Release of Cacti 1.2.20

Thank you everyone who are using Cacti and especially those helping to make Cacti better!

For additional details check out the README located on GitHub.

Some notable changes that appear in this release are:

• Authentication now provides support for external auth services
• Performance improvements with Graph Templates, Reports and Permissions
• Additional device templates supplied for import during install/upgrade
• Improved remote Data Collector handling

Contribute

Active development of Cacti is located on GitHub! Join us in making Cacti better, submit issues, fork and submit pull requests!

Cacti Change Log

• security #4562: When using LDAP, authentication process may be bypassed
• security #4576: Device, Graph, Graph Template, and Graph Items may be vulnerable to XSS issues
• security #4579: Lockout policies are not properly applied to LDAP and Domain Users
• security #4593: When using 'remember me' option, incorrect realm may be selected
• security #4678: User and Group maintenance are vulnerable to SQL attacks
• security #4679: Color Templates are vulnerable to XSS attack
• issue #3816: When replicating data during installation/upgrade, system may appear to hang
• issue #4363: Graph Template Items may have duplicated entries
• issue #4435: Unable to Save Graph Settings
• issue #4449: Script Server may crash if an OID is missing or unavailable
• issue #4451: When system-wide polling is disabled, remote pollers may fail to sync changed settings
• issue #4455: When updating poller name, duplicate name protection may be over zealous
• issue #4457: Titles may show "Missing Datasource" incorectly
• issue #4458: Checking for MIB Cache can cause crashes
• issue #4460: Polling cycles may not always complete as expected
• issue #4461: When viewing graph data, non-numeric values may appear
• issue #4472: Utilities view has calculation errors when there are no data sources
• issue #4475: Add support for PHP 8
• issue #4477: Remote pollers do not force connection when online
• issue #4479: Rebuild Poller Cache CLI script should have filter options
• issue #4480: Saving a bad Data Template can damage Data Sources
• issue #4481: Reports still use Legacy attributes, despite having a format file
• issue #4482: Graph Automation slowed by in-efficient index selection
• issue #4491: When rebuilding poller cache, SNMP settings do not properly update
• issue #4492: When an OID starts with space, SNMP returns undefined data
• issue #4495: Datasource Statistics may obtain invalid data for some rebooted devices
• issue #4498: When attempting to calculate width, some input elements may cause console errors
• issue #4500: Datasource Statistics may not scale properly on larger systems
• issue #4508: Changing Multi-Device SNMP settings may not work as expected
• issue #4509: Updating Items for a Graph Template may be slow on larger systems
• issue #4511: When using the time-based view, SVG Graphs may not resize properly
• issue #4512: When using API calls, graphs without data sources may be unremovable
• issue #4516: Add additional information to help when creating graphs from templates
• issue #4519: When remote host poll fails, poller ID may not be found and cause errors
• issue #4521: Backtraces Logged in Cacti 1.2.x Branch - Gettext Translation
• issue #4522: When entering custom input, layout issues may be seen
• issue #4528: When creating a device, default setting for Device Threads may be ignored
• issue #4529: Primary Admin account notifications may not work in certain cases
• issue #4530: On larger systems, user interface for reporting may become unusable
• issue #4536: When using Web Basic Authentication, user is always mapped as guest.
• issue #4539: When handling plugin dependancies, notices may not be displayed properly
• issue #4540: Certain account types should not allow their enabled status to be changed
• issue #4543: Emails sent multiple times to the same address can be rejected
• issue #4545: Reports Tab always shows 'Administration' despite a users permissions
• issue #4546: When unauthorized, user may be redirected instead of notified
• issue #4547: Add debug options to LDAP for diagnostic purposes
• issue #4548: Rounding causes errors with variable substitution
• issue #4549: Boost may become disabled due to an invalid path
• issue #4551: Add support for PHP 8
• issue #4552: Error messages are not always cleared, resulting in duplicated messages.
• issue #4554: Add support for Automation under PHP 8
• issue #4557: When selecting a Consolidation Function, errors may be reported
• issue #4563: Breadcrumbs not always display the correct path
• issue #4564: When clicking tabs, page may not always respond
• issue #4567: Editing current user should prevent changes of account status
• issue #4568: Authentication cache does not always use the correct realm
• issue #4569: When editing users or groups, template permissions may not work as intended
• issue #4571: When changing authentication method, unneeded settings may not be hidden
• issue #4572: When basic authentication is used, login screen should not be seen
• issue #4573: On larger systems, permission checks may render system unusable
• issue #4575: When you delete a user, cookie data is not automatically removed
• issue #4577: When editing current user, last administrator may be removed
• issue #4578: The Cacti login algorithm is complicated to understand due to too much strait line code
• issue #4580: When using Web Basic Authentication, users may be seen as guests
• issue #4586: When viewing graphs, excess database queries may occur
• issue #4587: Settings may be read more often than required
• issue #4588: Unable to save host with multi-byte characters
• issue #4589: When updating tables, ensure engine, row_format and charset by ddb4github
• issue #4594: When selecting font, attempt to use system-based font before internally supplied version by ddb4github
• issue #4597: Selective Device Debug does not work with Remote Data Collectors
• issue #4598: Plugin tab does not stay visible when main poller is offline
• issue #4603: When failing back to PHP GetText, module is not always selected
• issue #4607: Configuration file may be improperly moved into the resource cache
• issue #4609: When handling sessions, user agent may not always be present
• issue #4610: When hiding disabled devices, some may still be shown
• issue #4611: When replicating to remote pollers, plugins are not always properly sync'd
• issue #4612: When using cookie authentication, Same Site support does not always work properly
• issue #4613: Newer versions of MySQL/MariaDB may prevent structure replication changes
• issue #4614: Add support for hooks during polling loop or at poller end
• issue #4615: Plugin status on a Remote Data Collector may not always be detectable
• issue #4616: When performing certain plugin actions, replication should be forced to Remote Collectors
• issue #4617: When removing a plugin, removed tables are not removed from remote pollers
• issue #4618: When plugin exceed runtimes, they should not be automatic disabled
• issue #4620: When using CLI, Remote Data Collector scripts may connect to the wrong database
• issue #4623: Boost does not operate as it should in certain situations
• issue #4624: System uptime may be missing under certain circumstances
• issue #4629: When removing many Graphs and Data Sources, polling cycles may overrun
• issue #4630: Session data is not always started correctly
• issue #4632: When creating a Datasource, Input Field Checking is not always enforced
• issue #4634: When using Basic Authentication, the Logout Everywhere button should not be shown
• issue #4645: When format file does not exist, changing certain settings may result in errors
• issue #4651: Device Description is not consistent in Poller Cache view
• issue #4652: After repopulating graph, navigation to check cumbersome
• issue #4654: When saving a data template, replication may cause errors
• issue #4658: When upgrading from pre-1.0, tree information may not properly update by ddb4github
• issue #4659: When moving a device between pollers, errors may occur
• issue #4666: Add date calculation support for PHP 8
• issue #4671: Add poller sleeping support for PHP 8
• issue #4672: When editing Reports, drag and drop may not function as intended
• issue #4680: When data drive is full, viewing a Graph can result in errors
• feature #4574: On larger systems, permissions may need alternative methods
• feature #4631: When creating a Data Source Profile, allow additional choices for Heartbeat
• feature #4636: Upgrade jQueryMulti-select to 3.0.1
• feature #4637: Change select all options to use Font Awesome icons
• feature #4641: Improve spine performance by storing the total number of system snmp_ports in use
• feature #4663: Prevent Template User Accounts from being Removed
• feature #4664: When managing by users, allow filtering by Realm
• feature #4665: Allow plugins to supply template account names
• feature #4667: When viewing logs, additional message types should be filterable
• feature #4668: When creating a Graph Template Item, allow filtering by Data Template
• feature #4669: Allow language handler to be selected via UI
• feature #4673: Updated Device packages for Synology, Citrix NetScaler, Cisco ASA/Cisco
• feature #4674: Add Advanced Ping Graph Template to initial Installable templates
• feature #4675: Add LDAP Debug Mode option
• feature #4676: Allow Reports to include devices not on a Tree
• feature #4677: Allow Basic Authentication to display custom failure message

Reporting Issues

http://www.cacti.net/issues.php

Download Cacti

http://www.cacti.net/download_cacti.php

Download Spine

http://www.cacti.net/spine_download.php

Thanks!
The Cacti Group