A new version (1.2.31) has been released containing multiple security fixes. https://github.com/Cacti/cacti/releases/tag/release%2F1.2.31
Created attachment 272544 [details] 0001-net-mgmt-cacti-Update-1.2.30-1.2.31.patch Patch with the update.
Hi Dani, I'm currently working on cacti update, not yet released but I think this will be done by tomorrow. Cheers, -- rodrigo
The above patch worked for me just fine. No issues so far with cacti and spine upgrade. Perhaps sorting pkg-plist entries could make this patch better, but that's not a real drawback.
A commit in branch main references this bug: URL: https://cgit.FreeBSD.org/ports/commit/?id=1a398312bf029ba658e38cde34f8b3dffc8316bc commit 1a398312bf029ba658e38cde34f8b3dffc8316bc Author: Rodrigo Osorio <rodrigo@FreeBSD.org> AuthorDate: 2026-07-07 12:42:42 +0000 Commit: Rodrigo Osorio <rodrigo@FreeBSD.org> CommitDate: 2026-07-07 16:49:44 +0000 net-mgmt/cacti: update 1.2.30 -> 1.2.31 Changelog: https://github.com/Cacti/cacti/releases/tag/release%2F1.2.31 Major changes: - Fix 33 CVEs, see list bellow - Fix 49 issues - 9 features PR: 296105 Reported by: Dani I <i.dani@outlook.com> Security: CVE-2026-39894 Security: CVE-2026-40082 Security: CVE-2026-40941 Security: CVE-2026-39897 Security: CVE-2026-39900 Security: CVE-2026-46531 Security: CVE-2026-44481 Security: CVE-2026-39952 Security: CVE-2026-39893 Security: CVE-2026-22802 Security: CVE-2026-40080 Security: CVE-2026-40078 Security: CVE-2026-39949 Security: CVE-2026-40081 Security: CVE-2026-39948 Security: CVE-2026-39902 Security: CVE-2026-39898 Security: CVE-2026-41884 Security: CVE-2026-39955 Security: CVE-2026-39896 Security: CVE-2026-39950 Security: CVE-2026-40083 Security: CVE-2026-40084 Security: CVE-2026-39951 Security: CVE-2026-39899 Security: CVE-2026-39938 Security: CVE-2026-39939 Security: CVE-2026-39947 Security: CVE-2026-39895 Security: CVE-2026-40079 Security: CVE-2026-40194 Security: CVE-2026-32935 Security: CVE-2026-1513 MFH: 2026Q2 net-mgmt/cacti/Makefile | 9 +- net-mgmt/cacti/distinfo | 6 +- net-mgmt/cacti/pkg-plist | 803 +++++++++++++++++++++++++++++++++++++++++++++++ 3 files changed, 810 insertions(+), 8 deletions(-)
Port updated
(In reply to Rodrigo Osorio from comment #5) Looking at the order of files in pkg-plist I see that you used my upgrade patch. That's fine. I have tested it, and it runs fine. But unfortunately, it looks like you have stolen my work. No credits in the commit message, though the patch was 100% "git am" ready. That's really not a nice attitude toward the contribution from the userbase. Anyway, thanks for the update of the port. (In reply to Dani I. from comment #0) Thanks for pointing it out.
I'm sorry, but the order in the pkg-plist suggests my patch was rejected. It's worth noting this in Bugzilla (rejected) instead of completely ignoring the patch. I apologise for the false accusation, and thank you for the clear commit with the righ order in the pkg-plist.