| 2012-01-11 13:08:41 |
Ákos Maróy |
bug |
|
|
added bug |
| 2012-01-21 08:42:01 |
Paul Gevers |
bug watch added |
|
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=656613 |
|
| 2012-01-21 08:42:01 |
Paul Gevers |
bug task added |
|
cacti (Debian) |
|
| 2012-01-21 09:21:36 |
Bug Watch Updater |
cacti (Debian): status |
Unknown |
Confirmed |
|
| 2012-01-22 09:42:10 |
Bug Watch Updater |
cacti (Debian): status |
Confirmed |
Fix Committed |
|
| 2012-02-06 13:51:46 |
Bug Watch Updater |
cacti (Debian): status |
Fix Committed |
Fix Released |
|
| 2012-03-09 05:58:21 |
Vibhav Pant |
attachment added |
|
patch.debdiff https://bugs.launchpad.net/ubuntu/+source/cacti/+bug/914746/+attachment/2838461/+files/patch.debdiff |
|
| 2012-03-09 06:02:25 |
Vibhav Pant |
bug |
|
|
added subscriber Ubuntu Sponsors Team |
| 2012-03-09 11:05:33 |
Daniel Holbach |
cacti (Ubuntu): status |
New |
Fix Released |
|
| 2012-06-04 13:55:46 |
Sim |
bug task added |
|
cacti |
|
| 2012-07-04 21:33:15 |
Paul Gevers |
attachment added |
|
Backport upstream commit 6942 https://bugs.launchpad.net/ubuntu/+source/cacti/+bug/914746/+attachment/3213530/+files/LP914746_data_query.patch |
|
| 2012-07-04 21:33:58 |
Paul Gevers |
attachment removed |
patch.debdiff https://bugs.launchpad.net/ubuntu/+source/cacti/+bug/914746/+attachment/2838461/+files/patch.debdiff |
|
|
| 2012-07-07 16:29:20 |
Paul Gevers |
attachment added |
|
Checked lucid patch https://bugs.launchpad.net/ubuntu/+source/cacti/+bug/914746/+attachment/3216082/+files/LP914746_regression_lucid_string_offset_in_data_query.patch |
|
| 2012-07-07 16:38:02 |
Julian Taylor |
tags |
|
regression-update |
|
| 2012-07-07 16:38:10 |
Julian Taylor |
nominated for series |
|
Ubuntu Lucid |
|
| 2012-07-07 16:38:10 |
Julian Taylor |
bug task added |
|
cacti (Ubuntu Lucid) |
|
| 2012-07-07 16:40:23 |
Julian Taylor |
bug |
|
|
added subscriber Julian Taylor |
| 2012-07-09 13:37:40 |
Stéphane Graber |
cacti (Ubuntu Lucid): status |
New |
Incomplete |
|
| 2012-07-09 21:03:39 |
Paul Gevers |
description |
when adding an SNMP - Interface statistics data query, and clicking on the 'verbose list' link, I get a 500 internal error, and the following line in the apache log file:
PHP Fatal error: Cannot use string offset as an array in /usr/share/cacti/site/lib/data_query.php on line 183, referer: http://localhost/cacti/host.php?action=edit&id=1
this prevents me from having network interface statistics followed by cacti.
additional info:
# lsb_release -rd
Description: Ubuntu 10.04.3 LTS
Release: 10.04
# apt-cache policy cacti
cacti:
Installed: 0.8.7e-2ubuntu0.2
Candidate: 0.8.7e-2ubuntu0.2
Version table:
*** 0.8.7e-2ubuntu0.2 0
500 http://mirror.us.leaseweb.net/ubuntu/ lucid-updates/universe Packages
500 http://security.ubuntu.com/ubuntu/ lucid-security/universe Packages
100 /var/lib/dpkg/status
0.8.7e-2 0
500 http://mirror.us.leaseweb.net/ubuntu/ lucid/universe Packages
# apt-cache policy php5
php5:
Installed: 5.3.2-1ubuntu4.11
Candidate: 5.3.2-1ubuntu4.11
Version table:
*** 5.3.2-1ubuntu4.11 0
500 http://mirror.us.leaseweb.net/ubuntu/ lucid-updates/main Packages
500 http://security.ubuntu.com/ubuntu/ lucid-security/main Packages
100 /var/lib/dpkg/status
5.3.2-1ubuntu4 0
500 http://mirror.us.leaseweb.net/ubuntu/ lucid/main Packages |
[IMPACT]
* If you try to turn on "SNMP - Interface Statistics" on a host with SNMP facilities turned off, the current behavior of cacti is that it generates a php error instead of catching the empty result. As this behavior is basically strange user behavior, the impact is small. I don't think this warrants an SRU, but still my patch fixes the issue by testing for empty results (as is intended by the code) and thus allowing the php code to return normally (although still not telling you what went wrong).
[TESTCASE]
* With cacti installed and configured, go to the /cacti/host.php page (via the "devices" link on every cacti page) and select a device (e.g. localhost)
* Make sure that in the SNMP Options section the SNMP Version is set to "Not In Use"
* In the "Associated Data Queries" part, select "SNMP - Interface Statistics" in the "Add data query" drop down selection box and press "Add".
* The next screen is blank.
* In the apache error.log you will find:
PHP Fatal error: Cannot use string offset as an array in /usr/share/cacti/site/lib/data_query.php on line 183, referer: http://localhost/cacti/host.php?action=edit&id=1
* After the patch the result will be return to the host.php file, but it will show the added "SNMP - Interface Statistics" with "Success [0 Items, 0 Rows]"
[Regression Potential]
* I don't know how adding a check for emptyness of a variable that should not be empty can cause regression. Maybe somebody else can come up with one?
[Other Info]
* As mentioned before, I am not sure this issue warrants a SRU.
[original report]
when adding an SNMP - Interface statistics data query, and clicking on the 'verbose list' link, I get a 500 internal error, and the following line in the apache log file:
PHP Fatal error: Cannot use string offset as an array in /usr/share/cacti/site/lib/data_query.php on line 183, referer: http://localhost/cacti/host.php?action=edit&id=1
this prevents me from having network interface statistics followed by cacti.
additional info:
# lsb_release -rd
Description: Ubuntu 10.04.3 LTS
Release: 10.04
# apt-cache policy cacti
cacti:
Installed: 0.8.7e-2ubuntu0.2
Candidate: 0.8.7e-2ubuntu0.2
Version table:
*** 0.8.7e-2ubuntu0.2 0
500 http://mirror.us.leaseweb.net/ubuntu/ lucid-updates/universe Packages
500 http://security.ubuntu.com/ubuntu/ lucid-security/universe Packages
100 /var/lib/dpkg/status
0.8.7e-2 0
500 http://mirror.us.leaseweb.net/ubuntu/ lucid/universe Packages
# apt-cache policy php5
php5:
Installed: 5.3.2-1ubuntu4.11
Candidate: 5.3.2-1ubuntu4.11
Version table:
*** 5.3.2-1ubuntu4.11 0
500 http://mirror.us.leaseweb.net/ubuntu/ lucid-updates/main Packages
500 http://security.ubuntu.com/ubuntu/ lucid-security/main Packages
100 /var/lib/dpkg/status
5.3.2-1ubuntu4 0
500 http://mirror.us.leaseweb.net/ubuntu/ lucid/main Packages |
|
| 2012-07-09 21:03:50 |
Paul Gevers |
cacti (Ubuntu Lucid): status |
Incomplete |
Confirmed |
|
| 2012-07-09 21:05:05 |
Paul Gevers |
description |
[IMPACT]
* If you try to turn on "SNMP - Interface Statistics" on a host with SNMP facilities turned off, the current behavior of cacti is that it generates a php error instead of catching the empty result. As this behavior is basically strange user behavior, the impact is small. I don't think this warrants an SRU, but still my patch fixes the issue by testing for empty results (as is intended by the code) and thus allowing the php code to return normally (although still not telling you what went wrong).
[TESTCASE]
* With cacti installed and configured, go to the /cacti/host.php page (via the "devices" link on every cacti page) and select a device (e.g. localhost)
* Make sure that in the SNMP Options section the SNMP Version is set to "Not In Use"
* In the "Associated Data Queries" part, select "SNMP - Interface Statistics" in the "Add data query" drop down selection box and press "Add".
* The next screen is blank.
* In the apache error.log you will find:
PHP Fatal error: Cannot use string offset as an array in /usr/share/cacti/site/lib/data_query.php on line 183, referer: http://localhost/cacti/host.php?action=edit&id=1
* After the patch the result will be return to the host.php file, but it will show the added "SNMP - Interface Statistics" with "Success [0 Items, 0 Rows]"
[Regression Potential]
* I don't know how adding a check for emptyness of a variable that should not be empty can cause regression. Maybe somebody else can come up with one?
[Other Info]
* As mentioned before, I am not sure this issue warrants a SRU.
[original report]
when adding an SNMP - Interface statistics data query, and clicking on the 'verbose list' link, I get a 500 internal error, and the following line in the apache log file:
PHP Fatal error: Cannot use string offset as an array in /usr/share/cacti/site/lib/data_query.php on line 183, referer: http://localhost/cacti/host.php?action=edit&id=1
this prevents me from having network interface statistics followed by cacti.
additional info:
# lsb_release -rd
Description: Ubuntu 10.04.3 LTS
Release: 10.04
# apt-cache policy cacti
cacti:
Installed: 0.8.7e-2ubuntu0.2
Candidate: 0.8.7e-2ubuntu0.2
Version table:
*** 0.8.7e-2ubuntu0.2 0
500 http://mirror.us.leaseweb.net/ubuntu/ lucid-updates/universe Packages
500 http://security.ubuntu.com/ubuntu/ lucid-security/universe Packages
100 /var/lib/dpkg/status
0.8.7e-2 0
500 http://mirror.us.leaseweb.net/ubuntu/ lucid/universe Packages
# apt-cache policy php5
php5:
Installed: 5.3.2-1ubuntu4.11
Candidate: 5.3.2-1ubuntu4.11
Version table:
*** 5.3.2-1ubuntu4.11 0
500 http://mirror.us.leaseweb.net/ubuntu/ lucid-updates/main Packages
500 http://security.ubuntu.com/ubuntu/ lucid-security/main Packages
100 /var/lib/dpkg/status
5.3.2-1ubuntu4 0
500 http://mirror.us.leaseweb.net/ubuntu/ lucid/main Packages |
[IMPACT]
* If you try to turn on "SNMP - Interface Statistics" on a host with SNMP facilities turned off, the current behavior of cacti is that it generates a php error instead of catching the empty result. As this behavior is basically strange user behavior, the impact is small. I don't think this warrants an SRU, but still my patch fixes the issue by testing for empty results (as is intended by the code) and thus allowing the php code to return normally (although still not telling you what went wrong).
[TESTCASE]
* With cacti installed and configured, go to the /cacti/host.php page (via the "devices" link on every cacti page) and select a device (e.g. localhost)
* Make sure that in the SNMP Options section the SNMP Version is set to "Not In Use"
* In the "Associated Data Queries" part, select "SNMP - Interface Statistics" in the "Add data query" drop down selection box and press "Add".
* The next screen is blank.
* In the apache error.log you will find:
PHP Fatal error: Cannot use string offset as an array in /usr/share/cacti/site/lib/data_query.php on line 183, referer: http://localhost/cacti/host.php?action=edit&id=1
* After the patch the result will be return to the host.php file, but it will show the added "SNMP - Interface Statistics" with "Success [0 Items, 0 Rows]"
[Regression Potential]
* I don't know how adding a check for emptyness of a variable that should not be empty can cause regression. Maybe somebody else can come up with one?
[Other Info]
* As mentioned before, I am not sure this issue warrants a SRU.
* Only lucid (-updates) is effected by this bug, other Ubuntu releases don't experience it.
[original report]
when adding an SNMP - Interface statistics data query, and clicking on the 'verbose list' link, I get a 500 internal error, and the following line in the apache log file:
PHP Fatal error: Cannot use string offset as an array in /usr/share/cacti/site/lib/data_query.php on line 183, referer: http://localhost/cacti/host.php?action=edit&id=1
this prevents me from having network interface statistics followed by cacti.
additional info:
# lsb_release -rd
Description: Ubuntu 10.04.3 LTS
Release: 10.04
# apt-cache policy cacti
cacti:
Installed: 0.8.7e-2ubuntu0.2
Candidate: 0.8.7e-2ubuntu0.2
Version table:
*** 0.8.7e-2ubuntu0.2 0
500 http://mirror.us.leaseweb.net/ubuntu/ lucid-updates/universe Packages
500 http://security.ubuntu.com/ubuntu/ lucid-security/universe Packages
100 /var/lib/dpkg/status
0.8.7e-2 0
500 http://mirror.us.leaseweb.net/ubuntu/ lucid/universe Packages
# apt-cache policy php5
php5:
Installed: 5.3.2-1ubuntu4.11
Candidate: 5.3.2-1ubuntu4.11
Version table:
*** 5.3.2-1ubuntu4.11 0
500 http://mirror.us.leaseweb.net/ubuntu/ lucid-updates/main Packages
500 http://security.ubuntu.com/ubuntu/ lucid-security/main Packages
100 /var/lib/dpkg/status
5.3.2-1ubuntu4 0
500 http://mirror.us.leaseweb.net/ubuntu/ lucid/main Packages |
|
| 2012-07-09 21:08:50 |
Paul Gevers |
description |
[IMPACT]
* If you try to turn on "SNMP - Interface Statistics" on a host with SNMP facilities turned off, the current behavior of cacti is that it generates a php error instead of catching the empty result. As this behavior is basically strange user behavior, the impact is small. I don't think this warrants an SRU, but still my patch fixes the issue by testing for empty results (as is intended by the code) and thus allowing the php code to return normally (although still not telling you what went wrong).
[TESTCASE]
* With cacti installed and configured, go to the /cacti/host.php page (via the "devices" link on every cacti page) and select a device (e.g. localhost)
* Make sure that in the SNMP Options section the SNMP Version is set to "Not In Use"
* In the "Associated Data Queries" part, select "SNMP - Interface Statistics" in the "Add data query" drop down selection box and press "Add".
* The next screen is blank.
* In the apache error.log you will find:
PHP Fatal error: Cannot use string offset as an array in /usr/share/cacti/site/lib/data_query.php on line 183, referer: http://localhost/cacti/host.php?action=edit&id=1
* After the patch the result will be return to the host.php file, but it will show the added "SNMP - Interface Statistics" with "Success [0 Items, 0 Rows]"
[Regression Potential]
* I don't know how adding a check for emptyness of a variable that should not be empty can cause regression. Maybe somebody else can come up with one?
[Other Info]
* As mentioned before, I am not sure this issue warrants a SRU.
* Only lucid (-updates) is effected by this bug, other Ubuntu releases don't experience it.
[original report]
when adding an SNMP - Interface statistics data query, and clicking on the 'verbose list' link, I get a 500 internal error, and the following line in the apache log file:
PHP Fatal error: Cannot use string offset as an array in /usr/share/cacti/site/lib/data_query.php on line 183, referer: http://localhost/cacti/host.php?action=edit&id=1
this prevents me from having network interface statistics followed by cacti.
additional info:
# lsb_release -rd
Description: Ubuntu 10.04.3 LTS
Release: 10.04
# apt-cache policy cacti
cacti:
Installed: 0.8.7e-2ubuntu0.2
Candidate: 0.8.7e-2ubuntu0.2
Version table:
*** 0.8.7e-2ubuntu0.2 0
500 http://mirror.us.leaseweb.net/ubuntu/ lucid-updates/universe Packages
500 http://security.ubuntu.com/ubuntu/ lucid-security/universe Packages
100 /var/lib/dpkg/status
0.8.7e-2 0
500 http://mirror.us.leaseweb.net/ubuntu/ lucid/universe Packages
# apt-cache policy php5
php5:
Installed: 5.3.2-1ubuntu4.11
Candidate: 5.3.2-1ubuntu4.11
Version table:
*** 5.3.2-1ubuntu4.11 0
500 http://mirror.us.leaseweb.net/ubuntu/ lucid-updates/main Packages
500 http://security.ubuntu.com/ubuntu/ lucid-security/main Packages
100 /var/lib/dpkg/status
5.3.2-1ubuntu4 0
500 http://mirror.us.leaseweb.net/ubuntu/ lucid/main Packages |
[IMPACT]
* If you try to turn on "SNMP - Interface Statistics" on a host with SNMP facilities turned off, the current behavior of cacti is that it generates a php error instead of catching the empty result. As this behavior is basically strange user behavior, the impact is small, although multiple people report the issue. I don't think this warrants an SRU, but still my patch fixes the issue by testing for empty results (as is intended by the code) and thus allowing the php code to return normally (although still not telling you what went wrong).
[TESTCASE]
* With cacti installed and configured, go to the /cacti/host.php page (via the "devices" link on every cacti page) and select a device (e.g. localhost)
* Make sure that in the SNMP Options section the SNMP Version is set to "Not In Use"
* In the "Associated Data Queries" part, select "SNMP - Interface Statistics" in the "Add data query" drop down selection box and press "Add".
* The next screen is blank.
* In the apache error.log you will find:
PHP Fatal error: Cannot use string offset as an array in /usr/share/cacti/site/lib/data_query.php on line 183, referer: http://localhost/cacti/host.php?action=edit&id=1
* After the patch the result will be return to the host.php file, but it will show the added "SNMP - Interface Statistics" with "Success [0 Items, 0 Rows]"
[Regression Potential]
* I don't know how adding a check for emptyness of a variable that should not be empty can cause regression. Maybe somebody else can come up with one?
[Other Info]
* As mentioned before, I am not sure this issue warrants a SRU.
* Only lucid (-updates) is effected by this bug, other Ubuntu releases don't experience it.
[original report]
when adding an SNMP - Interface statistics data query, and clicking on the 'verbose list' link, I get a 500 internal error, and the following line in the apache log file:
PHP Fatal error: Cannot use string offset as an array in /usr/share/cacti/site/lib/data_query.php on line 183, referer: http://localhost/cacti/host.php?action=edit&id=1
this prevents me from having network interface statistics followed by cacti.
additional info:
# lsb_release -rd
Description: Ubuntu 10.04.3 LTS
Release: 10.04
# apt-cache policy cacti
cacti:
Installed: 0.8.7e-2ubuntu0.2
Candidate: 0.8.7e-2ubuntu0.2
Version table:
*** 0.8.7e-2ubuntu0.2 0
500 http://mirror.us.leaseweb.net/ubuntu/ lucid-updates/universe Packages
500 http://security.ubuntu.com/ubuntu/ lucid-security/universe Packages
100 /var/lib/dpkg/status
0.8.7e-2 0
500 http://mirror.us.leaseweb.net/ubuntu/ lucid/universe Packages
# apt-cache policy php5
php5:
Installed: 5.3.2-1ubuntu4.11
Candidate: 5.3.2-1ubuntu4.11
Version table:
*** 5.3.2-1ubuntu4.11 0
500 http://mirror.us.leaseweb.net/ubuntu/ lucid-updates/main Packages
500 http://security.ubuntu.com/ubuntu/ lucid-security/main Packages
100 /var/lib/dpkg/status
5.3.2-1ubuntu4 0
500 http://mirror.us.leaseweb.net/ubuntu/ lucid/main Packages |
|
| 2012-07-11 12:18:10 |
Marc Deslauriers |
nominated for series |
|
Ubuntu Natty |
|
| 2012-07-11 12:18:10 |
Marc Deslauriers |
bug task added |
|
cacti (Ubuntu Natty) |
|
| 2012-07-11 12:18:10 |
Marc Deslauriers |
nominated for series |
|
Ubuntu Oneiric |
|
| 2012-07-11 12:18:10 |
Marc Deslauriers |
bug task added |
|
cacti (Ubuntu Oneiric) |
|
| 2012-07-11 12:18:19 |
Marc Deslauriers |
cacti (Ubuntu Lucid): status |
Confirmed |
Incomplete |
|
| 2012-07-11 12:18:21 |
Marc Deslauriers |
cacti (Ubuntu Natty): status |
New |
Incomplete |
|
| 2012-07-11 12:18:24 |
Marc Deslauriers |
cacti (Ubuntu Oneiric): status |
New |
Incomplete |
|
| 2012-07-12 06:23:17 |
Paul Gevers |
cve linked |
|
2010-1645 |
|
| 2012-07-12 06:23:29 |
Paul Gevers |
cacti (Ubuntu Lucid): assignee |
|
Paul Gevers (paul-climbing) |
|
| 2012-07-12 06:23:32 |
Paul Gevers |
cacti (Ubuntu Natty): assignee |
|
Paul Gevers (paul-climbing) |
|
| 2012-07-12 06:23:35 |
Paul Gevers |
cacti (Ubuntu Oneiric): assignee |
|
Paul Gevers (paul-climbing) |
|
| 2012-07-12 15:10:01 |
Michael Terry |
bug |
|
|
added subscriber Michael Terry |
| 2012-07-12 15:10:08 |
Michael Terry |
removed subscriber Ubuntu Sponsors Team |
|
|
|
| 2012-07-14 07:40:54 |
Paul Gevers |
attachment added |
|
Debdiff for lucid https://bugs.launchpad.net/ubuntu/+source/cacti/+bug/914746/+attachment/3222971/+files/cacti_0.8.7e-2ubuntu0.2_0.8.7e-2ubuntu0.3.debdiff |
|
| 2012-07-14 07:41:15 |
Paul Gevers |
cacti (Ubuntu Lucid): status |
Incomplete |
Confirmed |
|
| 2012-07-14 07:41:28 |
Paul Gevers |
cacti (Ubuntu Natty): status |
Incomplete |
Invalid |
|
| 2012-07-14 07:41:33 |
Paul Gevers |
cacti (Ubuntu Oneiric): status |
Incomplete |
Invalid |
|
| 2012-07-14 07:41:38 |
Paul Gevers |
cacti (Ubuntu Lucid): status |
Confirmed |
In Progress |
|
| 2012-07-14 07:41:42 |
Paul Gevers |
cacti (Ubuntu Natty): assignee |
Paul Gevers (paul-climbing) |
|
|
| 2012-07-14 07:41:45 |
Paul Gevers |
cacti (Ubuntu Oneiric): assignee |
Paul Gevers (paul-climbing) |
|
|
| 2012-07-14 07:41:47 |
Paul Gevers |
cacti (Ubuntu Lucid): assignee |
Paul Gevers (paul-climbing) |
|
|
| 2012-07-14 07:43:07 |
Paul Gevers |
bug |
|
|
added subscriber Ubuntu Sponsors Team |
| 2012-07-14 07:43:48 |
Paul Gevers |
attachment removed |
Checked lucid patch https://bugs.launchpad.net/ubuntu/+source/cacti/+bug/914746/+attachment/3216082/+files/LP914746_regression_lucid_string_offset_in_data_query.patch |
|
|
| 2012-07-19 16:21:24 |
Bryce Harrington |
cacti (Ubuntu Lucid): status |
In Progress |
Fix Committed |
|
| 2012-07-19 16:24:03 |
Bryce Harrington |
bug |
|
|
added subscriber Ubuntu Stable Release Updates Team |
| 2012-07-19 16:24:06 |
Bryce Harrington |
removed subscriber Ubuntu Sponsors Team |
|
|
|
| 2012-07-26 21:12:34 |
Paul Gevers |
cacti: status |
New |
Fix Released |
|
| 2012-07-30 01:34:55 |
Scott Kitterman |
bug |
|
|
added subscriber SRU Verification |
| 2012-07-30 01:34:58 |
Scott Kitterman |
tags |
regression-update |
regression-update verification-needed |
|
| 2012-07-30 01:44:50 |
Launchpad Janitor |
branch linked |
|
lp:ubuntu/lucid-proposed/cacti |
|
| 2012-08-02 18:56:47 |
Paul Gevers |
tags |
regression-update verification-needed |
regression-update verification-done |
|
| 2012-08-07 03:12:28 |
Scott Kitterman |
removed subscriber Ubuntu Stable Release Updates Team |
|
|
|
| 2012-08-07 03:13:16 |
Launchpad Janitor |
cacti (Ubuntu Lucid): status |
Fix Committed |
Fix Released |
|
