吴昊博客原创Cacti新版系列教程：https://blog.whsir.com/post-4617.html
Cacti1.2.12更新日志：
安全性更新#3467: CVE-2020-7106转义导致XSS漏洞
问题#3422: 当图形项没有链接到数据源时，注释不一定总能正确替换变量
问题#3424: 未设置位置过滤器时，主机过滤不正确
问题#3427: 导出为带有Unicode字符的CSV时，内容可能会出现乱码
问题#3429: 当使用SNMP v3时，自动化可以报告无关的警告
问题#3432: 同时启用boost和dsstats时，会有问题
问题#3434: Cacti使用警报时，可以看到意外的错误
问题#3436: 由于config.php.dist中默认的Cookie域错误，因此无法登录
问题#3438: 当升级到1.2.11时，安装程序会在42%时停止
问题#3447: PHP最新版本的SNMP问题
问题#3449: 在安装向导的“目录许可权检查”步骤中，“目录路径”列太小而无法显示大多数路径
问题#3450: 在XAMPP和PHP 7.4下安装Cacti时，会记录异常并导致安装失败
问题#3452: 新的内容安全策略可防止打开外部链接
问题#3454: Cacti的报告没有正确地显示消息
问题#3457: 图形不能正确处理负轴值
问题#3459: 安装新的远程轮询器时，连接测试可能会错误地失败
问题#3460: ddb4github可以更好地处理插件文件夹/显示名称的添加更改
问题#3462: 增加cli脚本的默认内存限制，以防止运行时出现内存问题
问题#3463: 在列出VDEF时，选择'has graph'可能导致日志中出现异常
问题#3468: 不能为自动化创建图形规则
问题#3474: 设置SSL_CA的SSL选项对于客户端连接应该是可选的
问题#3477: 重建索引时，如果禁用了数据源，可能会导致内存泄漏
问题#3478: 重新索引有时可能会比预期的时间更长
问题#3479: 在查看数据查询表接口时，右对齐的问题
问题#3483: 在记录日志条目时，cacti应该默认为字符日期格式
问题#3484: 编辑SNMP v3密码时，不会混淆先前的设置
问题#3488: 在自动化中，查看一个“SNMP选项集”时，私有密码是可见的
问题#3495: 安装模板时，默认的“全部”选择将重置所有现有图形，并删除自定义项
问题#3496: 图形项可能不正确地显示双百分号
问题#3502: 查看图表时，无法在列表，预览和树模式之间切换
问题#3504: 在轮询器第一次运行之前查看图形可能会产生错误
问题#3505: 查看图形预览时，单击“执行”或“刷新”会阻止日历工作
问题#3506: 成功登录后，用户会自动退出
问题#3507: 对JavaScript的Storage API所做的更改会引发异常
问题#3510: 普通用户无法访问来宾页面
问题#3512: 当更新插件时，注册文件列表不能总是由ddb4github更新
问题#3520: 查看图形时，使用非英语语言时，改变时间不起作用
特性#3480: 创建'custom_denied'挂钩允许自定义权限被拒绝的通知
特性#3498: 将js.storage.js更新为1.1.0
特性#3499: 将jstree.js更新为3.3.9
特性#3500: 将phpseclib更新到2.0.27
原文如下：
原文地址：https://www.cacti.net/changelog.php
security#3467: Lack of escaping of color items can lead to XSS exposure (CVE-2020-7106)
issue#3422: When Graph Item is not linked to a data source, Comments do not always get variables substituted correctly
issue#3424: Hosts are being incorrectly filtered when no location filter is set
issue#3427: When exporting to a CSV with unicode characters, contents can become garbled
issue#3429: When using SNMP v3, Automation can report extraneous warnings
issue#3432: Rare race condition exists when both boost and dsstats enabled
issue#3434: When attempting to exploit Cacti using alert, unexpected errors can be seen
issue#3436: Unable to login due to incorrect default of Cookie Domains in config.php.dist
issue#3438: When upgrading to 1.2.11, installer can appear to stop at 42%
issue#3447: SNMP Issues on recent version of PHP
issue#3449: When viewing the installation wizard's directory permission step, items are overlapping unexpectedly
issue#3450: When installing Cacti under XAMPP and PHP 7.4, exceptions are being recorded and installation fails
issue#3452: New Content-Security-Policy prevents External Links from being opened
issue#3454: Cacti's Reports are not displaying messages correctly
issue#3457: Graphs can not properly handle negative axis values
issue#3459: When installing a new remote poller, connection tests can incorrectly fail
issue#3460: Addtional changes to allow plugin folder/display names to be handled better by ddb4github
issue#3462: Increase default memory limit for cli scripts to prevent runtime memory issues
issue#3463: When listing VDEF's, selecting 'has graph' can cause unexpected exceptions in logs
issue#3468: Graph rules cannot be created for automation
issue#3474: The SSL option to set the SSL_CA should be optional for Client Connections
issue#3477: Boost leaking memory when a large number of Data Sources disabled
issue#3478: Reindexing can sometimes run longer than expected
issue#3479: When viewing the Data Query table interface, the Data Input Method should be right aligned
issue#3483: When recording log entries, cacti should default to hyphenated date format
issue#3484: When editing SNMP v3 passwords, previous setting is not obfuscated
issue#3488: In automation, when viewing an 'SNMP option set', the private passphrase is in clear
issue#3495: When installing templates, default 'all' selection will reset all existing graphs, removing customisations
issue#3496: Graph Items can show a double percent sign incorrectly
issue#3502: When viewing Graphs, can not switch between list, preview and tree submodes
issue#3504: Viewing graphs before the poller has run for the first time can produce unexpected errors
issue#3505: When viewing graph previews, clicking Go or Refresh prevents calendars from working
issue#3506: After successfully logging in, a user can become automatically logged out again
issue#3507: Changes to JavaScript's Storage API cause exceptions to be thrown
issue#3510: Only guests can actually guest only pages, logged in users are denied access incorrectly
issue#3512: When plugins update, registered files list cannot always be updated by ddb4github
issue#3520: When viewing graphs, shifting time does not work when using non-english languages
feature#3480: Created 'custom_denied' hook to allow customisation of permission denied notifications
feature#3498: Update js.storage.js to 1.1.0
feature#3499: Update jstree.js to 3.3.9
feature#3500: Update phpseclib to 2.0.27
原文链接：Cacti1.2.12新版发布，更新日志，转载请注明来源！
