Zabbix is software for application and network monitoring.
Zabbix supports both polling and trapping techniques to
collect data from monitored hosts. Flexible notification
mechanism allows easy and quckly configure email notifications
for pre-defined events. Zabbix is freely available under the
terms of the GNU General Public License (GPL).
WWW: http://www.zabbix.com/
- Update zabbix to 1.8
- Split the port to server, frontend, agent and proxy slaves
- Add zabbix16 for people who don't want to update to 1.8 yet
PR: ports/141364
Submitted by: Jim Riggs <ports@christianserving.org> (maintainer)
- Make server build optionsal and add a proxy build
PR: ports/138651 (adapted from)
Submitted by: Vladimir Korkodinov <viper@perm.raid.ru>
Approved by: maintainer timeout
- Fix zabbix -- php frontend multiple vulnerabilities
Note:
Input appended to and passed via the "extlang" parameter to the
"calc_exp2()"
function in include/validate.inc.php is not properly sanitised before
being
used. This can be exploited to inject and execute arbitrary PHP code.
The application allows users to perform certain actions via HTTP
requests
without performing any validity checks to verify the requests. This can
be
exploited to e.g. create users by enticing a logged in administrator to
visit a malicious web page.
Input passed to the "srclang" parameter in locales.php (when "next" is
set
to a non-NULL value) is not properly verified before being used to
include
files. This can be exploited to include arbitrary files from local
resources
via directory traversal attacks and URL-encoded NULL bytes.
- Bump PORTREVISION
PR: 132944
Submitted by: Eygene Ryabinkin <rea-fbsd@codelabs.ru> (many thanks!)
Approved by: maintainer timeout (security 1 day)
Security:
http://www.vuxml.org/freebsd/03140526-1250-11de-a964-0030843d3802.html
- Mark FORBIDDEN: multiple vulnerabilities
Note:
Input appended to and passed via the "extlang" parameter to the "calc_exp2()"
function in include/validate.inc.php is not properly sanitised before being
used. This can be exploited to inject and execute arbitrary PHP code.
The application allows users to perform certain actions via HTTP requests
without
performing any validity checks to verify the requests. This can be exploited to
e.g.
create users by enticing a logged in administrator to visit a malicious web
page.
Input passed to the "srclang" parameter in locales.php (when "next" is set to a
non-NULL
value) is not properly verified before being used to include files. This can be
exploited to include arbitrary files from local resources via directory
traversal
attacks and URL-encoded NULL bytes.
Original Advisory:
http://www.ush.it/team/ush/hack-zabbix_162/adv.txt
With hat: secteam
Security:
http://www.vuxml.org/freebsd/03140526-1250-11de-a964-0030843d3802.html
Bump the version of the curl shared library after the ftp/curl update
to 7.19.2.
Bump PORTREVISION, even on the ports that do not have a versioned
dependency, since the binaries will most probably still stop working.
Bump portrevision due to upgrade of devel/gettext.
The affected ports are the ones with gettext as a run-dependency
according to ports/INDEX-7 (5007 of them) and the ones with USE_GETTEXT
in Makefile (29 of them).
PR: ports/124340
Submitted by: edwin@
Approved by: portmgr (pav)
- Update net-mgmt/zabbix port to 1.1.1.
- Make a note in UPDATING file about server name changing.
PR: ports/100843
Submitted by: Rui Lopes <rgl@ruilopes.com>
Approved by: maintainer timeout (1 month and half)
Split the postgresql ports into a server and a client part.
All ports depending on postgresql shall use the USE_PGSQL=yes knob
defined in Mk/bsd.ports.mk. Bumping portrevisions where needed.
PR: 75344
Approved by: portmgr@ (kris), ade & sean (mentors)
Remove databases/postgresql-client because there can't be a -server, and having
it installed prevents databases/postgresql7 from being installed, leading to
some dependencies problems
Let the port choose between a PGSQL or MYSQL backend.
Fix compilation of net/zabbix when using the PGSQL backend. (author informed)
PR: 61773, 62856
Submitted by: Michal F. Hanula <f@7f000001.org>, edwin@Mavetju.org
Approved by: maintainer timeout
Say hello to the new "net-mgmt" category. There are probably more
ports that belong here than the ones I have identified and moved in
this, first, pass.
Approved in principle by: marcus
