[cacti-user] Please of Cacti 1.2.16

[Mark Brugnoli-Vinten <netniv@ca...>]

*** Release of Cacti 1.2.16 ***

Thank you everyone who are using Cacti and especially those helping to make Cacti better!

For additional details check out the README located on GitHub.

https://github.com/Cacti/cacti/blob/develop/README.md

In other news, TheWitness, one of our longest members, wrote a few words 
so feel free to read and comment if you have a few moments of your time:

https://forums.cacti.net/viewtopic.php?f=4<<NOTES>>t=61413

*** Contribute ***

Active development of Cacti is located on GitHub! Join us in making Cacti better, submit issues, fork and submit pull requests!

https://github.com/cacti/

*** Cacti Change Log ***

issue#3704: When generating a report, the Cascade to Branches function does not as expected
issue#3859: When viewing graphs, automatic refresh so not always work as expected
issue#3898: Realtime graph pop up counter bug
issue#3903: Undefined variable errors may occur when creating a new datasource
issue#3907: The cli-based installer does not exit with a non-zero exit code when error occurs
issue#3912: When an export is complete, sometimes the progress bar remains
issue#3915: When enabling many devices, a threshold can be reached causing a slowdown in the process
issue#3916: When performing actions against Devices, replicated device information could sometimes be lost
issue#3917: When using API to rename a tree node, backtrace may be incorrectly shown
issue#3919: When searching, valid pages can sometimes be shown as empty by ddb4github
issue#3920: When exporting data from graphs, not all data was properly included
issue#3924: Graph Templates filter is not updated after new graph created by ddb4github
issue#3926: Username and password on the login page is not visible in Classic theme
issue#3929: Improve wording of concurrent process and thread settings
issue#3930: Location filter should remove blank entries by ddb4github
issue#3931: When syncing data collectors, a reindex event may be triggered unnecessarily
issue#3932: Automation Networks allows discovery of invalid IP addresses
issue#3933: When changing permissions of the current user, they don't take effect immediately
issue#3935: When reindexing a device, an incorrect page was sometimes displayed
issue#3942: When repairing database, audit_database.php does not add missing columns
issue#3948: Spine 1.2.15 - Spine Encountered An Unhandled Exception Signal Number: '6' [11, Resource temporarily unavailable] (Spine thread)
issue#3949: Log page should not be empty if no log info exists
issue#3953: During upgrade, there are times when realms can be duplicated leading to SQL errors
issue#3957: When using ping.php, UDP response times are not interpreted properly by hypnotoad
issue#3960: Improve warning you get when attempting to view a log file you don't have access to
issue#3962: When replicating files, scripts are not marked as executable
issue#3963: When creating plugin tables, collation is not set properly
feature: Update c3.js to version 0.7.20
feature: Update Chart.js to version 2.9.4
feature: Update phpseclib to version 2.0.29
feature: Update PHPMailer to version 6.1.8
feature: Use LSB shebang notation for cli scripts
feature: Add support for cactid daemon based launcher
feature#3923: Add ability to hide the Graph Drilldown icons by datatecuk
feature#3943: Add hooks for plugins to show custom Graph Source and custom Template URL (List View)

*** Reporting Issues ***

http://www.cacti.net/issues.php

*** Download Cacti ***

http://www.cacti.net/download_cacti.php

*** Download Spine ***

http://www.cacti.net/spine_download.php


Thanks!
The Cacti Group

[cacti-user] Release of Cacti 1.2.15

[Mark Brugnoli-Vinten <netniv@ca...>]

*** Release of Cacti 1.2.15 ***

Thank you everyone who are using Cacti and especially those helping to make Cacti better!

For additional details check out the README located on GitHub.

https://github.com/Cacti/cacti/blob/develop/README.md



*** Contribute ***

Active development of Cacti is located on GitHub! Join us in making Cacti better, submit issues, fork and submit pull requests!

https://github.com/cacti/

*** Cacti Change Log ***

issue#3643: When editing Maximum OIDs Per Get Request, blank value can cause errors
issue#3656: Boost may run more often than it should
issue#3693: Recache Event Loop can cause Interface Graphs to show gaps
issue#3703: When searching Graph Tree's, non matching devices remain visible
issue#3711: Page validation errors may occur when opening real time graphs
issue#3722: External Links do not always open if they are still open from previous usage
issue#3730: Cultural changes to various word usage
issue#3741: Replicate deleted device status instead of poller sync
issue#3743: Description field allows more characters entered than is stored
issue#3747: When installing or upgrading, LDAP functions may not always be included properly
issue#3748: Unable to remove discovered device
issue#3753: When installing or upgrading, PHP recommendations may not always return a valid value
issue#3755: Graph Templates has duplicate SQL delete statement
issue#3759: When syncing to remote poller, missing function errors may occur
issue#3760: When removing devices from remote pollers, devices may reappear without details
issue#3761: When removing devices, array errors may sometimes be recorded
issue#3763: Variable injection does not always work as expected
issue#3764: Editing Data Queries with multiple data templates can give errors about Suggested values
issue#3767: Progress bar does not provide enough visual information during long page loads
issue#3768: Some themes do not allow for a way to see which user is currently signed in
issue#3769: When viewing tables, allow users to force all columns to be visible
issue#3770: Column sizing is being lost between pages refreshes
issue#3771: When viewing input methods table, no ID is shown to help identify which method is being viewed
issue#3775: Filters do not always respect using keyboard to initiate searching
issue#3778: When exporting a data query, an invalid column name error can sometimes be shown
issue#3781: When checking if a view is allowed, having no session can result in errors
issue#3782: When removing devices via the CLI, undefined variable errors may be seen
issue#3786: Real Time Graphs may cause invalid index errors
issue#3790: On newer versions of MySQL/MariaDB, 'system' keyword can cause issues
issue#3793: Plugin setup can generate errors when reading options via system function
issue#3809: Plugin version numbers can be unexpectedly truncated
issue#3815: When PHP Session is set to autostart, an error can be reported as Cacti attempts to start it
issue#3820: When removing multiple items, selection process does not always work
issue#3821: When exporting colors, the indicator is not always removed upon completion
issue#3825: Unable to pass tree and leaf ID to 'graph_button' hook
issue#3827: When performing maintenance, various errors may sometimes be seen
issue#3828: When Guest User setting is active, current user is not always properly set
issue#3831: When installing Cacti, minor errors in text can be seen
issue#3835: Numbers are not always formatted properly when there are no decimal places
issue#3836: When viewing Real Time Graphs, an undefined index error may be recorded
issue#3844: Minor memory leaks and refresh issues when zooming on graphs
issue#3847: Real Time Graphs may sometimes fail due to folder permissions
issue#3849: Navigation can sometimes occur unexpectedly due to background timers
issue#3850: Trees management screen not reporting correct number of trees
issue#3858: Tree sequences can sometimes skip numbers during resorting
issue#3862: Guest user selection should not allow setting the currently logged in user
issue#3864: Links in Table Headers do not show clearly when in modern theme
issue#3868: Under some cases tree logic leads to undefined index errors
issue#3869: Cacti Data Debug can show errors if the Data Source is damaged or has been removed
issue#3871: When importing a data query, an invalid column name error can sometimes be shown
issue#3874: When using shift functions on graphs, negative values are not allowed
issue#3881: Correct issue when file is unreadable reporting no file was specified
issue#3883: Orphaned Plugins have no option to be removed
issue#3884: Update MySQL recommendations for Character Set and Colation
issue#3888: Correct sorting of IP addresses to be numeric not alpha by JamesTilt
issue#3890: Saving a device should not always repopulate the poller cache
feature: Update FontAwesome to Version 5.14

*** Reporting Issues ***

http://www.cacti.net/issues.php

*** Download Cacti ***

http://www.cacti.net/download_cacti.php

*** Download Spine ***

http://www.cacti.net/spine_download.php


Thanks!
The Cacti Group

[cacti-user] plugins and 0.8 to 1.2 upgrade

[Matus UHLAR - fantomas <uhlar@fa...>]

Hello,

I recently upgraded some servers from 0.8.8h (debian 9) to 1.2.2 (debian
10).

we use plugins like settings and rrdclean, which are built in since 1.0.0
and after upgease I see errors in "plugins" menu saying "Plugin directory is
missing".

Is there a way to remove obsolete plugins from cacti?
Should I remove them before upgrade?
or should I simply drop their named from the cacti database?

Thank you

-- 
Matus UHLAR - fantomas, uhlar@... ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
I don't have lysdexia. The Dog wouldn't allow that.

[cacti-user] Automatyczna odpowiedź ( Cacti-migration)

[Autoresponder <jjbry@op...>]

[cacti-user] Cacti-migration

[MEjaz <mejaz@cy...>]

All, 

 

I have cacti (newest version 1.2.13) on RedHat 8  and i need to move all the
graphs, I mean entire migration of RRD files and database  from old cacti
which is running redhat 6 and cact  0.88b.

I followed the steps as  mentioned in the links
https://forums.cacti.net/about22665.html
<https://forums.cacti.net/about22665.html&highlight=>; &highlight=, the
problem is the copied graphs which are almost 1000 devices still do not
appear in the interface..  do you think is I am missing something?  Or this
is normal behavior as it is takes some  time to update the copied one graphs
let say a day or two? 

 

 

 

 

Thanks,

Mohammed Ejaz

Asst. Operation Director of Systems.

Cyberia SAUDI ARABIA

P.O.Box: 301079, Riyadh 11372

Phone:  (+966) 11 464 7114 Ext. 140

Mobile:  (+966) 562311787

Fax:      (+966) 11 465 4735

Website: http://www.cyberia.net.sa

 

 

Re: [cacti-user] cacti-access

[Manel Perez <manel.perez@cs...>]

Hi Mehaz,

I think you should change config.php.dist

$url_path = "/";


Best regards

--Manel Pérez

________________________________
De: MEjaz <mejaz@...>
Enviat el: dilluns, 10 d’agost de 2020 14:58
Per a: cacti-user@... <cacti-user@...>
Tema: [cacti-user] cacti-access

Dear all,



I have successfully installed cacti,  I can access my cacti server with
https://newtraffic.cyberia.ne.sa/cacti. Whereas I am looking to access
without adding /cacti as suffix. Such as https://newtraffic.cyberia.net.sa/



May be somewhere I am wrong in setting the index page (Documet root), please
assit. Attached is config file for your information



Thanks for your usual co-operation..



Thanks,

Mohammed Ejaz

Asst. Operation Director of Systems.

Cyberia SAUDI ARABIA

P.O.Box: 301079, Riyadh 11372

Phone:  (+966) 11 464 7114 Ext. 140

Mobile:  (+966) 562311787

Fax:      (+966) 11 465 4735

Website: http://www.cyberia.net.sa

[cacti-user] Automatyczna odpowiedź ( Graph-History)

[Autoresponder <jjbry@op...>]

[cacti-user] Graph-History

[MEjaz <mejaz@cy...>]

Dear all.

 

When I have copied rrd  files from old server to the new Server with below
procedure,  It doesn't shows the previous history and stop new polling as
well.  

 

In order to  migrate the graphs I am  converting  them to XML, move them to
the new server and restore the RRD files from XML. 

 

Ejaz

[cacti-user] device status

[Ioteba Buatia <ioteba.buatia@cc...>]

Dear support

 

I've installed cacti version 1.2.10 with an rrdtool version of 1.7.2+ and
added about 20 devices to the system. My aim is to monitor part of my LAN
backhaul to the internet and remote satellite modems in Kiribati to be able
to be alerted when these remote sites go down.

Yesterday status of these devices were all up, but then our satellite link
went down for a few hours due to maintenance purposes from Kacific satellite
networks. When the link came back some of the devices status went to the
recovering status and then to the UP while most stayed down, even though I
am only using ICMP ping to monitor the status.

Since I am monitoring remote sites over the satellite link I decided not to
use SNMP and use ICMP ping only since there is no way I could configure the
SNMP agent on these remote satellite modems.

I am only asking if this process could be automated as in the case of some
devices even though there is a ping reply. 

Please advise and I am quite new to cacti.

 

Thank you for your support and hear from you soon.

 

Best regards

 

Ioteba Buatia

CCK ITO

 



-- 
This email has been checked for viruses by Avast antivirus software.
https://www.avast.com/antivirus

[cacti-user] Automatyczna odpowiedź (Re: cacti-access)

[Autoresponder <jjbry@op...>]

Re: [cacti-user] cacti-access

[Mark Brugnoli-Vinten <netniv@ca...>]

You need to ensure that your document root is set to the cacti folder and update the config.php

> On 10 Aug 2020, at 14:20, MEjaz <mejaz@...> wrote:
> 
> Dear all, 
> 
> 
> 
> I have successfully installed cacti,  I can access my cacti server with
> https://newtraffic.cyberia.ne.sa/cacti. Whereas I am looking to access
> without adding /cacti as suffix. Such as https://newtraffic.cyberia.net.sa/
> 
> 
> 
> May be somewhere I am wrong in setting the index page (Documet root), please
> assit. Attached is config file for your information 
> 
> 
> 
> Thanks for your usual co-operation.. 
> 
> 
> 
> Thanks,
> 
> Mohammed Ejaz
> 
> Asst. Operation Director of Systems.
> 
> Cyberia SAUDI ARABIA
> 
> P.O.Box: 301079, Riyadh 11372
> 
> Phone:  (+966) 11 464 7114 Ext. 140
> 
> Mobile:  (+966) 562311787
> 
> Fax:      (+966) 11 465 4735
> 
> Website: http://www.cyberia.net.sa
> 
> 
> 
> 
> 
> 
> 
> <ssl-config.txt>
> <cacti-conf.txt>
> _______________________________________________
> cacti-user mailing list
> cacti-user@...
> https://lists.sourceforge.net/lists/listinfo/cacti-user

[cacti-user] Automatyczna odpowiedź ( cacti-access)

[Autoresponder <jjbry@op...>]

[cacti-user] cacti-access

[MEjaz <mejaz@cy...>]

Dear all, 

 

I have successfully installed cacti,  I can access my cacti server with
https://newtraffic.cyberia.ne.sa/cacti. Whereas I am looking to access
without adding /cacti as suffix. Such as https://newtraffic.cyberia.net.sa/

 

May be somewhere I am wrong in setting the index page (Documet root), please
assit. Attached is config file for your information 

 

Thanks for your usual co-operation.. 

 

Thanks,

Mohammed Ejaz

Asst. Operation Director of Systems.

Cyberia SAUDI ARABIA

P.O.Box: 301079, Riyadh 11372

Phone:  (+966) 11 464 7114 Ext. 140

Mobile:  (+966) 562311787

Fax:      (+966) 11 465 4735

Website: http://www.cyberia.net.sa

 

 

 

[cacti-user] Automatyczna odpowiedź ( Release of Cacti 1.2.13)

[Autoresponder <jjbry@op...>]

[cacti-user] Release of Cacti 1.2.13

[Mark Brugnoli-Vinten <netniv@ca...>]

*** Release of Cacti 1.2.13 ***

Thank you everyone who are using Cacti and especially those helping to make Cacti better!

For additional details check out the README located on GitHub.

https://github.com/Cacti/cacti/blob/develop/README.md

With this release, there are a number of CVE's that have been addressed.  We would like to take this moment to thank those who have contributed to Cacti with special mention to:

Mayfly277 
ddb4github 
yingbaiibm
DavidLiedke 
kim-fitness 
bmfmancini
riversdev0

The Cacti Group are made up of volunteers where all help and contributions are appreciated.  Thanks to GitHub's recent Sponsors program, you can now also contribute financially to the project by using the "Sponsors" button on the GitHub Cacti repository or when viisting https://github.com/sponsors/Cacti 

We hope that you enjoy this release and that in the current unsettling climate, you are all safe and well.

*** Contribute ***

Active development of Cacti is located on GitHub! Join us in making Cacti better, submit issues, fork and submit pull requests!

https://github.com/cacti/

*** Cacti Change Log ***

security#3544: jQuery XSS vulnerabilities require vendor package update (CVE-2020-11022 / CVE-2020-11023)
security#3549: Lack of escaping on some pages can lead to XSS exposure
security#3582: Update PHPMailer to 6.1.6 (CVE-2020-13625)
security#3622: SQL Injection vulnerability due to input validation failure when editing colors (CVE-2020-14295)
security#3628: Lack of escaping on template import can lead to XSS exposure
issue#3517: When generating reports, function looping can occur resulting in 100% cpu usage
issue#3525: When viewing Graphs, zoom functionality prevents drag and drop of image
issue#3527: When using 95th Percentiles, undefined index errors can be generated
issue#3532: When using Realtime, if no graph contents are present an error is generated
issue#3533: When exporting data, Start date for RRDfile does not match start date of first data row
issue#3536: When using Navigation Menu, Show/Hide in Response mode does not always work
issue#3538: When using Realtime, race conditions between browser and function loading can occur
issue#3543: When exporting CSV data, Unicode prefix is not properly set
issue#3551: Authentication can fail when using Web Basic Authentication and Template User
issue#3553: When attempting to view an aggregate graph that does not exist, many errors are generated
issue#3563: Current orphan handling disrupts graphing transient indexes
issue#3566: Automation incorrectly attempts to use MacTrack to duplicate options
issue#3567: When Boost runs, locks are not always released properly and crash is detected
issue#3569: Invalid font results in large number of log entries
issue#3571: Correct various runtime errors due to incorrect message variables
issue#3574: Saving Graph Template Items take a long time on large systems
issue#3577: Hosts are being incorrectly filtered when first displaying with filter set to all
issue#3579: Graphs can incorrectly show as 'Empty Graph'
issue#3581: Realtime graph window is not resizing properly
issue#3588: Validation warnings are generated when viewing/editing devices
issue#3594: Automation hangs for certain schedule types
issue#3595: Template to Device sync text is not consistent
issue#3596: When importing template, resources aren't checked properly
issue#3597: Template to Device sync provides no feedback
issue#3598: When editing graphs and graph templates, back button results in broken page
issue#3599: When downgrading, templates are fully selected for install
issue#3601: When a device is down, instate can show wrong time
issue#3607: When session timeout occurs, subsequent authorized access to areas can become blocked
issue#3611: Allow CHANGELOG to be viewable from the GUI
issue#3613: When modifying trees, devices and graphs lists ignore Autocomplete Rows setting
issue#3614: When section tabs wrap, the title of the first section can become obscured
issue#3624: When previewing graphs, sometimes the images fail to appear
issue#3629: Log files are not rotated properly on remote pollers
issue#3631: Command line scripts do not allow an unlimited runtime causing timeouts
issue#3632: When mysql connection fails, various unexpected errors are recorded
issue#3635: Automate generates undefined index errors when communicating with remote pollers
issue#3639: When updating a device, duplicate entry errors occur when inserting to the database
issue#3646: Adding datasource fails from CLI due to missing function
issue#3651: Editing any item on an Aggregate Graph that has been converted to a normal graph breaks entire graph
issue#3655: Rare race condition between Boost and Poller can result in unexpected missing table errors
issue#3659: When viewing logs, unexpected 'needle' errors can be seen on rare occasions
issue#3663: Disabling a Data Collector can cause unexpected errors
issue#3668: When Input Field is in error, message reports field will be highlighted which is incorrect
issue#3669: When adding an Input Field, the Input Method can be renamed unexpected
issue#3673: Spikekill does not receive correct `avgnan` value when launching from GUI
issue#3676: Device not showing up in device page but showing up in Monitor tab
issue#3681: Item movement arrows do not properly align on all themes
issue#3682: When in 'Time Graph View' mode, Zoom features do not work correctly
feature#3611: Allow CHANGELOG to be viewable from the GUI
feature#3647: When adding datasource fails from CLI, created Datasource ID should be printed
feature#3666: Update jstree.js to 3.3.10
feature#3688: Update phpseclib to 2.0.28

*** Reporting Issues ***

http://www.cacti.net/issues.php

*** Download Cacti ***

http://www.cacti.net/download_cacti.php

*** Download Spine ***

http://www.cacti.net/spine_download.php


Thanks!
The Cacti Group

[cacti-user] Release of Cacti 1.2.12

[Mark Brugnoli-Vinten <netniv@ca...>]

*** Release of Cacti 1.2.12 ***

Thank you everyone who are using Cacti and especially those helping to make Cacti better!

For additional details check out the README located on GitHub.

https://github.com/Cacti/cacti/blob/develop/README.md



*** Contribute ***

Active development of Cacti is located on GitHub! Join us in making Cacti better, submit issues, fork and submit pull requests!

https://github.com/cacti/

*** Cacti Change Log ***

security#3467: Lack of escaping of color items can lead to XSS exposure (CVE-2020-7106)
issue#3422: When Graph Item is not linked to a data source, Comments do not always get variables substituted correctly
issue#3424: Hosts are being incorrectly filtered when no location filter is set
issue#3427: When exporting to a CSV with unicode characters, contents can become garbled
issue#3429: When using SNMP v3, Automation can report extraneous warnings
issue#3432: Rare race condition exists when both boost and dsstats enabled
issue#3434: When attempting to exploit Cacti using alert, unexpected errors can be seen
issue#3436: Unable to login due to incorrect default of Cookie Domains in config.php.dist
issue#3438: When upgrading to 1.2.11, installer can appear to stop at 42%
issue#3447: SNMP Issues on recent version of PHP
issue#3449: When viewing the installation wizard's directory permission step, items are overlapping unexpectedly
issue#3450: When installing Cacti under XAMPP and PHP 7.4, exceptions are being recorded and installation fails
issue#3452: New Content-Security-Policy prevents External Links from being opened
issue#3454: Cacti's Reports are not displaying messages correctly
issue#3457: Graphs can not properly handle negative axis values
issue#3459: When installing a new remote poller, connection tests can incorrectly fail
issue#3460: Addtional changes to allow plugin folder/display names to be handled better by ddb4github
issue#3462: Increase default memory limit for cli scripts to prevent runtime memory issues
issue#3463: When listing VDEF's, selecting 'has graph' can cause unexpected exceptions in logs
issue#3468: Graph rules cannot be created for automation
issue#3474: The SSL option to set the SSL_CA should be optional for Client Connections
issue#3477: Boost leaking memory when a large number of Data Sources disabled
issue#3478: Reindexing can sometimes run longer than expected
issue#3479: When viewing the Data Query table interface, the Data Input Method should be right aligned
issue#3483: When recording log entries, cacti should default to hyphenated date format
issue#3484: When editing SNMP v3 passwords, previous setting is not obfuscated
issue#3488: In automation, when viewing an 'SNMP option set', the private passphrase is in clear
issue#3495: When installing templates, default 'all' selection will reset all existing graphs, removing customisations
issue#3496: Graph Items can show a double percent sign incorrectly
issue#3502: When viewing Graphs, can not switch between list, preview and tree submodes
issue#3504: Viewing graphs before the poller has run for the first time can produce unexpected errors
issue#3505: When viewing graph previews, clicking Go or Refresh prevents calendars from working
issue#3506: After successfully logging in, a user can become automatically logged out again
issue#3507: Changes to JavaScript's Storage API cause exceptions to be thrown
issue#3510: Only guests can actually guest only pages, logged in users are denied access incorrectly
issue#3512: When plugins update, registered files list cannot always be updated by ddb4github
issue#3520: When viewing graphs, shifting time does not work when using non-english languages
feature#3480: Created 'custom_denied' hook to allow customisation of permission denied notifications
feature#3498: Update js.storage.js to 1.1.0
feature#3499: Update jstree.js to 3.3.9
feature#3500: Update phpseclib to 2.0.27

*** Reporting Issues ***

http://www.cacti.net/issues.php

*** Download Cacti ***

http://www.cacti.net/download_cacti.php

*** Download Spine ***

http://www.cacti.net/spine_download.php


Thanks!
The Cacti Group

[cacti-user] Automatyczna odpowiedź ( php_snmp.dll faulting module)

[Autoresponder <jjbry@op...>]

[cacti-user] php_snmp.dll faulting module

[Rebassa Oliver, Joan <jrebassa@im...>]

Good evening:

- After a unclean shutdown of the Windows server 2016 where is installed CACTI 1.2.7 the Apache service don't start, in Windows events appears the error:
[cid:image001.jpg@...]

In c:\apache24\logs\error.log appears:

[cid:image002.jpg@...]
executing for example php -m appears the error: CLI has stopped working , and in Windows events appears:
[cid:image003.png@...]

in php.ini commenting the line: extension=php_snmp.dll then Apache starts and php -m runs correctly.

I download the same version of php 7.2.24 that we have installed with Cacti but appears the same error, how can i fix this error with php_snmp.dll module?,  what is the function of this module?  this module is related with the net-snmp?, I have reinstalled net-snmp v.5.5.0 but appears the same error.

Bye. Thanks.

[cacti-user] Release of Cacti 1.2.10

[Mark Brugnoli-Vinten <netniv@ca...>]

*** Release of Cacti 1.2.10 ***

Thank you everyone who are using Cacti and especially those helping to make Cacti better!

For additional details check out the README located on GitHub.

https://github.com/Cacti/cacti/blob/develop/README.md

**IMPORTANT**: Prior to this release, 1.2.10, a flaw existed which allowed a malicious actor to execute remote code by use of Guest Accounts with Real Time Access.

This can be countered using any of the following:

- Ensure PHP greater than 7.1
- Disabled Guest Account
- Disabled Guest access to Real Time Graphs
- Use Cacti 1.2.10+



*** Contribute ***

Active development of Cacti is located on GitHub! Join us in making Cacti better, submit issues, fork and submit pull requests!

https://github.com/cacti/

*** Cacti Change Log ***

security#3285: When guest users have access to realtime graphs, remote code could be executed (CVE-2020-8813)
issue#3240: When using User Domains, global template user is used instead of the configured domain template user
issue#3245: Unix timestamps after Sep 13 2020 are rejected as graph start/end arguments
issue#3246: When upgrading with remote collectors, sync status does not always return properly
issue#3250: When PHP memory limit is set to -1, recommendation value fails
issue#3253: Upgrade can stall when checking permissions on csrf-secret.php
issue#3254: Installer shows script owner rather than running user for suggested chown command
issue#3266: When setting User Groups to 'Defer to the User', setting can lead to user being told they have no permissions
issue#3269: When searching Graphs under a Chinese language, an unexpected error as sometimes shown
issue#3274: When editing a tree, multiple device drag/drop does not work
issue#3276: When spine aborts, script server can be left wanting or generating unnecessary logs
issue#3277: When boost does not find an initial time, numeric errors can be raised
issue#3281: When changing Graph Template options, incorrect image format may be selected
issue#3282: Graph's can be sized incorrectly if image is SVG format
issue#3283: When setting a file path, valid characters not recognised properly
issue#3287: When using graph template 'Cacti Stats - User Logins', an incorrect count of invalid users can be seen
issue#3288: When on Device page, pressing 'Go' on the filter caused Device New menu pick to appear
issue#3289: When using CMD.PHP, poller id is not always shown properly
issue#3290: When using CMD.PHP, inconsistent device logging levels may occur
issue#3298: When initialising fields in JavaScript, text/textarea elements have width set to zero if it is hidden by parent by ddb4github
issue#3302: Editing a Graph Template does not show the Data Template name

*** Reporting Issues ***

http://www.cacti.net/issues.php

*** Download Cacti ***

http://www.cacti.net/download_cacti.php

*** Download Spine ***

http://www.cacti.net/spine_download.php


Thanks!
The Cacti Group


Mark Brugnoli-Vinten
The Cacti Group
 
w: http://www.cacti.net <http://www.cacti.net/>;
e: developers@... <mailto:developers@...>
e: netniv@... <mailto:netniv@...>

Please Read:
Privileged/Confidential Information may be contained in this message. If you are not the addressee indicated in this message (or responsible for delivery of the message to such person), you may not copy or deliver this message to anyone. In such case, you should destroy this message and kindly notify the sender by reply email. 

[cacti-user] Release of Cacti 1.2.9

[Mark Brugnoli-Vinten <netniv@ca...>]

*** Release of Cacti 1.2.9 ***

Thank you everyone who are using Cacti and especially those helping to make Cacti better!

For additional details check out the README located on GitHub.

https://github.com/Cacti/cacti/blob/develop/README.md



*** Contribute ***

Active development of Cacti is located on GitHub! Join us in making Cacti better, submit issues, fork and submit pull requests!

https://github.com/cacti/

*** Cacti Change Log ***

security#3191: Lack of escaping on some pages can lead to XSS exposure (CVE-2020-7106)
security#3201: Remote Code Execution due to input validation failure in Performance Boost Debug Log (CVE-2020-7237)
issue#2937: Devices still show in lists despite being deleted
issue#3038: When editing an aggregate on smaller screens, layout may not be correct
issue#3136: Upgrade may fail between 1.2.7 and 1.2.8 if incompatible database format used
issue#3142: Chrome sets graphs tree navigation view to width 0px
issue#3146: Unable to create aggregate graphs on new installations
issue#3149: After refresh of page, tooltips stop working
issue#3150: When using Time Graph View, Zooming can cause errors
issue#3151: Passing glue string after array is deprecated in PHP 7.4
issue#3155: Aggregate does not correctly follow color template when reordered
issue#3156: On new installs, gprint_format was missing from table aggregate_graphs
issue#3157: Back button not working properly with Classic theme
issue#3158: Classic theme show only 3 tabs on mobile device. Don't show Console menu
issue#3159: PHP Memory is not correctly identified when value is not in megabytes
issue#3161: When the poller_output_boost table is missing, recreate it before a poller run
issue#3163: When using RPMlint, Free Software Foundation address is shown to be incorrect
issue#3165: Zoom looses its focus after all graphs on page rendered
issue#3166: When changing zoom level, graphs are resized inappropriately at the end
issue#3167: Installer should initialize the csrf-secret.php file automatically
issue#3168: sqltable_to_php.php script does not pick up row_format
issue#3177: Remove legacy plugin hook that presents potential 3rd party security issues
issue#3178: The change password page is not displaying the rules
issue#3180: Receiving undefined index errors when working with some Data Queries
issue#3181: When configuration file is unreadable, Cacti shows database connection errors if non defaults are needed
issue#3182: When a database connection error occurs, there is no way to report actual error
issue#3184: Improve program path detection by using system path and PHP_BINDIR
issue#3193: Starting with MySQL 5.7 some sql_mode variables are required for some plugins
issue#3196: Minimize use of eval() in JavaScript due to emerging Content-Security-Context guidelines
issue#3200: Unable to mass change Graph Template image format in mass
issue#3206: Converted aggregate graph cannot be edited
issue#3209: Error occurs when Creating New Graphs through Automatically Added Devices using Sync Device Template
issue#3216: When editing a Data Source Profile size is shown as 'N/A'
issue#3224: When removing graphs by command line, regex is not properly validated when empty
issue#3225: Unable to Import Templates due to invalid dependency hash
issue#3226: When processing secpass login, failed logins are not recorded
issue#3228: Login page does not remember the last realm used by user
issue#3232: When editing HRULE and VRULE items, color selector was not presented
issue#3233: When working with non-templated graphs, it can be difficult to determine what items represent
issue#3235: Transient errors may occur with table poller_output_boost_arch

*** Reporting Issues ***

http://www.cacti.net/issues.php

*** Download Cacti ***

http://www.cacti.net/download_cacti.php

*** Download Spine ***

http://www.cacti.net/spine_download.php


Thanks!
The Cacti Group

[cacti-user] Automatyczna odpowiedź (Re: Release of Cacti 1.2.8)

[Autoresponder <jjbry@op...>]

Re: [cacti-user] Release of Cacti 1.2.8

[ASHWINI VG <contractor> <Ashwini.VG@co...>]

HI,

Can you support me in adding the plugins to my cacti server.


Regards,

Ashwini VG
Media Services Engineering,
Tata Communications,Chennai.
Mobile : +91 8056424929 | IP 502821



-----Original Message-----
From: Mark Brugnoli-Vinten <netniv@...> 
Sent: 09 December 2019 05:37 AM
To: cacti-announce@...; Support requests/questions about cacti <cacti-user@...>
Subject: [cacti-user] Release of Cacti 1.2.8

CAUTION: This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe.

*** Release of Cacti 1.2.8 ***

Thank you everyone who are using Cacti and especially those helping to make Cacti better!

For additional details check out the README located on GitHub.

https://github.com/Cacti/cacti/blob/develop/README.md

**IMPORTANT:** This release addresses two CVE's that were reported.  For more information see the changelog.


*** Contribute ***

Active development of Cacti is located on GitHub! Join us in making Cacti better, submit issues, fork and submit pull requests!

https://github.com/cacti/

*** Cacti Change Log ***

security#3025: CVE-2019-17357 When viewing graphs, some input variables are not properly checked (SQL injection possible)
security#3026: CVE-2019-17358 When deserializating data, ensure basic sanitization has been performed
security#3066: When using HTTPS, secure cookie to prevent potential weakness
issue#1228: Any tree or branch with a long name force main content off screen
issue#2133: Long snmp_indexes are being cut off
issue#2888: Long hostnames cause template filter to go off page
issue#2987: Changing Color Template does not update Aggregate
issue#2989: Allow Remote Data Collectors to maintain their own path variables
issue#2991: Cacti Statistics device template can generate unexpected errors
issue#2995: When editing a report, column setting may be ignored incorrectly
issue#2996: When editing a user, graph options do not properly reflect previously saved settings
issue#2998: Session performance issues due to excessive use for database storage
issue#2999: Blank arguments can lead to extra spaces in script arguments
issue#3006: Boost generates undefined variables warning during poller run
issue#3011: i18n logging does not check write permission exists
issue#3012: When viewing realtime graphs, some input variables are not properly checked
issue#3013: Allow legends to be modified for Aggregate Graphs
issue#3017: Automation network range with spaces fails validation
issue#3019: User selected language is not always adhered to
issue#3021: Tree view cuts off at the bottom of page on modern theme
issue#3023: When clicking highlighted tab, side panel is not always shown/hidden correctly
issue#3027: Aggregate Graph re-ordering does not work
issue#3028: When zooming a graph, unable to reach edge of graph without losing focus
issue#3030: Pace continues to run even after a page is finished rendering
issue#3032: Graphs may select MAX instead of AVERAGE as consolidation function even if there is no item with MAX present.
issue#3035: When editing a tree, can not remove entries due to CSS bug
issue#3037: When emptying poller output using cli, debug functions are not properly included
issue#3039: Allow packagers to be able to specify an alternate location of csrf-secret.php file
issue#3040: When running automation, discovery can still run even if cancelled
issue#3041: When running automation, scans do not always respond to being cancelled
issue#3042: When running automation, scan can fail when selecting remote pollers
issue#3045: When viewing Aggregate Graphs, an error due to undefined referrer may occur
issue#3047: When saving settings, ignore remote pollers who have not checked in recently
issue#3050: When viewing graph trees, some input variables are not properly checked
issue#3052: When editing CDEF's, slow database performance can occur
issue#3053: When viewing graph thumbnails, some input variables are not properly checked
issue#3055: During install/upgrade, database tests are not performed correctly
issue#3059: When using nth_percentile, correct value is not always returned if using MAX consolidation
issue#3060: When upgrading from older MySQL databases, format is not changed from compact to dynamic
issue#3061: When running automation, allow SNMP to be used as a ping method
issue#3068: When administrating users, some input variables are not properly checked
issue#3070: Improve database logging when a crashed table is encountered
issue#3073: Automation network range does not always produce the correct start/end values
issue#3078: When viewing graph debug from remote data collector, File Not Found warnings can appear incorrectly
issue#3079: Allow domain names to be stripped from a device's long description
issue#3080: Remote Agent throws warnings that graph_nolegend has not been sanitized
issue#3085: When editing a poller, ensure each listening IP is unique
issue#3081: External Links are not showing a glyph when they appear on the Console menu
issue#3089: When viewing graphs in realtime, undefined variable can be logged for 95th Percentile graphs
issue#3099: Graph template 'Linux - Memory Usage' has the wrong unit on its vertical_label
issue#3101: Polling times can be slightly inconsistent due
issue#3104: When viewing graphs, a byref error can be seen in the error logs
issue#3105: When viewing hosts, some input variables are not properly checked
issue#3111: When adding devices via command line, bad SNMP versions are not reported
issue#3112: When zooming on Graphs, too many requests are being made causing slowness
issue#3114: Support for USB devices that change name due to their hosts restarting
issue#3118: When converting tables, the dynamic row format should be selected
issue#3119: Main Data Collector should perform a Full Sync whenever it is installed/upgraded
issue#3120: Correct issues causing incompatibility with PHP 7.4
issue#3121: When converting tables during install, show what will be changed
issue#3123: Named colors table is not properly imported/upgraded
issue#3124: When a second data collector is added, boost is not enabled automatically
issue#3128: i18n handler checks for existence of wrong mo file
issue#3129: Logout repeated occurs even when already logged out
issue#3132: Installer fails to continue if automation range is array of networks
feature#3077: Allow disabling remote poller resource cache replication to support upgrade testing

*** Reporting Issues ***

http://www.cacti.net/issues.php

*** Download Cacti ***

http://www.cacti.net/download_cacti.php

*** Download Spine ***

http://www.cacti.net/spine_download.php


Thanks!
The Cacti Group



_______________________________________________
cacti-user mailing list
cacti-user@...
https://lists.sourceforge.net/lists/listinfo/cacti-user

[cacti-user] Automatyczna odpowiedź ( Release of Cacti 1.2.8)

[Autoresponder <jjbry@op...>]

[cacti-user] Release of Cacti 1.2.8

[Mark Brugnoli-Vinten <netniv@ca...>]

*** Release of Cacti 1.2.8 ***

Thank you everyone who are using Cacti and especially those helping to make Cacti better!

For additional details check out the README located on GitHub.

https://github.com/Cacti/cacti/blob/develop/README.md

**IMPORTANT:** This release addresses two CVE's that were reported.  For more information see the changelog.


*** Contribute ***

Active development of Cacti is located on GitHub! Join us in making Cacti better, submit issues, fork and submit pull requests!

https://github.com/cacti/

*** Cacti Change Log ***

security#3025: CVE-2019-17357 When viewing graphs, some input variables are not properly checked (SQL injection possible)
security#3026: CVE-2019-17358 When deserializating data, ensure basic sanitization has been performed
security#3066: When using HTTPS, secure cookie to prevent potential weakness
issue#1228: Any tree or branch with a long name force main content off screen
issue#2133: Long snmp_indexes are being cut off
issue#2888: Long hostnames cause template filter to go off page
issue#2987: Changing Color Template does not update Aggregate
issue#2989: Allow Remote Data Collectors to maintain their own path variables
issue#2991: Cacti Statistics device template can generate unexpected errors
issue#2995: When editing a report, column setting may be ignored incorrectly
issue#2996: When editing a user, graph options do not properly reflect previously saved settings
issue#2998: Session performance issues due to excessive use for database storage
issue#2999: Blank arguments can lead to extra spaces in script arguments
issue#3006: Boost generates undefined variables warning during poller run
issue#3011: i18n logging does not check write permission exists
issue#3012: When viewing realtime graphs, some input variables are not properly checked
issue#3013: Allow legends to be modified for Aggregate Graphs
issue#3017: Automation network range with spaces fails validation
issue#3019: User selected language is not always adhered to
issue#3021: Tree view cuts off at the bottom of page on modern theme
issue#3023: When clicking highlighted tab, side panel is not always shown/hidden correctly
issue#3027: Aggregate Graph re-ordering does not work
issue#3028: When zooming a graph, unable to reach edge of graph without losing focus
issue#3030: Pace continues to run even after a page is finished rendering
issue#3032: Graphs may select MAX instead of AVERAGE as consolidation function even if there is no item with MAX present.
issue#3035: When editing a tree, can not remove entries due to CSS bug
issue#3037: When emptying poller output using cli, debug functions are not properly included
issue#3039: Allow packagers to be able to specify an alternate location of csrf-secret.php file
issue#3040: When running automation, discovery can still run even if cancelled
issue#3041: When running automation, scans do not always respond to being cancelled
issue#3042: When running automation, scan can fail when selecting remote pollers
issue#3045: When viewing Aggregate Graphs, an error due to undefined referrer may occur
issue#3047: When saving settings, ignore remote pollers who have not checked in recently
issue#3050: When viewing graph trees, some input variables are not properly checked
issue#3052: When editing CDEF's, slow database performance can occur
issue#3053: When viewing graph thumbnails, some input variables are not properly checked
issue#3055: During install/upgrade, database tests are not performed correctly
issue#3059: When using nth_percentile, correct value is not always returned if using MAX consolidation
issue#3060: When upgrading from older MySQL databases, format is not changed from compact to dynamic
issue#3061: When running automation, allow SNMP to be used as a ping method
issue#3068: When administrating users, some input variables are not properly checked
issue#3070: Improve database logging when a crashed table is encountered
issue#3073: Automation network range does not always produce the correct start/end values
issue#3078: When viewing graph debug from remote data collector, File Not Found warnings can appear incorrectly
issue#3079: Allow domain names to be stripped from a device's long description
issue#3080: Remote Agent throws warnings that graph_nolegend has not been sanitized
issue#3085: When editing a poller, ensure each listening IP is unique
issue#3081: External Links are not showing a glyph when they appear on the Console menu
issue#3089: When viewing graphs in realtime, undefined variable can be logged for 95th Percentile graphs
issue#3099: Graph template 'Linux - Memory Usage' has the wrong unit on its vertical_label
issue#3101: Polling times can be slightly inconsistent due
issue#3104: When viewing graphs, a byref error can be seen in the error logs
issue#3105: When viewing hosts, some input variables are not properly checked
issue#3111: When adding devices via command line, bad SNMP versions are not reported
issue#3112: When zooming on Graphs, too many requests are being made causing slowness
issue#3114: Support for USB devices that change name due to their hosts restarting
issue#3118: When converting tables, the dynamic row format should be selected
issue#3119: Main Data Collector should perform a Full Sync whenever it is installed/upgraded
issue#3120: Correct issues causing incompatibility with PHP 7.4
issue#3121: When converting tables during install, show what will be changed
issue#3123: Named colors table is not properly imported/upgraded
issue#3124: When a second data collector is added, boost is not enabled automatically
issue#3128: i18n handler checks for existence of wrong mo file
issue#3129: Logout repeated occurs even when already logged out
issue#3132: Installer fails to continue if automation range is array of networks
feature#3077: Allow disabling remote poller resource cache replication to support upgrade testing

*** Reporting Issues ***

http://www.cacti.net/issues.php

*** Download Cacti ***

http://www.cacti.net/download_cacti.php

*** Download Spine ***

http://www.cacti.net/spine_download.php


Thanks!
The Cacti Group

[cacti-user] Automatyczna odpowiedź ( Release of Cacti 1.2.7)

[Autoresponder <jjbry@op...>]