Number of commits found: 21

- Update zabbix to 1.8
- Split the port to server, frontend, agent and proxy slaves
- Add zabbix16 for people who don't want to update to 1.8 yet

PR:             ports/141364
Submitted by:   Jim Riggs <ports@christianserving.org> (maintainer)

- Update to 1.6.6

PR:             ports/139091
Submitted by:   Jim Riggs <ports@christianserving.org>(maintainer)
Approved by:    jadawin(co-mentor)
Feature safe:   yes

- Switch SourceForge ports to the new File Release System: categories starting
with N

- Update to 1.6.5

PR:             ports/135904, ports/135905
Submitted by:   Jim Riggs <ports@christianserving.org> (maintainer)

- Update to 1.6.4.
- Pass maintainer to submitter (last 3 updates were timeouts)

PR:             ports/133448
Submitted by:   Jim Riggs <ports@christianserving.org>
Approved by:    maintainer timeout

- Fix zabbix -- php frontend multiple vulnerabilities

Note:

        Input appended to and passed via the "extlang" parameter to the
"calc_exp2()"
        function in include/validate.inc.php is not properly sanitised before
being
        used. This can be exploited to inject and execute arbitrary PHP code.

        The application allows users to perform certain actions via HTTP
requests
        without performing any validity checks to verify the requests. This can
be
        exploited to e.g. create users by enticing a logged in administrator to
        visit a malicious web page.

        Input passed to the "srclang" parameter in locales.php (when "next" is
set
        to a non-NULL value) is not properly verified before being used to
include
        files. This can be exploited to include arbitrary files from local
resources
        via directory traversal attacks and URL-encoded NULL bytes.

- Bump PORTREVISION

PR:             132944
Submitted by:   Eygene Ryabinkin <rea-fbsd@codelabs.ru> (many thanks!)
Approved by:    maintainer timeout (security 1 day)
Security:      
http://www.vuxml.org/freebsd/03140526-1250-11de-a964-0030843d3802.html

- Mark FORBIDDEN: multiple vulnerabilities

Note:

Input appended to and passed via the "extlang" parameter to the "calc_exp2()"
function in include/validate.inc.php is not properly sanitised before being
used. This can be exploited to inject and execute arbitrary PHP code.

The application allows users to perform certain actions via HTTP requests
without
performing any validity checks to verify the requests. This can be exploited to
e.g.
create users by enticing a logged in administrator to visit a malicious web
page.

Input passed to the "srclang" parameter in locales.php (when "next" is set to a
non-NULL
value) is not properly verified before being used to include files. This can be
exploited to include arbitrary files from local resources via directory
traversal
attacks and URL-encoded NULL bytes.

Original Advisory:
http://www.ush.it/team/ush/hack-zabbix_162/adv.txt

With hat:       secteam
Security:      
http://www.vuxml.org/freebsd/03140526-1250-11de-a964-0030843d3802.html

- Update to 1.6.2

PR:             ports/130901, ports/130902
Submitted by:   Jim Riggs <ports@christianserving.org>
Approved by:    maintainer timeout (1 month)

- Update to 1.6.1

PR:             ports/129781
Submitted by:   Jim Riggs <ports at christianserving.org>
Approved by:    maintainer timeout (3 weeks)

- Update to 1.6

PR:             ports/127617
Submitted by:   Dmitry Lohansky <d.lohansky at zsupport.ru> (maintainer)

- Go back to 1.4.5 because is a stable version and seems to work better that
1.5.2. The version 1.5.2 beaks client/server set.
- Bump PORTEPOCH.

Discussed with: Frank Wall <fw@luzy.moov.de>, Philip M. Gollucci
<pgollucci@p6m7g8.com>
Approved by:    maintainer implicit.

- Update to 1.5.2.

PR:             ports/123512
Submitted by:   Philip M. Gollucci <pgollucci@p6m7g8.com>
Approved by:    maintainer timeout (> 2 weeks)

- Update to 1.4.5.
- Update maintainer address.

PR:             ports/122284, ports/122285
Submitted by:   Dmitriy Kirhlarov <dimma@higis.ru>
Approved by:    Dmitry Lohansky <d.lohansky@zsupport.ru> (maintainer)

- Pass maintainership to submitter

PR:             ports/121740
Submitted by:   Dmitry Lohansky <sq@tvfaq.ru>

- Update to 1.4.4 (bugfix-only)

Release notes:  http://www.zabbix.com/rn1.4.4.php

- Add support for IPv6

Update to 1.4.3

Changes:        http://zabbix.com/rn1.4.3.php
Submitted by:   Dmitriy Kirhlarov <dimma xx higis.ru>

- Update to 1.4.2
- Always link server against pthread libs when sqlite3 is selected
- Clean up a bit

- Update to 1.4.1
- Register in ports/GIDs

Relnotes:       http://www.zabbix.com/rn1.4.1.php

- Complete repomove of net/zabbix-agent to net-mgmt/zabbix-agent

PR:             ports/113658
Repocopy by:    marcus

- Forced commit to note a repocopy from net/zabbix-agent to
  net-mgmt/zabbix-agent

PR:             ports/113658
Repocopy by:    marcus

Number of commits found: 21

12 vulnerabilities affecting 17 ports have been reported in the past 14 days

^* - modified, not new

All vulnerabilities