Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package cacti for openSUSE:Factory checked in at 2026-02-24 15:38:43 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/cacti (Old) and /work/SRC/openSUSE:Factory/.cacti.new.1977 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "cacti" Tue Feb 24 15:38:43 2026 rev:53 rq:1334575 version:1.2.30+git231.bca15e70c Changes: -------- --- /work/SRC/openSUSE:Factory/cacti/cacti.changes 2025-04-04 17:30:04.378409538 +0200 +++ /work/SRC/openSUSE:Factory/.cacti.new.1977/cacti.changes 2026-02-24 15:39:38.609013842 +0100 @@ -1,0 +2,65 @@ +Mon Feb 23 15:31:27 UTC 2026 - [email protected] + +- Update to latest release/1.2.30+git231.bca15e70c: + - Updates since 1.2.30: + * security#GHSA-6RVG-2VM8-5WRF: CVE-2026-22802 Authentication Bypass leads to information disclosure + * security: CVE-2026-1513 billboard.js before 3.18.0 Improper Input Sanitization Allows Remote JavaScript Execution + * issue#6168: When purging RRD files, paths are not correctly handled + * issue#6202: When using automation, devices may not be added as expected + * issue#6204: Attempting to match a field in automation may cause unexpected errors + * issue#6210: Ensure column names are escaped to prevent reserved word issues + * issue#6240: Improve sort order for incorrect RRA's + * issue#6249: Unable to send Email to users without a domain name + * issue#6251: When viewing a graph, do not produce unnecessary errors if graph has been removed + * issue#6253: When i18n formatting numbers, assume null means 0 by xmacan + * issue#6257: When data sources are removed, ensure only RRD files are removed by xmacan + * issue#6262: When the database connection drops during query, retry to ensure success + * issue#6270: Incorrect escaping may prevent drop downs working as intended + * issue#6271: When validation errors occur, provide more information to help diagnosis + * issue#6283: When calculating total pages, ensure math errors do not occur + * issue#6292: When validating null request variables, fatal errors may occur + * issue#6294: Automation may produce unexpected warnings when detecting the OS + * issue#6296: Process timeouts may not end processes as expected + * issue#6297: Improve support for Secure SMTP + * issue#6299: Improve email address handling to support UTF8 + * issue#6313: When editing multiple devices, unexpected errors may be recorded + * issue#6314: When editing an Aggregation Graph, total count may not reflect number of items correctly + * issue#6315: When duplicating a Data Input Method, unexpected errors may occur + * issue#6326: Improve SNMP v3 support for Cisco devices + * issue#6327: Implement Autocomplete standards for Login and Change Password + * issue#6329: When using LDAP, checking a user's groups may cause unexpected errors + * issue#6331: When upgrading from pre-1.0.5, unexpected errors may occur by YATV + * issue#6334: When creating Aggregate graphs, unable to hide HRULE and COMMENT based items + * issue#6335: Email addresses with leading or trailing spaces can cause issues + * issue#6441: Spikekill uses the wrong option for retention periods by 3432 + * issue#6444: When a Data Input's Title is applied, unexpected errors and values may be seen + * issue#6490: When using Clear All on Selective Debug, first item is reselected + * issue#6507: Importing packages may not work as expected by xmacan + * issue#6508: When exporting graphs, data issues may lead to unexpected errors by xmacan + * issue#6516: When modifying Graph Automation Rules, unexpected errors may be logged + * issue#6518: Improve security of CSRF Secret by SMark-Black + * issue#6519: When using Real Time graphing, unexpected errors may appear if graph is removed + * issue#6546: Restore some missing SNMP Script Server configurations + * issue#6551: Improve support for FreeBSD when Auditing Databases by xmacan + * issue#6573: Create new device_change_javascript hook for THOLD plugin by xmacan + * issue#6598: Improve PHP 8 support by TheWitness + * issue#6600: When replicating plugins, unexpected errors may appear due to missing tables + * issue#6605: Prevent Row Data Loss When Rebuilding RRD Files + * issue#6606: When using SpikeKill, actions would not always lead to expected results + * feature#6523: When disabling users, ensure that their authentication cookies and sessions cleared + * feature#6524: When changing your password, log off from all sessions + * feature#6534: Improve Cacti Session ID security + * feature#6607: Implement session security on Password change + * feature: Update DOMPurify to 3.3.0 + * feature: Update PHPMailer to 6.10 to support SMTPUTF8 + * feature: Update phpseclib for the Service Check plugi +- Add _service file for easier package source management + +------------------------------------------------------------------- +Mon Feb 2 14:14:48 UTC 2026 - Joel Baltazor <[email protected]> + +- Update requires/recommends for better fresh install experience + - Requires: php-intl + - Recommends: php-gettext php-pcntl mysql-tools + +------------------------------------------------------------------- Old: ---- cacti-1.2.30.tar.gz New: ---- _service _servicedata cacti-1.2.30+git231.bca15e70c.obscpio cacti-1.2.30+git231.bca15e70c.tar.gz cacti.obsinfo ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ cacti.spec ++++++ --- /var/tmp/diff_new_pack.Qhze9v/_old 2026-02-24 15:39:39.789062677 +0100 +++ /var/tmp/diff_new_pack.Qhze9v/_new 2026-02-24 15:39:39.789062677 +0100 @@ -32,7 +32,7 @@ %bcond_with systemd %endif Name: cacti -Version: 1.2.30 +Version: 1.2.30+git231.bca15e70c Release: 0 Summary: Web Front-End to Monitor System Data via RRDtool License: GPL-2.0-or-later @@ -56,6 +56,7 @@ Requires: php-ctype Requires: php-gd Requires: php-gmp +Requires: php-intl Requires: php-json Requires: php-ldap Requires: php-mbstring @@ -64,6 +65,9 @@ Requires: php-snmp >= 7.0 Requires: php-zlib Requires: rrdtool +Recommends: php-gettext +Recommends: php-pcntl +Recommends: mysql-tools Conflicts: cacti-spine < %{version} Conflicts: cacti-spine > %{version} Provides: cacti-system = %{version}-%{release} ++++++ _service ++++++ <services> <service name="obs_scm" mode="manual"> <param name="url">https://github.com/Cacti/cacti.git</param> <param name="scm">git</param> <param name="exclude">.git</param> <param name="revision">1.2.x</param> <param name="versionformat">@PARENT_TAG@+git@TAG_OFFSET@.%h</param> <!-- Removes "release/" from the beginning of the version string --> <param name="versionrewrite-pattern">release/(.*)</param> <param name="versionrewrite-replacement">\1</param> <param name="filename">cacti</param> <param name="changesgenerate">enable</param> <param name="changesauthor">[email protected]</param> </service> <service name="set_version" mode="manual"> <param name="file">cacti.spec</param> </service> <service mode="buildtime" name="tar" /> <service mode="buildtime" name="recompress"> <param name="file">*.tar</param> <param name="compression">gz</param> </service> </services> ++++++ _servicedata ++++++ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/Cacti/cacti.git</param> <param name="changesrevision">bca15e70cf64324a9c6714fa538024ac65d0f464</param></service></servicedata> (No newline at EOF) ++++++ cacti.obsinfo ++++++ name: cacti version: 1.2.30+git231.bca15e70c mtime: 1771773301 commit: bca15e70cf64324a9c6714fa538024ac65d0f464
