.8.7h through 1.1.36 ChangeLogs

1.1.36

 
issue#934: Template names missing in graph management list
issue#1211: CDEF and VDEF Item Edit do not use correct procedures
issue#1250: Language support does not support localization properly
issue#1331: Log Rotation should occur at midnight on system
issue#1334: Console->Users->(Edit) Permissions checkmark descriptions missing
issue#1336: Debian test suite reports php error
issue#1338: Allow automation to be run in debug mode from GUI
issue#1339: First graph of second page does not render
issue#1340: Unable to open Time Graph View in new tab
issue#1348: Toggle context menu of Zoom
issue#1351: Errorimage does not render on systems without GD ttf support
issue#1353: New installation without config.php silently throws errors
issue#1355: Single tree can have the order of the tree changed
issue#1357: Data Profile disable fields shown temporarily as editable
issue#1359: Settings page generates error for removed plugin tab
issue#1362: DSStats Avg/Peak function broken due to change in RRDtool processing
issue#1365: Plugin Management enforce folder name
issue#1366: Improve error/info message display
issue#1380: Potential failure when updating script type
issue#1384: When installing/enabling plugins, current user and admin should get permissions
issue#1386: form_selectable_cell() ignores width if no style_or_class is passed
issue#1389: Poller is including plugins that are not installed
issue#1390: Plugin uninstall should prompt user before removal
issue#1396: Prevent installation/uninstallation of a plugin if dependency is present
issue#1397: Distinguish between plugin tabs and core tabs in settings
issue: Allow dynamic setting of from name when emailing
issue: Data Query Cache filter layout more consistent
issue: Minor plugin permissions format change
issue: Implementation of error handling causes errors creating New Graphs
issue: Deprecated DDStats setting removed
issue: Graph context menu items are now context aware
issue: Validate spine path before allowing enabling of spine
issue: Errored settings fields now highlighted correctly on error
issue: Add the Default Device to the Default Tree at install time
issue: Secpass password verification error message unuseful
feature: Searching of SNMP Index in View Data Query Cache now works
feature: Presets now have default device Template
feature: JavaScript library c3.js updated (v0.4.21) / jstree.js (3.3.5)
feature: PHPSecLib updated 2.0.10
feature: Updated Dutch translations

1.1.35

 
issue#114: *all_max_peak* percentile calculations incorrect
issue#430: Pressing Back often fails to work as expected
issue#564: Fail to move items in graph template as desired
issue#981: Hyperlinks for Data Profile stats
issue#993: Realtime not working on remote pollers for certain data query
issue#1244: Errors importing templates with deprecated hashes
issue#1251: Allow zoom out through mouse mmiddle button
issue#1281: Max OIDs setting is for bulkget and not bulkwalk operations
issue#1286: Correct CHUNKED_ENCODING error when retrieving graph with some browsers
issue#1306: Graphs are not always refreshed properly
issue#1309: Provide meaningful authentication errors in graph_json.php and graph_image.php
issue#1310: Return button fails on change password page
issue#1315: Realtime not working on local data collector
issue#1316: CDEF Item Value dialog does not update creating items
issue#1319: Front end + remote poller - connection timeout issue
issue#1321: Use RRDtool pipelining functions within DSSTATS
issue#1323: Enhance form layout for readability
issue#1329: Spelling errors in automation_networks.php
issue: Validate regular expressions if specified in add_graphs.php
issue: Ensure compression levels are consistent when importing package

1.1.34

issue#1040: PHP version 7.2 - ERROR PHP WARNING: sizeof()
issue#1195: Improved Javascript error message handling
issue#1245: Unable to reorder graph name suggested values
issue#1256: Error reporting of custom errors not displayed correctly
issue#1257: Boost excessively logging updates
issue#1258: cacti.sql updated to match expected schema
issue#1260: Tab images fail to render due to TrueType support in PHP GD Module
issue#1261: Automatic logout timeout does not apply to web basic authenication
issue#1263: CLI utility to validate database schema
issue#1266: Inconsistent usage graphWrapper CSS causes odd graph zoom behavior
issue#1268: Regex filters not working properly
issue#1274: Host CPU script checks value existance to avoid error
issue#1275: SNMP v3 authPriv fails to work
issue#1287: JSON calls return validation error in HTML format
issue#1289: Script Server should output parameter array rather than parameters
issue#1292: Chrome to aggressively caches Javascript files
issue#1293: Correctly identify if command 'snmpbulkwalk' is available
issue#1296: CactiErrorHandler does not ignore PHP suppressed errors
issue#1300: Automation discovery : New devices added by automation discovery have empty SNMP community field
issue#1302: Automatic logout should not be enforced on login page
issue#1304: mib_cache.php file contains unsafe transactions for binary logging
feature: CLI utilily to generate and verify file hashes for installed Cacti files
feature: Logging links back to appropriate areas for troubleshooting
feature: Logging lists filenames in reverse order

1.1.33

issue#1253: Automatically generated RRDtool DEF names in Cacti 1.1.32 break existing Graph Templates

1.1.32

issue#969: Undefined index: color_id / task_item when viewing graphs
issue#1166: Fix typo of 'locale' in global_languages.php
issue#1222: Graphs with large number of items causes RRDTool to error
issue#1230: PHP Fatal error: Call to undefined function get_max_tree_sequence()
issue#1238: SNMP functions fail to handle "Invalid object identifier" error
issue#1239: Browser console error in layout.js
issue#1240: Page layout issues caused by library update
issue#1246: Make SNMP Error return more info
issue: Missing or corrupted theme files can corrupt user settings
issue: Theme may not change until next login
issue: Tree edit Tree/Device/Graph drag areas incorrect
issue: Make callback error handling compatible with jQuery 3.x
issue: Ensure the snmp_error is cleared before every call
issue: Indicate unknown error when RRDTool returns no error message
feature: Update Javascript library: js.storage.js, d3.js, jquery.js, jquery.tablednd.js, jquery.timepicker.js

1.1.31

issue#629: Site reload after delete the last letter in the searchbar
issue#1022: Discovery network stuck in "running" state does not return results
issue#1164: Version compare function fails on major/minor only versions
issue#1166: Invalid New User default language selection
issue#1175: Automatic logout inconsistent redirect
issue#1179: Warn during installation if installing moving to older version
issue#1183: Automatically detect missing Theme and use alternate
issue#1185: Layout with Graphs having large number of data columns
issue#1189: Allow ability to sort tree list by name asc/desc
issue#1190: Enabling, Disabling, Uninstalling plugin, you should page refresh
issue#1191: Tree sequences were not set or checked
issue#1197: Add more collection intervals to Data Source Profiles
issue#1206: Display issue with internationalization number format
issue#1210: CDEF and VDEF Items can not be properly edited
issue#1212: Navigation breadcrumbs fail to handle External links correctly
issue#1213: PHPMailer trying TLS despite SMTPSecure setting
issue#1215: Show version when installation prompts for license
issue#1217: Add ability to view/edit Input/Query when editing Data Template
issue: Named colors fail to import on install or upgrade
issue: Drag and Drop issues on multiple pages could corrupt sequencing
feature: Enhance filter to permit more glyphs for table headers
feature: Add a page refresh dropdown to the Automation Networks
feature: Enhanced SNMP v3 input forms
feature: Allow Trees to be rearranged using Drag and Drop
feature: Trap GUI callback errors and present error message

1.1.30

issue#1155: Non-secure mail setting not functional due to changes in phpmailer
issue#1157: Resolve issue with branch permission api
issue#1158: Change CLOG to use regex replacement so line details are not mangled
issue#1161: Graph View regex's are not preserved during automatic page refresh
issue#1162: Error messages are not display when editing a user
issue#1166: Default language was not correctly set when editing a user
issue: basename function undefined during upgrade to 1.0.x
issue: Storage API and translations required for Change password function
issue: ALTER IGNORE still throws an error when attempting to drop the primary key
issue: Data Source profile form API generates error when system is half upgraded
issue: Resolve issue with importing packages
feature: Update package versions for Cacti version 1.1.29

1.1.29

issue#871: Allow Nth Percentile and Bandwidth Summation to respect 'Base Value' in template
issue#965: Duplicate error message and incorrect error code when using LDAP authentication
issue#1084: Graph Tree Branch not properly populating when editing report item
issue#1104: Datetime formatting in developer debug mode incorrect
issue#1106: Template Filters has empty row
issue#1109: URL used in redirection when referrer already has parameters in it
issue#1110: Add CPU Total to 'SNMP - Get Processor Information'
issue#1111: PHP NOTICE when using LDAP authenication
issue#1116: Filters not allowing "None" or "All" when editing report item
issue#1119: Reduced amount of data fetched for CPU usage to just the data used
issue#1121: Bandwidth summation not using correct locale
issue#1122: Fix issue with local login / potential password problems
issue#1128: Resolve php warning when raising messages
issue#1130: Fix logging level issue where logs of same level as setting where not logged
issue#1131: Make upgrade_database.php use same version compare as /install/ system
issue#1133: Fix issues with variable name and debug log
issue#1141: When viewing graphs from list view, pagination causes list view filter to be cleared
issue#1143: ss_host_cpu.php - Division by zero / Invalid Return Value
issue#1146: Installation now checks URI path matchs with configuration option URL_PATH
issue: Updated Graph pagenation and filter reset
issue: Resolve issues with cacti_version_compare() processing
issue: Zoom context menu stays open after zoom out actions
issue: Paginator object was not always translated

1.1.28

issue#958: User Group Tree permissions not calculated fully
issue#959: Issue viewing email reports due to email client decoding problems
issue#992: RRDfile naming issues that result from random sorting during export
issue#1012: Issue where disabled devices will not appear in Tree editor
issue#1044: Handle invalid exclusion regex properly when viewing the log
issue#1045: Issue with multiple pages and confirmation dialogs
issue#1048: Problem importing vdefs from templates
issue#1053: Remote Data Collector now works with https and self signed certificates
issue#1055: Errors in data source statistics inserts when invalid output is encountered
issue#1057: CVE-2017-16641 - Potential vulnerability in RRDtool functions
issue#1058: ICMP Ping to and IPv6 address fails to gather data for ping latency
issue#1059: Aggregate item filter should use regular expressions to avoid SQL errors due to flawed filter logic
issue#1064: When a Device Template is removed, Automation Templates for that Device Template remain
issue#1066: CVE-2017-16660 in remote_agent.php logging function
issue#1066: CVE-2017-16661 in view log file
issue#1071: CVE-2017-16785 in global_session.php Reflection XSS
issue#1074: Boost records get stuck in archive
issue#1079: Undefined index in lib/snmpagent.php
issue#1085: Undefined function html_log_input_error
issue#1086: Rerun data queries in automation process has no effect
issue#1087: cli/add_device.php --proxy option does not work with non-snmp devices
issue#1088: Set timeout for remote data collector context
issue: Minor performance increase in boost processing
issue: Poller output not empty not processed correctly on Log tab
feature: Timeout to the remote agent for realtime graphs
feature: Updated Dutch translations
feature: Database update adding additional indexes for increased performance
feature: Updated PHPMailer to version 5.2.26
feature: Updated phpseclib to version 2.0.7

1.1.27

issue#1033: Issues inserting into dsstats table due to legacy data
issue#1039: Using html_escape still double escapes. Use strip_tags instead
issue#1040: Resolving compatibility issue with PHP7.2

1.1.26

issue#841: --input-fields variable not working with add_graphs.php cli
issue#986: Resolve minor appearance problem on Modern theme
issue#989: Resolve issue with data input method commands loosing spaces on import
issue#1000: add_graphs.php not recognizing input fields
issue#1003: Reversing resolution to Issue#995 due to adverse impact to polling times
issue#1008: Remove developer debug warning about thumbnail validation
issue#1009: Resolving minor issue with cmd_realtime.php and a changing hostname
issue#1010: CVE-2017-15194 - Path-Based Cross-Site Scripting (XSS)
issue#1027: Confirm that the PHP date.timezone setting is properly set during install
issue: Fixed database session handling for PHP 7.1
issue: Fixed some missing i18n
issue: Fixed typo's
feature: Updated Dutch translations
feature: Schema changes; Examined queries without key usage and added/changed some keys
feature: Some small improvements

1.1.25

issue#966: Email still using SMTP security even though set to none
issue#995: Redirecting exec_background() to dev null breaks some functions
issue#998: Allow removal of external data template and prevent their creation
issue: Remove spikes uses wrong variance value from WebGUI
issue: Changing filters on log page does not reset to first page
issue: Allow manual creation of external data sources once again
feature: Updated Dutch translations

1.1.24

issue#932: Zoom positioning breaks when you scroll the graph page
issue#970: Remote Data Collector Cache Synchronization missing plugin sub-directories
issue#980: Resolve issue where a new tree branches refreshs before you have a chance to name it
issue#982: Data Source Profile size information not showing properly
issue: Long sysDescriptions on automation page cause columns to be hidden
issue: Resolve visual issues in Classic theme
feature: Allow Resynchronization of Poller Resource Cache

1.1.23

issue#963: SQL Errors with snmpagent and MariaDB 10.2
issue#964: SQL Mode optimization failing in 1.1.22

1.1.22

issue#950: Automation - New graph rule looses name on change
issue#952: CSV Export not rendering chinese characters correctly (Second attempt)
issue#955: Validation error trying to view graph debug syntax
issue: MySQL/MariaDB database sql_mode NO_AUTO_VALUE_ON_ZERO corrupts Cacti database
issue: When creating a data source, the data source profile does not default to the system default
feature: Enhance table filters to support new Cycle plugin
feature: Updated Dutch Translations

1.1.21

issue#938: Problems upgrading to 1.1.20 with one table alter statement
issue#952: CSV Export not rendering chinese characters correctly
issue: Minor alignment issue on tables

1.1.20

issue#920: Issue with scrollbars after update to 1.1.19 related to #902
issue#921: Tree Mode no longer expands to accomodate full tree item names
issue#922: When using LDAP domains some setings are not passed correctly to the Cacti LDAP library
issue#923: Warninga in cacti.log are displayed incorrectly
issue#926: Update Utilities page to provide more information on rebuilding poller cache
issue#927: Minor schema change to support XtraDB Cluster
issue#929: Overlapping frames on certain themes
issue#931: Aggregate graphs missing from list view
issue#933: Aggregate graphs page counter off
issue#935: Support utf8 printable in data query inserts
issue#936: TimeZone query failure undefined function
issue: Taking actions on users does not use callbacks
issue: Undefined constant in lib/snmp.php on RHEL7
issue: Human readable socket errno's not defined
issue: Audit of ping methods tcp, udp, and icmp ping. IPv6 will still not work till php 5.5.4

1.1.19

issue#810: Scripts in packages don't match distribution
issue#919: Unable to upgrade to 1.1.18
issue: Update documentation for minimum PHP 5.4

1.1.18

issue#902: Correcting some issues with Console and External Links
issue#903: Upgrade pace.js to v0.7.8
issue#904: Allow user to hide Graphs from disabled Devices
issue#906: Create a separate Realm for Realtime Graphs
issue#907: XSS issue in spikekill.php
issue#910: Boost last run duration generates an error on new install
issue#914: Unable to purge Cacti logfile from System Utilities
issue#915: Non-numeric data in ss_host_disk.php
issue#916: Resolve display of errors when encountering ldap issues
issue#918: Minor XSS and create generalized escape function
issue: Resolve JavaScript errors on Login page
issue: Resolve JavaScript errors on Permission Denied pages
issue: Graphs tab would appear in non-classic even if you did not have permissions
feature: Updated dutch translations

1.1.17

issue#450: List View to Preview shows no results
issue#486: Export Device table results to CSV
issue#544: Allow Log Rotation to be other than Daily
issue#673: Downtime/Recovery time/date is set incorrectly
issue#819: Customized timespans for graphs
issue#888: Rebuilding Poller Cache when External data sources are present results in false positive warnings in the log
issue#891: Database.php unable to connect to MySQL when using port different than 3306
issue#893: Warning messages when duplicating CDEF objects
issue#897: Due to browser use of special key, deprecate ctrl-shift-x for clearing filter
issue#898: Issue with tcp and udp ping due to file description allocation changes
issue: Unable use ipv6 ip addresses for snmp ping in the Cacti GUI
issue: Update language of the Rebuild Poller Cache menu pick
issue: Broken design for input controls with Sunrise theme
issue: Timespan switching not switching to Custom in Preview Mode
issue: Log rotation would not occur under certain conditions. Provide more control over log functions
issue: Purge log file always purged the cacti.log, not the selected log
issue: Unable to view graphs for errored data sources from Cacti log

1.1.16

issue#865: Escape Data Query arguments to prevent issues with special characters
issue#872: Can't add device items to graphs generated with no device and no template
issue#875: When modifying Realm permissions, realms that are listed multiple times don't stay in sync
issue#877: Improving resolution to issue#847 and one additional vulnerability
issue#878: Ambiguous language in purge log function
issue#879: SQL Error when adding a report item to a report
issue#880: Device drop down is limited to 20 devices and lacks a scroll bar
issue#885: Graph generated with no device and no graph template forgets device definitions
issue#886: Unable to export templates other than Device templates
issue: Address additional corner cases around get_order_string usage
issue: Data Queries sharing a Data Source can result in poller output table not empty errors
issue: Fix Sunrise theme to properly theme multiselect widgets
issue: Increase height of multiselects so that more options are visible
issue: When a graph is locked, anchor tags are still functional

1.1.15

issue: PHP Fatal Exception on upgrade from 1.1.11 or earlier
feature: Added test to detect install upgrade code problems

1.1.14

issue#849: Unable to select host in Graph Item pick
issue#850: Reporting not allowing Non-templated Graphs
issue#858: Pagination on SNMP Options wrong
issue#860: Network Discovery Subnet Range character limit too small
issue#861: The search filter does not support Cyrillic
issue#862: Automation - When editing Graph Rules, unable to Change Data Query
issue#863: Typo error in auth_login.php for LDAP authentication
issue#867: Cross-site scripting (XSS) vulnerability in auth_profile.php
issue: Link's not showing in Automation Graph and Tree rules on Sunshine theme
issue: Make Templates Export responsive
issue: Don't wrap menu glyphs and menuitems
issue: The function get_order_string() can fail when encountering reserved word columns
issue: Data Query Delete is not using callback
feature: Resize Graphs on Graph page to be responsive
feature: Make import text a hidden field as it is likely seldom used

1.1.13

issue#605: Remove Spikes feature not fully functional
issue#814: Allow 'Save' feature from New Graphs
issue#837: Using the add_device.php CLI script, you can not 'default' the device threads to other than 1
issue#838: CVE-2017-10970: XSS Issue in link.php
issue#839: The Database column name 'rows' is a reserved word in MariaDB 10.2+
issue#845: External links tabs should appear at the end of the tab view
issue#846: Web crawl of Cacti site shows errors in the log
issue#847: CVE-2017-10970: XSS Issue in lib/html_form.php.
issue#853: Go and Clear buttons do not work in all cases on Graph Rules pages
issue: Up/Down arrow titles labeled incorrectly on Tree Management page
issue: Make the default Export Type a Device Template
issue: Fix SNMPagent MIB cache issues
issue: Realtime cache cleanup now only removes rrd and png
issue: When redirected from reports, you can receive a validation error
feature: updated Dutch language

1.1.12

issue#822: Aggregate Graph Items are incorrectly editable
issue#823: Allow Filters to be hidden
issue#834: Add spacing on graphs pages
issue: Uninstalled plugins can not install
issue: Location of filter functions in host.php prevent full responsive filter implementation
feature: Implement first phase of responsive search filters

1.1.11

issue#642: RRA not written or WARNING: Poller Output Table not Empty
issue#779: PHP running out of memory due to date format issues
issue#791: SeLinux causing problems due to recent enhancement of the Cacti log
issue#818: Unable to unselect all SpikeKill templates under settings
issue#831: Unable to add devices from automation devices that don't have a snmpSysname
issue: incorrect version of pace: fix progess bar
issue: date_format(): fix date separator character
issue: host.php: fix itemCount en rowCount when result = null
issue: clog: fix scandir for systems with limited permissions to log directory
issue: clog: fix listing of logfiles
issue: Stop New Graphs filter interface from taking too much space
issue: Pagination of clog is not done via ajax
issue: Unable to dry run spikekill's from Graphs page
issue: Default sort order does not highlight on Aggregate Template page
issue: Correct display issue with Graph Templates when editing Device
issue: External Data Sources show as having poller interval on Data Source page
issue: Allow Selecting 'External' as the Data Source Profile when creating non-templated Data Source
issue: Remove Field Order on Data Input output data as it's not required
issue: Data Templates not using Ajax callbacks to switch Data Sources
issue: Visual issue when creating non-templated Aggregate Graphs
feature: new skin: Sunrise
feature: Provide Non Compatible explanation when a plugin is not compatible
feature: Updated Dutch translations
feature: Allow Graph Templates with multiple flag to be created repeatedly from Graphs New interface
feature: Allow plugins to exclude files and directories from their remote poller synchronization process
feature: Add Device Description to View Poller Cache UI

1.1.10

issue#779: Resolve random apache segfault due to recursion
issue#786: Unable to create second RRA for a Data Source Profile with collection rate less than 5 minutes
issue#789: Unable to Clear Filter due to JavaScrpt name space collision
issue#791: cacti 1.1.9 and clog_webapi.php permission issue
issue#794: SQL Error when creating graphs manually
issue#798: Cosmetic issue when checking checkboxes in Cacti
issue#800: Unchecked loop in lib/html_utility.php causing race condition
issue#802: Issue updating device hostname with SNMP data queries
issue#803: Issues with utf8mb4 introduced via optimization
issue: If the device is down and snmp_sysUpTimeInstance is 0, time in state can be wrong
feature: Updated Dutch translations

1.1.9

issue#788: Fails on PHP Fatal error if LDAP auth enabled

1.1.8

issue#529: Issue on Graph New page with checkbox unselected
issue#552: Minor selectable row checkbox issue
issue#577: Dragging multiple items causes the tree to refresh too early
issue#617: Correct poller timeouts when no devices are associated with active data collector
issue#706: Classic external link template images missing
issue#726: Undefined variable in upgrade script
issue#728: Resolve issues with jQueryUI empty dialogs
issue#731: Add class to radio button labels to correct display issue
issue#736: Sequence numbers not visible when editing templates using modern theme
issue#739: Graph Titles missing on aggregate graphs
issue#740: Spacer manipulation broken after update to responsive forms
issue#741: Errors in dsstats with very large RRDfiles with more than 60 data sources
issue#748: Search results are not cleared on Aggregates
issue#754: Default Language for user and system are not set on new installation
issue#755: RRDtool Graph Watermark is incorrect
issue#756: Resolving some translation issues
issue#763: Template Export not functional
issue#765: Validation error when viewing Utility View
issue#771: Editing a report renders no options after creation
issue#780: Preview always shows thumbnails in reports interface
issue: Hide Aggregate system cdefs when editing graphs and graph templates
issue: Updating Utility View zoom was not updating table data
feature#723: Convert Data Source dropdown to autocomplete when editing standalone graphs
feature#735: Allow color selection in graphs and templates to be autocomplete
feature#753: Preliminary support for RRDtool 1.7.
feature: Add function to obtain the current execution user
feature: Implement Site timezones as autocomplete for performance
feature: For themes other than classic, make color id selection autocomplete
feature: CLOG timestamp is now formatted as defined in settings
feature: CLOG can show loginformation from rotated logfiles

1.1.7

issue#470: Enhance Cacti's SNMP function and Data Query XML, add hex|string|guess
issue#653: Devices with empty sysNames are not added to discovered devices
issue#655: Data source not displaying device name
issue#658: Scheduled Reports (type "tree") not working
issue#662: Sending test Email should optionally bypass ping
issue#667: In Classic theme initial view of Tree view broken
issue#669: Invalid SQL Messages when upgrading to Cacti 1.0.5
issue#670: Validation error when you do "Change Graph Template" in Cacti
issue#672: Cacti unable to enable snmp notification receiver mibs
issue#680: Sort order in Time Graph View
issue#687: Cacti DB access not compatible with PHP 7
issue#696: Multiple issues with snmpagent notification UI
issue#699: Add custom error handler for ping functions
issue#704: Fix GUI issues for Graphs not belonging to a device
issue#707: Back button not working
issue#708: Issues finding lib/snmp.php in host disk functions
issue#712: Change Graph Template dropdown invalid
issue#717: Allow ajax callbacks when adding non-templated graph items
issue: Reports were not using Cacti's permission system for checking access
issue: User Admin page reported wrong permissions at Tree level missing some i18n as well
issue: Short data_name can cause data collection issues
feature: Updated Dutch language
feature: Updating PHPMailer to 5.2.23
feature: Support input-output Data Query types
feature: Introduce new get_cacti_version() to reduce database calls on pages

1.1.6

issue#620: The table poller_data_template_field_mappings can get out of sync when manipulating data templates
issue#622: Can not connect to MySQL over a socket
issue#628: Cacti upgrade process is complex and error pront for developers
issue#635: Error when saving change to data template
issue#637: When displaying tree graphs, use the same layout as preview mode
issue#646: When a plugin is disabled during page operations, warnings can appear
issue#651: Unable to view cacti log (because of allowed memory size exhausted)
issue#657: Error in log when host is down, using icmp and using cmd.php on FreeBSD
issue: List for creating a Graph type shows already added Graph Templates
issue: Fix and undefined variable on data source page when first creating a manual data source
issue: Remove tabindex and other non-required manual aria controls from pages
issue: Table type and column type in poller_output table wrong
issue: FILTER_VALIDATE_MAC not defined on PHP less than 5.5
issue: When changing your language Cacti would not do a full page refresh
feature#106: Paginated CLOG and log administration
feature: Dutch translations
feature: Responsive Graphs page
feature: Convert forms from table based to div based for responsive design
feature: Better support for phones and tablets
feature: Simplified installation code to facilitate easier release cycle
feature: Updating Tablesorter to v2.28.9, adding widgets and pager

1.1.5

issue#580: Data collection warnings when using cmd.php
issue#592: Incorrectly formatted HTML
issue#606: Replace in data input methods
issue#607: Allow draw_menu to specify multiple actions for the same URL
issue#608: Spaces adjacent to double quotes are eliminated during data input method import
issue#609: Honor the column setting in graph tree view mode
issue#610: Change Graph Template action not available
issue#611: Cacti Installation Wizard - Spine page incorrect on Windows
issue#612: Uncaught Error: Call to a member function row() on a string
issue#613: Network Automation, now requires a site or your are unable to save rules
issue#615: Data Input field length too short for longer scripts
issue#619: Export logging option in settings no longer used

1.1.4

issue#524: Reporting not working when Tree branch is device
issue#560: Add 'Duplicate' and 'Convert to Graph Template' back to Graph Management page for Advanced mode
issue#573: Missing Graph Template dropdown items
issue#575: Very large hex strings result in scientific notation that RRDtool rejects
issue#579: Problems logging in using nginx web server
issue#581: session_start() warnings when manually sending reports
issue#584: Issues reporting memory recommendation on utilities page
issue#586: Overrunning pollers can cause system load spikes
issue#587: Data Collector setting under Network Discovery is not being used
issue#588: Devices with blank sysDescr are added to the first Device Template in error
issue#589: Automation discovery does not allow site association
issue#590: Unable to create a plugin based menu
issue#591: Row selection in Device Automation Templates not sane with drag-n-drop enabled
issue#601: Resolving some translation issues
issue#604: Unexpected backtrace on regular expression filters
issue#605: Remove Spikes non-numeric data causes warnings
issue: Ping email does not use a from email address
issue: Automation does not recognize default size or poller
issue: Unable to drag-n-drop on automation templates pages when enabled
issue: Fixed number of hosts in poller stats for first poller
issue: Fixed screenwidth issue in tab PHP-Info of Utilities module
issue: Recovery poller could get stuck in some situations
issue: Fix JavaScript errors when managing Aggregate Graphs
feature: Reorganize defaults to place more on device defaults page
feature: Update jQuery tableDnD to version 0.9
feature: More tolerant of empty PHP_SELF found with some web servers

1.1.3

issue#515: Unable to import color CSV file
issue#519: In non-classic themes its not possible to remove Cacti log or reporting tabs
issue#520: SQL error in graph automation
issue#521: Cacti allows removal of Data Query Graph Template associations when they are in use
issue#525: LAST GPRINT type not rendered correctly due to lack of escaping
issue#530: Undefined function get_vdef in lib/rrd.php
issue#531: Issues with TextAlign and Tick graph items
issue#532: Unreliable scroll height causes issues in Chrome
issue#533: User settings not cleared after saving profile
issue#534: Automation issue with AS clause
issue#538: Unable to rename tree folder
issue#541: Issues with mobile graph viewing
issue#555: DSStats SQL insert errors due to data collection issues
issue#563: Division by zero in removespikes.php
issue: Fixed rendering issues with HRULE's on graphs
issue: Update jsTree to 3.3.4 version
feature: Improved responsiveness UI tables, filters, and menus

1.1.2

issue#492: Error while adding non data query (cg) graphs
issue#494: CLI error while importing template
issue#499: SQL error in graph automation resulting in no graphs on tree
issue#500: Generic SNMP device package damaged - Unix Ping Host
issue#505: Log rotation does not work in some cases
issue#506: Undefined index: cactiStatsDeviceFailedPolls
issue#507: Nextwork discovery 'export' produces no results
issue#509: Minor bug with device ownership selection
feature: Add new legend type that includes Current/Average/Minimum/Maximum
feature: Update d3.js to latest version 4.7.4

1.1.1

issue#457: Continued LDAP issues with initial user creation
issue#461: The function escapeshell arg not appropriate on Windows
issue#462: LDAP authorization issues: group membership check broken for 'Group Member Type' = 'Username'
issue#464: Change default batch spike removal limits for standard deviation and variance
issue#465: Less than sign inside items and labels of graph break graph
issue#466: Call to member function row() on a non-object in lib/snmpagent.php
issue#467: Reduce the number of queries in log function
issue#472: Schema changes to improve performance
issue#485: When editing a device, the ping status was not always returned
issue: Back button issues due to syntax problems in JavaScript
issue: Zoom periodically would loose it's crosshairs after zooming
issue: Zoom would zoom out into the future even when disabled
issue: Fixing lite corruption in graph_templates_item table
feature: Make SpikeKill options more consistent
feature#459: Add variable date time option to report mail subject
feature#460: Add external_id to host variables
feature#469: Change re-index method of Data Query from Device edit
feature: Support generalized date format approach in the GUI
feature: Use localStorage over a Cookie for Zoom setting storage
feature: Fully implement 'Remove Orphans' from Package import process

1.1.0

issue#337: Generic SNMP OID Graph Template damanged
issue#338: Extremely slow new graph/DS creation
issue#353: Broadcast & Multicast Packet counters missing
issue#376: Structured RRD path permission issues
issue#389: Manual template based graph creation not working
issue#407: The RRDfile does not exist message is misleading
issue#410: Select character data was interpreted as hex by cacti_snmp_walk()
issue#422: additional issues with LDAP authentication
issue#424: Automation does not discover devices w/o resolvable hostnames
issue#427: undefined index TotalVisibleMemorySize on FreeBSD
issue#432: SpikeKill menu wonky on Paw Theme
issue#434: password_verify not compatible in php5.4-
issue#435: urlPath missing from paw theme links
issue#436: Restricted user does not see graphs in tree view
issue#443: Allow remote_agent.php through a NAT
issue#446: No local admin when using multiple LDAP configuration
issue#447: Creating another non data query graph from same template reuses first data source
issue#449: exec_poll_php does not flush pipes when using script server
issue#450: Graph list view - No Graphs Found
issue: Improve email test exception errors and change default timeout to 10 seconds
issue: When on links page, breadcrumbs would become corrupted
issue: When upgrading from any version of Cacti to 1.0.5, SQL's relative to poller_reindex might appear
issue: Color page performance poor
issue: The Device dropdown on the Graph View page was unreliable
issue: Aggregate and non-Device Graphs in list view had not Device or Title description
issue: Re-engineer back button design to accomocate ajax and native navigation
issue: Make Graph Template filter wider
issue: Resolve some visual issues in Classic theme
feature: Add page refresh API to make page refreshing in Ajax easier to accomplish
feature: Update fontawesome to version 4.7
feature: Use fontawesome glyphs for menu items
feature: Support multiple column sort in table library
feature: Add glyphs to main Cacti console menu

1.0.6

issue#386: Allow special characters in graph title
issue#414: Install Wizard check path for spine
issue#415: SNMP session handling broken
issue#418: LDAP create user from template not working

1.0.5

issue#296: Poller warning for Non-SNMP device
issue#319: Add default 'High Collection Rate' data source profile to new installs to demonstrate concept of multiple rates
issue#330: Import templates to non-default Data Profile
issue#337: Error when try create new graph - SNMP - Generic OID
issue#342: Infinite loop in poller_automation.php with invalid schedule
issue#343: Device discovery cannot handle dots in device name
issue#344: Unable to upgrade to latest Cacti on FreeBSD
issue#353: Legacy broadcast & multicast packet counters missing in interface.xml
issue#354: Place on tree dashes / ordering is not correct
issue#355: Replace table rows with count when using InnoDB tables
issue#357: If recovery mode runs longer than a polling interval, a second is spawned
issue#358: Sending test e-mail results in warning
issue#360: Issue importing cacti.sql with some charsets
issue#364: Moving graph item causes page render issue
issue#365: ss_host_disk.php and ss_host_cpu.php should use return
issue#367: Upgrade chart.js to version 2.5
issue#368: Issue with device automation ip vs. ip_address
issue#369: Interface bits/second total Bandwidth wrong CDEF
issue#375: Drag and Drop of Devices and Graphs allows dropping onto self
issue#380: Ignores a non-standard SNMP port
issue#382: When using php5.5+ new users unable to change their password
issue#384: graph_view.php backtrace errors
issue#385: Unable to place an aggregate grapn on a subtree
issue#390: Display graphs from this aggregate icon next to graph not displaying
issue#392: cdef.php missing sql where for system cdef's
issue#398: checkbox is not honored when creating tree
issue#399: External link configuration: Order buttons don't work
issue#400: SNMP Engine ID (v3) field too short
issue#401: Graphs -> Apply Automation Rules fails
issue#404: Success even when test mail fails
issue#406: HRULE text format special characters not escaped
issue#408: Suppress SNMP units suffix from cacti_snmp_get() output
issue: Improve is_ipaddress functions
issue: Drag & drop showing when disabled on page automation_templates.php
issue: Output messages displayed incorrectly in automation_templates.php and automation_snmp.php
issue: Importing template from old Cacti would not show data templates
issue: Handle snmp error exceptions better
issue: Update Apache .htaccess files to support multiple version
issue: When executing a full sync, if the table structured has changed, recreate the remote table
issue: Multiple domains not working as expected
feature#197: Add external_id to Cacti for linking Cacti to other monitoring systems
feature#332: Support copy user groups
feature: Log proper IP address if logging in behind a NAT
feature: New qquery parsing rules: VALUE/TEST, VALUE/TABLE, VALUE/HEX2IP

1.0.4

feature: Javascript: make menu movement smooth and use localStorage
feature: Added cacti_snmp_get_raw() for plugin developers
issue#288: Function cacti_snmp_get bad handling of wierd value into snmp_value
issue#298: Graph generation issue with SNMP - Bits/Sec + Total Bandwith
issue#301: Unresolvable DNS hostname causing backtraces
issue#302: spikekill memory leak
issue#303: Error when creating tree items with "&" in the name
issue#307: Aggregate graph gives CMDPHP errors
issue#308: UI resize issue
issue#309: Show "Save Successful" notification permanently
issue#311: Graph thumbnail settings in profile setting does not work
issue#320: Users can not change their own password
issue#324: Aggregate template graph template JavaScript error
issue#352: Add configurable auto-logout and page-reload options
issue#329: Customize the favicon
issue#334: primary key on poller output boost table not efficient/not being used correctly
issue: Fixed issues with Dark theme
issue: Fixed issues with Paw theme
issue: Fix timespan calculation
issue: Added misplaced join condition when generating RRDTool graphs
issue: Fix the selection of timestan based on local_graph_id and rra_id
issue: Correct error in discovery not adding devices
issue: Action message did not always display
issue: fix regex to use Domains like www.t-online.de
issue: Properly align Order columns.
issue: address renaming issues with tree items.
issue: Add device snmp --version is ambiguous
issue: SNMP Availability failed to report down devices - This only was occuring for cmd.php collector.
issue: i18n remove embedded HTML syntax
issue: Wrap menu items to avoid scrolling

1.0.3

issue#297: Upgrade 0.8.8h to 1.0.0 fails to create poller_output_boost table
issue: Added missing template import hash for 1.0.2

1.0.2

issue#278: Correct Boost Status display issue
issue#275: Permission View issue and Device Dropdown when in Classic Theme
issue#270: Major Mib Cache corruption. Rebuild your MIB Cache after upgrading
issue: Resolve Cacti logo on Graphs page in Classic Theme

1.0.1

feature: SpikeKill allows filling range to last known good value
issue#261: Add IPv4 and IPv6 Specific Counters to interfaces.xml
issue#257: Poller Output Table not Empty WARNING messages in cacti.log
issue#256: New Graph - Add Graph Items Fails (Data Sources shows None)
issue#255: Errors Creating new Graphs - Undefined Index Errors
issue#254: Unable to Properly add Data Source
issue#251: Remote Data Collector stuck on upgrade page
issue#247: Devices missing from tree device list
issue#245: Drag and Drop in Tree Edit Erratic
issue#243: SMTP Ping Failure with not SNMP Authentication
issue#241: Authentication Method: None not functional
issue#240: SQL error when install plugin
issue#238: Duplicate color id's cause error during Upgrade
issue#231: SNMPv3 - PHP ERROR WARNING: Fatal error: Unknown user name in file
issue: Resolving visual issues with row counts.
issue: When deleting Graphs prevent the removal of Data Sources that are still in use
issue: Improve SNMP agent performance through SQL optimizations

Important Security Fixes

CVE-2014-4000 PHP Object Injection Vulnerabilities
CVE-2016-2313 allows remote authenticated users who use web authentication to bypass intended access

1.0.0

feature: Support for remote data collectors
feature: Support Internationalization (i18n) for the main Cacti site, and supported plugins
feature: Data Source Profiles replace RRA settings allowing a single system to have multiple polling intervals
feature: Redesigned Tree page including Drag & Drop functionality
feature: New Graph Permissions system designed to make permissions simple to manage
feature: Add Themes 'Classic', 'Modern', 'Dark', and 'Paw'
feature: Debug Data Sources by comparing them to the Data Template
feature: New special Data Source type to detect the poller interval
feature: Bulk inserts in PHP poller to address latency issues
feature: Optimize data collection through in memory caching giving a 50% reduction in polling times when dealing with large sites
feature: Support RRDtool VDEFs
feature: Support new Graph Items: AREA:STACK, GPRINT:AVERAGE, GPRINT:LAST, GPRINT:MAX, GPRINT:MIN, LINE:STACK, TEXTALIGN, TICK
feature: Support RRDtool features: Right Axis Support, Dynamic Labels, Tab Width, Legend Position, Legend Direction
feature; Resizeable table columns
feature: Deprecated Single Pane Tree View
feature: Role Based Access Control (RBAC)
feature: Support User Group Permissions
feature: Show number of in use Graphs, Data Sources, and Devices for a given Template
feature: Support bulk re-sync of graphs to assigned Graph Template
feature: Bulk Device Settings changes
feature: CDEFs, Colors, GPrint Presets consolidated to Presets menu
feature: Authentication cookies for 'remember me' functionality
feature: Automatic logout after session inactivity
feature: Replace Boost server in favor of RRDtool Proxy
feature: Graph Details include CSV output, zoom, debug, and download links
feature: Graph Export moved to a plugin
feature: User change password functionality
feature: Automation added to core functionality through the merge of the Discovery and AutoM8 plugins
feature: Change interface graphs from 32 bit to 64 bit with ease
feature: Plugins now have hooks in device templates and automation
feature: Allow users to preview template imports to determine if there will be issues from importing
feature: Automatic removal of orphaned graph items when importing newer versions of graph templates
feature: Support for MySQL 5.7
feature: Support for PHP 7.0
feature: Merge Aggregate Plugin - Aggregate graph creation
feature: Merge AutoM8 Plugin - Automation of graph creation
feature: Merge Boost Plugin - Faster polling, result caching, on-demand RRDtool file updates
feature: Merge CLog Plugin - View Cacti logs
feature: Merge Discovery Plugin - Device discovery
feature: Merge Domains Plugin - Support for domain (ADS/LDAP) specific user templates
feature: Merge DSStats Plugin - Cache Data Source values for easy retrieval
feature: Merge Logrotate Plugin - Rotate Cacti logs
feature: Merge Realtime Plugin - Realtime graph viewing
feature: Merge Reporting (Nectar) Plugin - Reporting
feature: Merge RRDclean Plugin - RRD file cleanup and management
feature: Merge Secpass Plugin - User password policy enforcement
feature: Merge Settings Plugin - Shared settings for plugins
feature: Merge SNMP Agent Plugin - SNMP Agent for Cacti providing system statistics
feature: Merge SpikeKill Plugin - Remove unwanted spikes from graphs
feature: Merge SSL Plugin - Force https
feature: Merge SuperLinks Plugin - Add external links within Cacti
feature: Merge UGroup Plugin - User groups with permissions
feature: Merge Watermark Plugin - Watermark your Cacti graphs
bug: Fixed issue where old graph templates (0.8.6-), could import bogus data causing issues with Data Input Methods
bug#0000168: Duplicate data sources should be avoided when creating new graphs
bug#0000851: Review an imported template
bug#0001155: When viewing graph tree do not show empty nodes
bug#0001337: Form to filter for graphs in host view mode
bug#0001552: Date ranges not shown on graphs in the view with Daily, Weekly, Monthly & Yearly graphs
bug#0001573: RRA templates/grouping
bug#0001577: Override session handling and store session in Database
bug#0001790: Allow for XML delimiter in fields of a script query
bug#0001820: Unable to use a Data Input Method Output Field in more than one Data Source Item
bug#0001827: Changing the graph template messes up the graph item fields
bug#0001836: Add mysql error message to log
bug#0001877: Cookies path is not properly set
bug#0001966: Expand Devices in tree view not honored
bug#0001970: Data query index order cache should be populated on re-index
bug#0001981: Cacti is not full UTF-8
bug#0001986: CLI allow add_graphs.php to have multiples --snmp-field and --snmp-value options
bug#0001996: Allow using data input field in graph title
bug#0002096: Enumerated SNMP values not parsed correctly
bug#0002112: CLI add configurable parameters for device_add.php
bug#0002133: Restrict User to only manage specific device(s)
bug#0002135: Regular expression support for filter
bug#0002137: Data query oid_suffix parameter does not function
bug#0002159: Database creation file not fully compliant with strict SQL mode
bug#0002162: Unable to authenticate user with password containing UTF-8
bug#0002196: Incorrect script server instance number in log
bug#0002225: Make -Cc SNMP option configurable
bug#0002255: Script query_unix_partitions.pl should only query local mounts
bug#0002336: Implement php-snmp class library
bug#0002340: Data query script execution should be escaped
bug#0002350: SNMP Data Query index_order ignored
bug#0002351: Ping does not work with non-English locale
bug#0002361: Spine does not log unknowns the same way cmd.php
bug#0002362: Poller cmd.php makes wrong hex-string to decimal conversion
bug#0002370: Cacti prints wrong date formats, does not honor a systems locale
bug#0002403: Typo in DELETE statement leading to poor graphing performance
bug#0002412: Graph Template duplication causes to be converted to TAB char
bug#0002418: Data Source Items named 'ds' break UI ability to add more items
bug#0002419: SNMP enum results not parsed correctly by cmd.php poller
bug#0002452: CVE-2014-4000 PHP Object Injection Vulnerabilities
bug#0002454: OS Command Injection
bug#0002468: Changing graph format to anything but PNG causes no output
bug#0002476: Add support for SNMP v3 EngineID
bug#0002483: Cisco ASA using Re-index method of verify all causes recache event every time
bug#0002484: Incorrect SQL request in cli script repair_database.php
bug#0002521: Unable to create two devices via CLI with the same IP-Address
bug#0002522: Zero padded hex strings are parsed incorrectly
bug#0002535: Graph Template Changes not updating RRDTool command
bug#0002636: Creating Data Template with "U" for min and max saves field data_input_field_id as 0 for first item
bug#0002697: CVE-2016-2313 allows remote authenticated users who use web authentication to bypass intended access
bug#0002698: When the host is down the wrong data type are used for some columns in the host table
bug#0002723: Renaming a disabled device still attempts to connect and get SNMP host information
bug#0002724: Multipage graphs the menu can disappear
bug#0002725: Changing graph template does not mark correct interfaces disabled on data query generated list

0.8.8h

bug:0002656: Authentication using web authentication as a user not in the cacti database allows complete access (regression)
bug:0002667: Cacti SQL Injection Vulnerability
bug:0002666: When click the [Clear] button after clicking the [Refresh] button in Preview Mode , fails to CSRFcheck
bug:0002673: CVE-2016-3659 - Cacti graph_view.php SQL Injection Vulnerability
bug:0002676: Outdated MIBs for non-unicast packets
bug:0002677: Index is a MySQL 5.6 reserved word
bug:0002681: generate_graph_def_name() generates reserved word "cf"

0.8.8g

 
bug:0002161: Graph management "graph()" function conflicts with graphviz PECL extension graph()
bug:0002320: Unable to delete more than 500 graphs at once
bug:0002591: graph_view.php - unable to advance to Next Page in Tree View
bug:0002608: cacti 0.8.8f - Data Templates - Poller/script issue with backslash
bug:0002618: bug/syntax error in html_utility.php
bug:0002616: cdef.php -- Extra php closing tag
bug:0002617: PHP Warning is thrown when trying to include auth_login.php
bug:0002623: log warning display wrong time_interval
bug:0002627: Graph tree doesn't work in Internet Explorer
bug:0002601: graphs_new.php query not sorted as per definition xml:index_order
bug:0002625: Plugins don't display the next page
bug:0002631: RRDtool export not XML compliant - results in empty CSV exports
bug:0002622: graph_view.php -- Navigation and Content Areas are not visible in Tree Mode
bug:0002626: Unable to add two users in a row - Notice: Undefined index: id
bug:0002620: Unable to copy user
bug:0002618: bug/syntax error in html_utility.php
bug:0002646: SQL injection in graph.php
bug:0002656: Authentication using web authentication as a user not in the cacti database allows complete access
bug:0002647: 0.8.8g rev 7767 Can add cacti devices to graph tree "Save Failed"
bug:0002652: CVE-2015-8604: SQL injection in graphs_new.php
bug:0002655: CVE-2015-8377: SQL injection vulnerability in the host_new_graphs_save function in graphs_new.php
bug:0002629: Cacti lacks tab icons in chrome from android
bug:0002619: Fix incorrect placement of htmlspecialchars() in tree.php
bug:0002642: ping.pl does not take into account host port numbers
bug:0002567: RRDTool 1.5.x Support
bug:0002269: |query_ifSpeed| in --upper-limit for graph template does not work with empty ifSpeed

0.8.8f

 
bug:0002599: 0.8.8e Poller Script Parser is Broken
bug:0002600: cli/upgrade_database.php is missing releases
bug:0002603: Graph managment graphs.php save button does not work
bug:0002599: Poller Script Parser is Broken

0.8.8e

 
bug: Fixed issue with graph zooming failing to work
bug: Fixed various SQL Injection vectors
bug#0002569: Impossible to have a URL pointing directly to a graph
bug#0002574: SQL Injection Vulnerabilities in graph items and graph template items
bug#0002577: CVE-2015-4634 - SQL injection in graphs.php
bug#0002579: SQL Injection Vulnerabilities in data sources
bug#0002580: SQL Injection in cdef.php
bug#0002582: SQL Injection in data_templates.php
bug#0002583: SQL Injection in graph_templates.php
bug#0002584: SQL Injection in host_templates.php
bug#0002586: Cannot delete data sources from the GUI
bug#0002592: graph_view.php - viewing host in new tab - Undefined index: nodeid
bug#0002594: status_fail_date and status_rec_date are set incorrectly after host is marked down
bug#0002597: Incorrect value in Hosts column on Host Templates page
bug#0002598: Incorrect row number in Devices -> (Edit) page

0.8.8d

feature: Remove un-needed fonts and javascript files
bug: Fixed SQL injection VN: JVN#78187936 / TN:JPCERT#98968540
bug#0002261: PHP 5.4.0 added new error_reporting variable, causing cacti to show errors
bug#0002391: Odd Behaviour on ReIndex of Data Query Data
bug#0002393: Broken thumbnail images for graph templates
bug#0002402: Subtree must not have the same header as the parent header
bug#0002474: CLI add_device.php dows not set availability_method correctly
bug#0002449: The Save button does not work: Invalid html on page Console -> Cacti Settings: empty form tag
bug#0002428: Fail to delete all data input items when removing more than 1000 data sources
bug#0002439: Password with special character don't work with LDAP authentication
bug#0002461: invalid bn with ldap and anonymous bind
bug#0002465: Graph Export return empty CSV file
bug#0002484: Incorrect SQL request in cli script repair_database.php
bug#0002485: Broken pagenation on graph viewing
bug#0002489: SNMP - Get Mounted Partitions using Re-index method of Index Count Changed causes recache event every time
bug#0002490: Can not select page for multiple datasources per device
bug#0002494: CSV export always shows last day
bug#0002504: Data template search not functional
bug#0002542: [FG-VD-15-017] Cacti Cross-Site Scripting Vulnerability Notification
bug#0002543: Unable to switch pages within graphs_new.php due to invalid URL generation
bug#0002544: Duplicate entry in $nav_url during list view
bug#0002571: SQL Injection and Location header injection from cdef id CVE-2015-4342
bug#0002572: SQL injection in graph templates

0.8.8c

 
bug#0002228: GPL incompatible files included in Cacti project in include/treeview
bug#0002383: Sanitize the step and id variables CVE-2013-5588, CVE-2013-5589
bug#0002385: Cannot export host templates while including dependencies
bug#0002386: cli/upgrade_database.php is missing the last two releases
bug#0002390: Poller/script issue with slash and backslash
bug#0002405: SQL injection in graph_xport.php
bug#0002431: CVE-2014-2326 Unspecified HTML Injection Vulnerability
bug#0002432: CVE-2014-2327 Cross Site Request Forgery Vulnerability - Special Thanks to Deutsche Telekom CERT
bug#0002433: CVE-2014-2328 Unspecified Remote Command Execution Vulnerability
bug#0002434: Suppress SNMP UNITS Suffix from cacti_snmp_get() output
bug#0002438: Down Host Detection issue when using SNMP Desc or SNMP getNext
bug#0002446: Subtract plugin processing time from Poller sleep time
bug#0002453: CVE-2014-4002 Cross-Site Scripting Vulnerability - Special Thanks to G. Geshev (munmap)
bug#0002455: Incomplete and incorrect input parsing leads to remote code execution and SQL injection attack scenarios
bug#0002456: CVE-2014-5025 / CVE-2014-5026 - Cross-Site Scripting Vulnerability - Special Thanks to Adan Alvarez and Paul Gevers
bug: Fix COMMENT handling, even in case COMMENT is empty, with or without HR and with variable substitution
bug: Fix issues when SNMP data holds a "="; "explode" must be treated accordingly
bug: Fix filter highlighting on data sources for the data template field
bug: correct description of SNMP V3 parameters
feature: Added native jquery, jqueryui, and jstree
feature: Fixed issues with 'Clear' under preview not working
feature: Added new Tree navigation
feature: Added Columns and Thumbnails to Preview
feature: Added Columns to Tree (Preview only)
feature: Both Graphs and Columns default to 'Default'
feature: Resolved Left hand navigation taking entire page
feature: Added new graph zoom to tree view and preview offering a "quick" (default) and an "advanced" mode

0.8.8b

 
bug: Fixed issue with custom data source information being lost when saved from edit
bug: Repopulate the poller cache on new installations
bug: Fix issue with poller not escaping the script query path correctly
bug: Allow snmpv3 priv proto none
bug: Fix issue where host activate may flush the entire poller item cache
security: SQL injection and shell escaping issues

0.8.8a

 
bug#0002207: cannot export graph templates
bug#0002208: Graphs with CDEFs fail to generate
bug#0002209: External auth does not work behind a reverse proxy
bug#0002211: creating an index USING BTREE fails ony MySQL < 5.0.60
bug#0002213: CLI upgrade script is missing 0.8.7i as a target
bug#0002214: SQL error during non-PIA upgrade to 088 when giving a default for a text field in plugin_realms
bug#0002216: use of define_syslog_variables() gone in PHP 5.4
bug#0002217: url_path should default to /cacti/
bug#0002221: Missing plugin directory causes endless loop in plugins.php
bug#0002222: tail_logfile hangs when cacti.log not readable, filling apache log with fgets warnings

0.8.8

 
bug#0002056: un-initialized datetime used for host status (was: Zero length string != NULL)
bug#0002081: In Graph Management, search display graph title breaks when using pattern symbol "/"
bug#0002132: need to include pa.sql with the 0.8.7i and future releases
bug#0002134: rebuild_poller_cache.php --host-id deletes table poller_item completely
bug#0002141: cacti.sql missing BTREE PRIMARY KEY for poller_output
bug#0002146: Utilities -> View Log File -> refresh does not work
bug#0002150: usort_data_query_index() is broken -> graph order for hosts with data query sort option fails
bug#0002151: When building HTML forms with sub_checkbox on_change parameter is not used
bug#0002152: Issue with filter on graphs_new.php
bug#0002153: Cant search for patterns containing a forward-slash
bug#0002156: CDEF strings are not escaped before passed to rrdtool command
bug#0002158: Minor changes to grammar of displayed messages
bug#0002165: Using data input field in data source name (related to 2079 in 0.8.7i)
bug#0002167: New poller hook poller_finishing
bug#0002172: structure_rra_paths.php does not handle disabled data sources
bug#0002174: poller_item.host_id has wrong type
bug#0002178: typo in include/global_form.php: Mimimum -> Minimum
bug#0002181: session_unregister (use in functions.php) doesn't exist anymore in PHP 5.4
bug#0002182: When there is no suitable (unique) index, graphs are not shown in data query ordering on host leafs
bug#0002189: Proper graph hooks
bug#0002191: Refresh issues
bug#0002194: changing data query XML does not propagate to existing data sources
bug: Fix input validation on cli/api_device.php
bug: Fix issue with data source template associate command line script inserting incorrect rra information
bug: Fix minor display issue on data source pages
bug: Fix minor issue with counting items in the poller_output table
bug: Graph settings and settings check boxes do not allow unchecking to be saved
bug: Fix minor issue with plugin library caused by non-session
bug: Fix SQL error on data input save for non-templated graphs
bug: user_log index added to increase performance
feature: Merge Plugin Architecture into Cacti
feature: Added index to data_template_data to increase performance

0.8.7i

 
bug#0001963: Bandwidth summation "total in" and "total out" are always 0
bug#0002040: ICMP ping errors for Windows 7 with PHP 5.3
bug#0002062: Multiple security vulnerabilities
bug#0002063: Multiple value poller output incorrectly interpreted as hexadecimal value
bug#0002064: Removing "~" (tilde) by sanitize_uri() conflicts with Apache UserDir translation
bug#0002066: Graph without host id "Notice: Undefined variable: host_id"
bug#0002067: Custom time range filter not working
bug#0002068: Missing header include in analyze_database.php
bug#0002071: MySQL table poller_item is dropped always when "Data Input Method" is changed or added.
bug#0002079: Using input field of a script in graph title does not work
bug#0002080: Database password containing "@" does not connect
bug#0002083: Adding a new users generates errors in apache logs
bug#0002084: Incorrect normalization of hrStorageTable values over 2^31
bug#0002086: Incorrect usage of mysql custom tcp port
bug#0002087: PHP recache problems due to missing slashes in reindex table
bug#0002093: Unit exponent value of 0 not imported with graph template
bug#0002094: CDEF: "another cdef" references not included in template export
bug#0002106: Command line add device does not accept "None" for host template
bug: Update host template cli script help to fix incorrect options
bug: Refresh of Cacti log viewer not working
bug: Problems saving User Graph Permissions in IE9
bug: Bandwidth summation fails if NAN values are present
bug: Special Type Code "host_id" available in Data Queries by Not Data Input Methods
bug: Do not generate error messages when creating non host based graphs
bug: Wrong index used for Data Queries using VALUE/REGEXP
bug: Fix issue with title variable replacement failing when no host is associated with graph
bug: Cacti generating MySQL 1100 Errors when modifying the tree
bug: Resolved "Fatal error: Cannot use string offset as an array" in lib/data_query.php
feature: Properly support ifHighSpeed replacement variable
feature: Increase granularity of availability options to correct spine bug
feature: Replace "event count" with last changed date for host availability

0.8.7h

 
bug#0001403: Reapply Suggested Names does not work correctly for graphs and data sources not associated with Data Queries
bug#0001568: Remove PHP 5.3 deprecated functions
bug#0001584: Concurrent changes to graph tree ordering can corrupt sort values
bug#0001626: Symbol ($) does not appear in labels/gprint strings to rrdtool during graph generation
bug#0001632: Script server treats quoted arguments with spaces incorrectly as multiple separate arguments
bug#0001646: MySQL SSL connection support
bug#0001660: Modifying data template values does not propagate as expected
bug#0001678: Adding graphs to a device fails to add entries to poller_item if using the script server
bug#0001768: Perform consistency check on ds maximum vs. ds minimum
bug#0001783: Graph Export export date is incorrect
bug#0001812: Data template copying ignores some item templating
bug#0001814: Command line device add script fails when SNMP default is disabled
bug#0001815: One minute polling not working correctly
bug#0001816: Cannot export graph data to CSV with IE 8
bug#0001819: MySQL "TYPE=" command deprecated since MySQL 4.1 removed in MySQL 5.4.4
bug#0001826: Zoomed graph views should auto refresh
bug#0001828: Reapply Suggested Name prompt as spelling problems
bug#0001835: Graph edit page has more than one html form tag
bug#0001847: Graph export API function has required argument not defined
bug#0001851: Graph creation selector does not work with data query that has no associated graph templates
bug#0001855: Improper formatting of data queries can result in SQL errors
bug#0001862: Ping script does not process output of update ping utility
bug#0001867: RRDtool Cacti fetch function does not work for some locales
bug#0001876: PHP function strip_quotes causes HEX values to be truncated
bug#0001880: Form validation error message does not highlight text area control
bug#0001882: Cacti snmp_walk function fails if max_oids is an empty value
bug#0001890: Default tree view mode set to single pane mode not working
bug#0001893: Data input method description text does not make sense
bug#0001900: Equal sign not correctly parsed in snmp data results
bug#0001903: Undefined variable: mode in lib/ldap.php on line 375
bug#0001918: Script server does not accept more than one blank space before the function name
bug#0001926: Importing templates "using defaults for this installation" associates all rra's defined
bug#0001928: graph_image.php does not check local_graph_id
bug#0001929: Error when exporting templates are not properly reported
bug#0001930: No error reporting for wrong RRA
bug#0001934: Poller does not process SIGTERM signal correctly
bug#0001936: Removing multiple data sources is inefficient
bug#0001937: Technical support page uses check table which waits for table lock
bug#0001939: Do not query for number or items per host if concurrent polling processes is set to one
bug#0001954: Usage of PHP_SELF without basename in html.php (at least partly fixed)
bug#0001956: Attempts to update existing tree item fail
bug#0001967: Reflected XSS on Cacti 0.8.7g
bug#0001989: IE9 breaks Cacti when objects are hidden using 'display:none;' style tag
bug#0001993: Undefined index in lib/html.php
bug#0001995: REQUEST_URI not properly escaped in graph_view.php for preview mode
bug#0002005: Saving Script Server or Script Data Input Method Results in SQL Error
bug#0002060: NAN values in hdd utilization graphs (Poller Output Table not Empty)
bug: Fix SQL injection issues in login page
bug: RRDtool fetch in Cacti fails to function properly on rrdtool files with NaN values in the output
bug: Accept "Connection refused" on TCP ping tests
bug: Add missing row selection javascript to graph preview
bug: Script server throws "undefined variable" error when in debug mode
bug: Removing graphs does not take advantage of bulk deletes
bug: Fixed issue with multiple "U" results for a data input method with multiple output parameters
bug: SNMP v3 use AuthNoPriv when privacy passphrase is empty
bug: Fixed sql errors when using template and search filter on graph management
bug: Delete Data Source multi fails to perform bulk deletes on Data Source items
bug: Allow Timespan Selector to work with $_REQUEST as well as $_POST
bug: While in the mrtg view of Cacti Graphs, or in viewing graph properties zoom fails
bug: The filepath api call should trim the filename before checking for the files existence
bug: Fix issues with IE9 while editing templates
bug: Form action in graph_items.php incorrect
bug: Initial drawing of tree causing Next/Previous with malformed URI
feature#0001519: Spine enhancement for parallel collection of data at device level
feature#0001667: Get values of |host_*| variables in graph elements from data source
feature#0001922: Reindex method "Index Count Changed" requires that OID_NUM_INDEXES is given for SNMP Data Queries
feature#0001923: Implement counting for script (server) data queries just like OID_NUM_INDEXES
feature#0001924: Allow for reindex method "Index Count Changed" to apply to script (server) queries as well
feature#0001952: Ability to use input field of a script in graph title
feature: Make reindexing and repopulating the poller cache a lossless process
feature: Change default font sizes
feature: Add analyze database and push out host cli scripts