summaryrefslogtreecommitdiffstats
path: root/meta-oe/recipes-connectivity/zabbix
Commit message (Collapse)AuthorAgeFilesLines
* zabbix: fix CVE-2023-32726 and CVE-2023-32727Yogita Urade2024-02-074-0/+405
| | | | | | | | | | | | | | | | | | | | | | CVE-2023-32726: The vulnerability is caused by improper check for check if RDLENGTH does not overflow the buffer in response from DNS server. CVE-2023-32727: An attacker who has the privilege to configure Zabbix items can use function icmpping() with additional malicious command inside it to execute arbitrary code on the current Zabbix server. Refernces: https://nvd.nist.gov/vuln/detail/CVE-2023-32726 https://security-tracker.debian.org/tracker/CVE-2023-32726 https://nvd.nist.gov/vuln/detail/CVE-2023-32727 https://security-tracker.debian.org/tracker/CVE-2023-32727 Signed-off-by: Yogita Urade <yogita.urade@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* zabbix: fix CVE-2023-29450Urade, Yogita2023-08-032-0/+242
| | | | | | | | | | | | | JavaScript pre-processing can be used by the attacker to gain access to the file system (read-only access on behalf of user "zabbix") on the Zabbix Server or Zabbix Proxy, potentially leading to unauthorized access to sensitive data. Reference: https://support.zabbix.com/browse/ZBX-22588 Signed-off-by: Yogita Urade <yogita.urade@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* zabbix: fix CVE-2023-29449Urade, Yogitag2023-08-032-0/+248
| | | | | | | | | | | | | | | | | JavaScript preprocessing, webhooks and global scripts can cause uncontrolled CPU, memory, and disk I/O utilization. Preprocessing/webhook/global script configuration and testing are only available to Administrative roles (Admin and Superadmin). Administrative privileges should be typically granted to users who need to perform tasks that require more control over the system. The security risk is limited because not all users have this level of access. References: https://support.zabbix.com/browse/ZBX-22589 Signed-off-by: Yogita Urade <yogita.urade@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* zabbix: fix CVE-2023-29451Changqing Li2023-04-282-0/+117
| | | | | | | Refer: https://support.zabbix.com/browse/ZBX-22587 Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* zabbix: fix CVE-2022-43515,CVE-2022-46768Changqing Li2023-01-123-0/+92
| | | | | Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* zabbix: upgrade 5.2.6 -> 5.4.12Changqing Li2022-07-181-3/+3
| | | | | | | | | | This upgrade CVE fix: CVE-2022-24349 CVE-2022-24917 CVE-2022-24918 CVE-2022-24919 Signed-off-by: Changqing Li <changqing.li@windriver.com>
* recipes: Update LICENSE variable to use SPDX license identifiersKhem Raj2022-03-041-1/+1
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* Convert to new override syntaxMartin Jansa2021-08-031-8/+8
| | | | | | | | | | This is the result of automated script (0.9.1) conversion: oe-core/scripts/contrib/convert-overrides.py . converting the metadata to use ":" as the override character instead of "_". Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* zabbix: upgrade 5.2.5 -> 5.2.6zangrc2021-04-011-2/+2
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* zabbix: upgrade 4.4.6 -> 5.2.5Randy MacLeod2021-03-063-41/+7
| | | | | | | | | | | Drop CVE patch that is not needed for 5.2.5. Add Upstream-Status: tag for the configure patch which specifies the kernel version. Specify the recipe specific sysroot path to avoid: QA Issue: ... [configure-unsafe] for libpcre and iconv. Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* zabbix: CVE-2020-15803 Security AdvisoryWang Mingyu2020-12-152-0/+37
| | | | | | | | References https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15803 Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* zabbix: upgrade 4.4.5 -> 4.4.6Wang Mingyu2020-02-271-2/+2
| | | | | Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* zabbix: upgrade 4.4.1 -> 4.4.5Wang Mingyu2020-02-111-2/+2
| | | | | Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* zabbix: modify service fileZang Ruochen2020-01-161-3/+2
| | | | | | | | -Fixed a bug that could not exit the service normally. When using systemd to exit the service, the child process cannot be terminated normally. Refer to the style of fedora to modify it. Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* zabbix: upgrade 4.2.8 -> 4.4.1Trevor Gamblin2019-11-131-3/+2
| | | | | | | | | | Note that zabbix as of 4.4.0alpha3 no longer supports Jabber (see https://support.zabbix.com/browse/ZBXNEXT-5416). That config option has been removed from the recipe (builds output a warning about unrecognized config options otherwise). Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* zabbix: upgrade 4.2.7 -> 4.2.8Zheng Ruoqin2019-11-081-2/+2
| | | | | Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* zabbix: upgrade 4.2.6 -> 4.2.7Zheng Ruoqin2019-11-011-2/+2
| | | | | Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* zabbix: upgrade 3.0.9 -> 4.2.6Peiran Hong2019-10-041-4/+8
| | | | | | | | | | | | | | | | | | | | This update fixes the following CVEs: - CVE-2016-10742 (ZBX-13133, refer to 'Changes for 3.4.4rc1' in ChangeLog) and addresses numerous bugs as well as improved frontend messaging usage. Added libevent, libpcre and zlib to DEPENDS as required dependency to build 4.2.6. Added --with-libpthread to EXTRA_OECONF as default configure option since it is turned on by default in the new version. There are also new optional features available in this update that could be but are not yet added as PACKAGECONFIG. Signed-off-by: Peiran Hong <peiran.hong@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* zabbix: 3.0.8 -> 3.0.9fan.xin2017-06-221-2/+2
| | | | | Signed-off-by: Fan Xin <fan.xin@jp.fujitsu.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* zabbix: 2.4.7 -> 3.0.8Zheng Ruoqin2017-03-041-2/+2
| | | | | | | Upgrade zabbix from 2.4.7 to 3.0.8 Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* meta-oe: fix indentationMartin Jansa2016-08-221-14/+17
| | | | | | | | * remove tabs which sneaked in since last cleanup * meta-oe layers are using consistent indentation with 4 spaces, see http://www.openembedded.org/wiki/Styleguide Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* meta-oe: Standardize use of "_append" versus use of "+="Robert P. J. Day2016-08-221-1/+1
| | | | | | | Remove superfluous "+=", then manually add necessary leading space. Signed-off-by: Robert P. J. Day <rpjday@crashcourse.ca> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* meta-oe: use bb.utils.contains() instead of base_contains()Ross Burton2016-04-281-1/+1
| | | | | | | | base_contains() is a compatibility wrapper and may warn in the future, so replace all instances with bb.utils.contains(). Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* zabbix: 2.4.5 -> 2.4.7Li xin2016-01-061-2/+2
| | | | | | | Upgrade zabbix from 2.4.5 to 2.4.7. Signed-off-by: Li Xin <lixin.fnst@cn.fujitsu.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* zabbix: set MACHINE_ARCH, because it depends on MACHINE specific KERNEL_VERSIONMartin Jansa2015-11-161-0/+2
| | | | | | | | | | | * see: http://lists.openembedded.org/pipermail/openembedded-devel/2015-September/103271.html * fixes: ERROR: zabbix different signature for task do_configure.sigdata between qemux86copy and qemux86 basehash changed from 2b2cdeb8b36ed130bf28374a5b6d2e4d to 624cc1888e50c4509679c829a906af03 Variable MACHINE value changed from 'qemux86copy' to 'qemux86' Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* zabbix: add new recipeBian Naimeng2015-07-163-0/+105
zabbix is an open-source monitoring solution for your IT infrastructure. Signed-off-by: Bian Naimeng <biannm@cn.fujitsu.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-08-08 02:18:35 +0000