diff --git a/CHANGELOG b/CHANGELOG index 19831a64bf..e6c99ff0c7 100644 --- a/CHANGELOG +++ b/CHANGELOG @@ -5,8 +5,8 @@ Cacti CHANGELOG -security#4576: Device, Graph, Graph Template, and Graph Items may be vulnerable to XSS issues -security#4579: Lockout policies are not properly applied to LDAP and Domain Users -security#4593: When using 'remember me' option, incorrect realm may be selected --security#4678: SQL Injection is possible in User and User Group Administration. Thanks @enesdex (CVE-2021-23225) --security#4679: It is possible to have an XSS on the Color Templates page. Thanks @M0rphling +-security#4678: User and Group maintenance are vulnerable to SQL attacks +-security#4679: Color Templates are vulnerable to XSS attack -issue#3816: When replicating data during installation/upgrade, system may appear to hang -issue#4363: Graph Template Items may have duplicated entries -issue#4435: Unable to Save Graph Settings @@ -97,26 +97,26 @@ Cacti CHANGELOG -issue#4654: When saving a data template, replication may cause errors -issue#4658: When upgrading from pre-1.0, tree information may not properly update by ddb4github -issue#4659: When moving a device between pollers, errors may occur --issue#4666: Work around stricter typing in PHP 8.1.2 when performing some date calculations --issue#4671: At 30 second data collection in PHP 8.1.2 PHP reports a loss of precision in poller.php --issue#4672: Reports Drag and Drop not functioning --issue#4680: On rare occasions such as disk full cases and viewing one of the Graph Pages backtraces can occur +-issue#4666: Add date calculation support for PHP 8 +-issue#4671: Add poller sleeping support for PHP 8 +-issue#4672: When editing Reports, drag and drop may not function as intended +-issue#4680: When data drive is full, viewing a Graph can result in errors -feature#4574: On larger systems, permissions may need alternative methods -feature#4631: When creating a Data Source Profile, allow additional choices for Heartbeat -feature#4636: Upgrade jQueryMulti-select to 3.0.1 -feature#4637: Change select all options to use Font Awesome icons -feature#4641: Improve spine performance by storing the total number of system snmp_ports in use -feature#4663: Prevent Template User Accounts from being Removed --feature#4664: Allow The User Management interface to be filterable by Realm --feature#4665: Allow the get_template_account() function to be hookable by third party plugin --feature#4667: Create more Filters for CLog Types --feature#4668: Create Graph Template Item Data Template filter for ease of Use --feature#4669: Expose hidden Language Translation setting l10n_language_handler --feature#4673: Add Device Packages for Synology, Citrix NetScaler, Cisco ASA, and Improve Cisco Router Device Packages --feature#4674: Add the Advanced Ping Graph Template to a Graph Template Package --feature#4675: Add LDAP Debug Mode option for testing LDAP specific connection issues --feature#4676: Allow a Device to be a part of a Report outside of a Tree --feature#4677: Allow Basic Authentication to display customer login failed message +-feature#4664: When managing by users, allow filtering by Realm +-feature#4665: Allow plugins to supply template account names +-feature#4667: When viewing logs, additional message types should be filterable +-feature#4668: When creating a Graph Template Item, allow filtering by Data Template +-feature#4669: Allow language handler to be selected via UI +-feature#4673: Updated Device packages for Synology, Citrix NetScaler, Cisco ASA/Cisco +-feature#4674: Add Advanced Ping Graph Template to initial Installable templates +-feature#4675: Add LDAP Debug Mode option +-feature#4676: Allow Reports to include devices not on a Tree +-feature#4677: Allow Basic Authentication to display custom failure message 1.2.19 -security#4356: Further fixes for grave character security protection