Release of Cacti 1.2.28

Thank you everyone who are using Cacti and especially those helping to make Cacti better!

For additional details check out the README located on GitHub.

Contribute

Active development of Cacti is located on GitHub! Join us in making Cacti better, submit issues, fork and submit pull requests!

Cacti Change Log

security #GHSA-49f2-hwx9-qffr: XSS vulnerability when creating external links with the consolenewsection parameter
security #GHSA-fgc6-g8gc-wcg5: XSS vulnerability when creating external links with the title parameter
security #GHSA-gxq4-mv8h-6qj4: RCE vulnerability can be executed via Log Poisoning
security #GHSA-wh9c-v56x-v77c: XSS vulnerability when creating external links with the fileurl parameter
issue #5636: When using LDAP authentication the first time, warnings may appear in logs
issue #5754: When installing, a replication loop for plugin_realms may occur
issue #5759: When installing, remote poller may attempt to sync with other pollers
issue #5768: When a Data Query has a space, indexes may not be properly escaped
issue #5771: Boost does not always order data source records properly
issue #5772: Add IP address to the login audit for successful logins by xmacan
issue #5773: Undefined variable error may sometimes occur when dealing with RRD output by MSS970
issue #5777: When export to CSV, only the first line of notes is included
issue #5780: When rendering forms, missing default value can cause errors
issue #5782: Allow hosted content to be executable for the links page
issue #5783: When closing database connections, some may linger incorrectly
issue #5785: When changing passwords, an infinite loop may occur by ddb4github
issue #5790: When using Cacti Daemon, a "Cron out of sync" message may be reported
issue #5791: Add ability to filter/sort users by group or last login time
issue #5792: When using List View, unable to add Graphs to a Report
issue #5797: When using SNMPv3, some devices may show polling issues
issue #5802: Limit table conversion to Cacti core tables
issue #5806: Fix issues with posix-based kills on Windows
issue #5813: When installing, password changes may fail on new installations
issue #5814: When using structured RRD folders, permission issues may be flagged incorrectly
issue #5823: When unable to locate a valid theme, new default will be Modern
issue #5824: Properly cache the data source information for dsstats processing
issue #5840: When reindexing, verify all fields may not work as intended
feature #5784: Add ability to log database connections/disconnections
feature #5796: Add Ping Method where connection refused assumes host is up
feature #5819: When displaying graphs, default end time does not show full 24 hour period
feature #5825: Add --id to remove_device.php
feature #5828: Add Location and Site to Graph List View
feature #5830: Add more verbose logging to Boost
feature: Update jQuery to 3.7.1
feature: Update jQueryUI to 1.14.0
feature: Update Purify.js to 3.1.6
feature: Update billboard.js to 3.13.0
feature: Improve the performance of the repopulation of the poller cache