openSUSE-SU-2022:10170-1

See a problem?

Import Source

https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2022:10170-1.json

JSON Data

https://api.osv.dev/v1/vulns/openSUSE-SU-2022:10170-1

Published

2022-10-30T15:06:55Z

Modified

2022-10-30T15:06:55Z

Summary

Security update for cacti, cacti-spine

Details

This update for cacti, cacti-spine fixes the following issues:

cacti-spine 1.2.22, delivering a number of bug fixes:

When polling time is exceed, spine does not always exit as expected
Spine logging at -V 5 includes an extra line feed
Incorrect SNMP responses can cause spine to crash
Properly handle devices that timeout responding to the Extended Uptime
MariaDB can cause spine to abort prematurely despite error handling
Spine should log the error time when exiting via signal

cacti-spine 1.2.21:

Disable DES if Net-SNMP doesn't have it

cacti 1.2.22, providing one security fix, a number of bug fixes and a collection of improvements:

When creating new graphs, cross site injection is possible (boo#1203952)
When creating user from template, multiple Domain FullName and Mail are not propagated
Nectar Aggregate 95th emailed report broken
Boost may not find archive tables correctly
Users may be unable to change their password when forced during a login
Net-SNMP Memory Graph Template has Wrong GPRINT
Search in tree view unusable on larger installations
Increased bulk insert size to avoid partial inserts and potential data loss.
Call to undefined function boost_debug in Cacti log
When no guest template is set, login cookies are not properly set
Later RRDtool releases do not need to check last_update time
Regex filters are not always long enough
Domains based LDAP and AD Fullname and Email not auto-populated
Cacti polling and boost report the wrong number of Data Sources when Devices are disabled
When editing Graph Template Items there are cases where VDEF's are hidden when they should be shown
Database SSL setting lacks default value
Update default path cacti under *BSD by xmacan
Web Basic authentication not creating template user
Unable to change the Heartbeat of a Data Source Profile
Tree Search Does Not Properly Search All Trees
When structured paths are setup, RRDfiles may not always be created when possible
When parsing the logs, caching would help speed up processing
Deprecation warnings when attempting real-time Graphs with PHP8.1
Custom Timespan is lost when clicking other tree branches
Non device based Data Sources not being polled
When Resource XML file inproperly formatted, graph creation can fail with errors
Update code style to support PHP 8 requirements
None' shows all graphs
Realtime popup window experiences issues on some browsers
Auth settings do not always properly reflect the options selected by ddb4github
MySQL can cause cacti to become stalled due to locking issues
Boost process can get hung under rare conditions until the poller times out
Exporting graphs under PHP 8 can cause errors
Host table has wrong default for disabled and deleted columns
RRD storage paths do not scale properly
When importing, make it possible to only import certain components
Update change_device script to include new features by bmfmancini
Make help pages use latest online version wherever possible
Cacti should show PHP INI locations during install
Detect PHP INI values that are different in the INI vs running config
Added Gradient Color support for AREA charts by thurban
Update CDEF functions for RRDtool
When boost is running, it's not clear which processes are running and how long they have to complete

cacti 1.2.21:

Add a CLI script to install/enable/disable/uninstall plugins
Add log message when purging DS stats and poller repopulate
A collection of bug fixes

References

Affected packages

openSUSE:Leap 15.3

cacti

Package

Name: cacti
Purl: pkg:rpm/opensuse/cacti&distro=openSUSE%20Leap%2015.3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.2.22-bp154.2.3.1

Ecosystem specific

{
    "binaries":  [
        {
            "cacti":  "1.2.22-bp154.2.3.1",
            "cacti-spine":  "1.2.22-bp154.2.3.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2022:10170-1.json"

cacti-spine

Package

Name: cacti-spine
Purl: pkg:rpm/opensuse/cacti-spine&distro=openSUSE%20Leap%2015.3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.2.22-bp154.2.3.1

Ecosystem specific

{
    "binaries":  [
        {
            "cacti":  "1.2.22-bp154.2.3.1",
            "cacti-spine":  "1.2.22-bp154.2.3.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2022:10170-1.json"

openSUSE:Leap 15.4

cacti

Package

Name: cacti
Purl: pkg:rpm/opensuse/cacti&distro=openSUSE%20Leap%2015.4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.2.22-bp154.2.3.1

Ecosystem specific

{
    "binaries":  [
        {
            "cacti":  "1.2.22-bp154.2.3.1",
            "cacti-spine":  "1.2.22-bp154.2.3.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2022:10170-1.json"

cacti-spine

Package

Name: cacti-spine
Purl: pkg:rpm/opensuse/cacti-spine&distro=openSUSE%20Leap%2015.4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.2.22-bp154.2.3.1

Ecosystem specific

{
    "binaries":  [
        {
            "cacti":  "1.2.22-bp154.2.3.1",
            "cacti-spine":  "1.2.22-bp154.2.3.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2022:10170-1.json"

SUSE:Package Hub 12

cacti

Package

Name: cacti
Purl: pkg:rpm/suse/cacti&distro=SUSE%20Package%20Hub%2012

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.2.22-bp154.2.3.1

Ecosystem specific

{
    "binaries":  [
        {
            "cacti":  "1.2.22-bp154.2.3.1",
            "cacti-spine":  "1.2.22-bp154.2.3.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2022:10170-1.json"

cacti-spine

Package

Name: cacti-spine
Purl: pkg:rpm/suse/cacti-spine&distro=SUSE%20Package%20Hub%2012

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.2.22-bp154.2.3.1

Ecosystem specific

{
    "binaries":  [
        {
            "cacti":  "1.2.22-bp154.2.3.1",
            "cacti-spine":  "1.2.22-bp154.2.3.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2022:10170-1.json"

SUSE:Package Hub 15 SP3

cacti

Package

Name: cacti
Purl: pkg:rpm/suse/cacti&distro=SUSE%20Package%20Hub%2015%20SP3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.2.22-bp154.2.3.1

Ecosystem specific

{
    "binaries":  [
        {
            "cacti":  "1.2.22-bp154.2.3.1",
            "cacti-spine":  "1.2.22-bp154.2.3.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2022:10170-1.json"

cacti-spine

Package

Name: cacti-spine
Purl: pkg:rpm/suse/cacti-spine&distro=SUSE%20Package%20Hub%2015%20SP3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.2.22-bp154.2.3.1

Ecosystem specific

{
    "binaries":  [
        {
            "cacti":  "1.2.22-bp154.2.3.1",
            "cacti-spine":  "1.2.22-bp154.2.3.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2022:10170-1.json"

SUSE:Package Hub 15 SP4

cacti

Package

Name: cacti
Purl: pkg:rpm/suse/cacti&distro=SUSE%20Package%20Hub%2015%20SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.2.22-bp154.2.3.1

Ecosystem specific

{
    "binaries":  [
        {
            "cacti":  "1.2.22-bp154.2.3.1",
            "cacti-spine":  "1.2.22-bp154.2.3.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2022:10170-1.json"

cacti-spine

Package

Name: cacti-spine
Purl: pkg:rpm/suse/cacti-spine&distro=SUSE%20Package%20Hub%2015%20SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.2.22-bp154.2.3.1

Ecosystem specific

{
    "binaries":  [
        {
            "cacti":  "1.2.22-bp154.2.3.1",
            "cacti-spine":  "1.2.22-bp154.2.3.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2022:10170-1.json"