zabbix: Update to 7.0.21 (lts) #28086
Open
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
danielfdickinson
force-pushed
the
pr-update-zabbix-7-0-lts-latest-21
branch
4 times, most recently
from
61e7b5d to
4903cf4
Compare
3 tasks
danielfdickinson
force-pushed
the
pr-update-zabbix-7-0-lts-latest-21
branch
2 times, most recently
from
186a03b to
d19fcf3
Compare
Updates Zabbix to 7.0.21-r1 (latest 7.0 LTS version) Note that for the frontend, clearing browser cache, cookies and other site data for the zabbix frontend server may be necessary. Security fixes compared to 7.0.12 (most are frontend only): * CVE-2025-27238: API hostprototype.get lists data to users with insufficient authorization https://support.zabbix.com/browse/ZBX-26988 * CVE-2025-27236: User information disclosure via api_jsonrpc.php on method user.get with param search: https://support.zabbix.com/browse/ZBX-27060 * CVE-2025-27231: LDAP 'Bind password' field value can be leaked by a Zabbix Super Admin: https://support.zabbix.com/browse/ZBX-27062 * CVE-2025-49641: Insufficient permission check for the problem.view.refresh action: https://support.zabbix.com/browse/ZBX-27063 * CVE-2025-49643: Frontend DoS vulnerability due to asymmetric resource consumption: https://support.zabbix.com/browse/ZBX-27284 Signed-off-by: Daniel F. Dickinson <[email protected]>
With previous maintainer's blessing: openwrt#28041 (comment) Signed-off-by: Daniel F. Dickinson <[email protected]>
danielfdickinson
force-pushed
the
pr-update-zabbix-7-0-lts-latest-21
branch
from
d19fcf3 to
2ef8d3f
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
📦 Package Details
Maintainer: @danielfdickinson
Description:
Updates Zabbix to 7.0.21-r1 (latest 7.0 LTS version)
Security fixes compared to 7.0.12 (most are frontend only):
insufficient authorization https://support.zabbix.com/browse/ZBX-26988
method user.get with param search:
https://support.zabbix.com/browse/ZBX-27060
Zabbix Super Admin: https://support.zabbix.com/browse/ZBX-27062
problem.view.refresh action:
https://support.zabbix.com/browse/ZBX-27063
resource consumption: https://support.zabbix.com/browse/ZBX-27284
🧪 Run Testing Details
Upgraded a 7.0.12-r2 zabbix-server and zabbix-server-frontend (with zabbix-agentd) to this release (7.0.21-r1). Verified operation.
Did note that for the frontend, clearing browser cache, cookies and other site data for the zabbix frontend server was necessary.
✅ Formalities
If your PR contains a patch:
git am