Cacti 0.8.6f Out

[raX]

Cacti 0.8.6f has been released after the Hardened-PHP project found some additional security vulnerabilities overlooked by the iDEFENSE group. All users are highly recommended to upgrade to this version as soon as possible.

For convenience, patches against 0.8.6e and 0.8.6d with the 0.8.6e patch have been created. See the release notes for additional details.

The complete changelog is below:

Code: Select all

-security: Hardened PHP Project Advisory #042005 - Cacti Authentication/Addslashes Bypass Vulnerability
-security: Hardened PHP Project Advisory #022005 - Cacti Multiple SQL Injection Vulnerabilities
-security: Hardened PHP Project Advisory #032005 - Cacti Remote Command Execution Vulnerability

-Ian