-------------------------------------------------------------------

Mon Dec 29 15:17:23 UTC 2014 - cs@linux-administrator.com

​

- removed cacti-0.8.8b_COMMENT.patch

- update to release 0.8.8c

   bug#0002228: GPL incompatible files included in Cacti project in include/treeview

   bug#0002383: Sanitize the step and id variables CVE-2013-5588, CVE-2013-5589

   bug#0002385: Cannot export host templates while including dependencies

   bug#0002386: cli/upgrade_database.php is missing the last two releases

   bug#0002390: Poller/script issue with slash and backslash

   bug#0002405: SQL injection in graph_xport.php

   bug#0002431: CVE-2014-2326 Unspecified HTML Injection Vulnerability

   bug#0002432: CVE-2014-2327 Cross Site Request Forgery Vulnerability - Special Thanks to Deutsche Telekom CERT

   bug#0002433: CVE-2014-2328 Unspecified Remote Command Execution Vulnerability

   bug#0002434: Suppress SNMP UNITS Suffix from cacti_snmp_get() output

   bug#0002438: Down Host Detection issue when using SNMP Desc or SNMP getNext

   bug#0002446: Subtract plugin processing time from Poller sleep time

   bug#0002453: CVE-2014-4002 Cross-Site Scripting Vulnerability - Special Thanks to G. Geshev (munmap)

   bug#0002455: Incomplete and incorrect input parsing leads to remote code execution and SQL injection attack scenarios

   bug#0002456: CVE-2014-5025 / CVE-2014-5026 - Cross-Site Scripting Vulnerability - Special Thanks to Adan Alvarez and Paul Gevers

   bug: Fix COMMENT handling, even in case COMMENT is empty, with or without HR and with variable substitution

   bug: Fix issues when SNMP data holds a "="; "explode" must be treated accordingly

   bug: Fix filter highlighting on data sources for the data template field

   bug: correct description of SNMP V3 parameters

   feature: Added native jquery, jqueryui, and jstree

   feature: Fixed issues with 'Clear' under preview not working

   feature: Added new Tree navigation

   feature: Added Columns and Thumbnails to Preview

   feature: Added Columns to Tree (Preview only)

   feature: Both Graphs and Columns default to 'Default'

   feature: Resolved Left hand navigation taking entire page

   feature: Added new graph zoom to tree view and preview offering a "quick" (default) and an "advanced" mode 

​

-------------------------------------------------------------------

Sat Mar 15 15:45:31 UTC 2014 - cs@linux-administrator.com

​

- update spec

- added cacti-0.8.8b_COMMENT.patch 

​

-------------------------------------------------------------------

Wed Aug  7 19:46:08 UTC 2013 - cs@linux-administrator.com

​

- udpate to release 0.8.8b

   bug: Fixed issue with custom data source information being lost when saved from edit

   bug: Repopulate the poller cache on new installations

   bug: Fix issue with poller not escaping the script query path correctly

   bug: Allow snmpv3 priv proto none

   bug: Fix issue where host activate may flush the entire poller item cache

   security: SQL injection and shell escaping issues

​

-------------------------------------------------------------------

Thu May  3 18:35:21 UTC 2012 - cs@linux-administrator.com

​

- update to release 0.8.8a

   bug#0002207: cannot export graph templates

   bug#0002208: Graphs with CDEFs fail to generate

   bug#0002209: External auth does not work behind a reverse proxy

   bug#0002211: creating an index USING BTREE fails ony MySQL < 5.0.60

   bug#0002213: CLI upgrade script is missing 0.8.7i as a target

   bug#0002214: SQL error during non-PIA upgrade to 088 when giving a default for a text field in plugin_realms

   bug#0002216: use of define_syslog_variables() gone in PHP 5.4

   bug#0002217: url_path should default to /cacti/

   bug#0002221: Missing plugin directory causes endless loop in plugins.php

   bug#0002222: tail_logfile hangs when cacti.log not readable, filling apache log with fgets warnings  

​