CVE and update status of the FreeBSD ports tree3,864 unaddressed CVEs in 671 portsAll times are CET
Port details

net-mgmt/prometheus1 1.8.2_50

Systems monitoring and alerting toolkit

Port info

Maintainer
ports@ecadlabs.com
Packages
latest: 1.8.2_50
Upstream
up to date
Last update
to 1.8.2_50 · d81b7ba3c3
Quarterly
2026Q4: 1.8.2_50 · last MFH 60647eff54
Formerly
net-mgmt/prometheus until 2018-02-14
WWW
https://prometheus.io/
Links
cgit · VuXML

Install

Package
# pkg install prometheus1
installs 1.8.2_50 from latest; from quarterly (2026Q4) 1.8.2_50
Port
# cd /usr/ports/net-mgmt/prometheus1 && make install clean
Size
12 MiB download · 43 MiB installed
Depends on
nothing
License
APACHE20
Creates
user prometheus, group prometheus

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.8.2_501.8.2_49–
FreeBSD 151.8.2_501.8.2_49–
FreeBSD 141.8.2_501.8.2_491.8.2_50

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.8.2_501.8.2_49–
FreeBSD 141.8.2_501.8.2_491.8.2_50

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed (2)

The CVE record lists the packaged version 1.8.2_50 as affected, and no VuXML entry names the CVE. What does this mean?

CVECVSSPublishedDescription
CVE-2026-421547.52026-05-04Prometheus is an open-source monitoring system and time series database. Prior to versions 3.5.3 and 3.11.3, the remote read endpoint (/api/v1/read) does not validate th…
CVE-2019-38266.12019-03-26A stored, DOM based, cross-site scripting (XSS) flaw was found in Prometheus before version 2.7.1. An attacker could exploit this by convincing an authenticated user to …

VuXML only (0)

Listed in VuXML, the packaged version 1.8.2_50 is still in the affected range; pkg audit reports it. What does this mean?

None.

Fixed (0)

No VuXML entries for this package.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (72)

Dag-Erling Smørgrav (des) · 1.8.2_50 MFH 2026Q4 ✓
various: Bump Go ports for Go 1.26.10 / 1.27.3
d81b7ba3c3
Adam Weinberger (adamw) · 1.8.2_48
many: Bump go ports for 1.26.8 and 1.27.1
dd0905142a
Dag-Erling Smørgrav (des) · 1.8.2_47 MFH 2026Q3 ✓
various: Bump go ports for go-1.25.14 / 1.26.7
4867821cd6
Dag-Erling Smørgrav (des) · 1.8.2_46 MFH 2026Q3 ✓
various: Bump go ports for go-1.25.13 / 1.26.6
6d39dcf04e
Dag-Erling Smørgrav (des) · 1.8.2_45 MFH 2026Q3 ✓
various: Bump go ports for go-1.25.12 / 1.26.5
4ea3547132
Dag-Erling Smørgrav (des) · 1.8.2_44
various: Bump go ports for go-1.25.11 / go-1.26.4
dd8dc2a59d
Adam Weinberger (adamw) · 1.8.2_43
various: Bump ports for Go 1.25.10
4e243a83f8
Dag-Erling Smørgrav (des) · 1.8.2_42
various: Bump go ports for go-1.25.9 / 1.26.2
7507e72a84
Adam Weinberger (adamw) · 1.8.2_41
various: Bump ports for Go 1.25.8
a8d318da7c
Adam Weinberger (adamw) · 1.8.2_40
various: Bump ports for Go default 1.24->1.25
97685c1886
Adam Weinberger (adamw) · 1.8.2_39
various: Bump Go ports for 1.24.13
529df949a5
Adam Weinberger (adamw) · 1.8.2_38
various: Bump Go ports for 1.24.12
013f2d30b0
Adam Weinberger (adamw) · 1.8.2_37
various: Bump Go ports for 1.24.11
b24429e3ed
Adam Weinberger (adamw) · 1.8.2_36
various: Bump Go ports for 1.24.10
0dfced16fb
Adam Weinberger (adamw) · 1.8.2_35
various: Bump go ports for go-1.24.9
90f976619b
Adam Weinberger (adamw) · 1.8.2_34
many: Bump dependent ports after go124 update
2e7587aaf8
Adam Weinberger (adamw) · 1.8.2_33
many: Bump go ports for go-1.24.7
31a5a229a7
Adam Weinberger (adamw) · 1.8.2_32
go ports: Bump for 1.24.6
53610681ea
Adam Weinberger (adamw) · 1.8.2_31
many: Bump PORTREVISION for go-1.24.5 update
275975297b
Adam Weinberger (adamw) · 1.8.2_30
various: Bump PORTREVISION after go124-1.24.4 update
94be418de3
Adam Weinberger (adamw) · 1.8.2_29
go: Bump go124-dependent ports

Earlier I bumped the default Go to 1.24. Ports that specify a lower
version will still build with those lower version (for now), so they
don't need a bumping. Instead I'm bumping anything that (now) has go124
as a dependency.
0bdd2ad334
Danilo Egea Gondolfo (danilo) · 1.8.2_28
net-mgmt/prometheus1: Set CONFLICTS_INSTALL against prometheus 2 and 3
a1a616ed93
Adam Weinberger (adamw) · 1.8.2_27
go: Bump ports for go124 update
a4e30d4f4f
Adam Weinberger (adamw) · 1.8.2_26
Bump all go ports for yesterday's releases
d0642a6176
Ashish SHUKLA (ashish) · 1.8.2_25
all: Bump after lang/go121 update
aa8c0111bf
Ashish SHUKLA (ashish) · 1.8.2_24
all: Bump after lang/go121 update
c4b51c2028
Ashish SHUKLA (ashish) · 1.8.2_23
all: Bump after lang/go121 update

MFH:		2024Q2
746fa696a1
Ashish SHUKLA (ashish) · 1.8.2_22
all: Bump after lang/go121 update

MFH:		2024Q2
fce0cc3272
Ashish SHUKLA (ashish) · 1.8.2_21
all: Bump after lang/go121 update

MFH:		2024Q2
32b284679a
Muhammad Moinur Rahman (bofh) · 1.8.2_20
lang/go: Change DEFAULT to 1.21

PR:		277776
Approved by:	portmgr (exp-run)
a5a000df3b
Ashish SHUKLA (ashish) · 1.8.2_19
all: Bump PORTREVISION after lang/go* update

PR:		276530
7e5aa2085f
Ashish SHUKLA (ashish) · 1.8.2_18
all: Bump PORTREVISION after lang/go* update

PR:		274405
0505b712df
Dmitri Goutnik (dmgk) · 1.8.2_17
all: Bump PORTREVISION after lang/go* update
8e4bc57934
Dmitri Goutnik (dmgk) · 1.8.2_16
all: Bump PORTREVISION after lang/go{119,120} update
09b993031a
Dmitri Goutnik (dmgk) · 1.8.2_15
all: Bump PORTREVISION after lang/go{119,120} update
ff40d94c1d
Robert Clausecker (fuz) · 1.8.2_14
net-mgmt/prometheus1: fix build on riscv64

Bump golang.org/x/sys dependency to a version new enough to support
riscv64-freebsd.  While we are at it, only strip if requested.

Sponsored by:	Berliner Linux User Group e.V.
Approved by:	portmgr (build fix blanket)
f9d7c90f45
Dmitri Goutnik (dmgk) · 1.8.2_13
all: Bump PORTREVISION after Go ports update
09079730e9
Dmitri Goutnik (dmgk) · 1.8.2_12
all: Bump PORTREVISION after lang/go{119,120} update
56b5ec772f
Dmitri Goutnik (dmgk) · 1.8.2_11
all: Bump PORTREVISION after GO_DEFAULT update.
2297efc51b
Dmitri Goutnik (dmgk) · 1.8.2_10
all: Bump PORTVERSION after lang/go{118,119} update
3b383d833a
Dmitri Goutnik (dmgk) · 1.8.2_9
all: Bump PORTREVISION after lang/go{118,119} update
d9ad1002d5
Dmitri Goutnik (dmgk) · 1.8.2_8
all: Bump PORTREVISION after lang/go{118,119} update
bde51869ee
Dmitri Goutnik (dmgk) · 1.8.2_7
all: Bump PORTREVISION after lang/go{118,119} update
f05c98fffb
Stefan Eßer (se) · 1.8.2_6
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 1.8.2_6
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Dmitri Goutnik (dmgk) · 1.8.2_6
all: Bump PORTREVISION after Go update

Bump Go ports PORTREVISION after GO_DEFAULT and lang/go118 update.
4476f89764
Tobias C. Berner (tcberner) · 1.8.2_5
net-mgmt: remove 'Created by' lines

A big Thank You to the original contributors of these ports:

  *  @BABOLO <.@babolo.ru>
  *  Alex Samorukov, samm@freebsd.org
  *  Alexander Kriventsov <avk@vl.ru>
  *  Alexander Sulfrian <alexander@sulfrian.net>
  *  Alexander Y. Grigoryev <alexander.4mail@gmail.com>
  *  Alexandre Biancalana <ale@biancalanas.net>
  *  Alexandre Snarskii <snar@paranoia.ru>
  *  Alexandre Snarskii <snar@snar.spb.ru>
  *  Alexey Bobkov <mr.deadlystorm@gmail.com>
  *  Alexey Dokuchaev <danfe@FreeBSD.org>
  *  Alexey V. Degtyarev
  *  Anders Nordby <anders@FreeBSD.org>
  *  Anders Troback
  *  Andreas Klemm <andreas@klemm.gtn.com>
  *  Andrew 'derfi' Sidorov <derfi@vei.ru>
  *  Andrew Pantyukhin <infofarmer@FreeBSD.org>
  *  Andrew Thompson <andy@fud.org.nz>
  *  Andrew Thompson <thompsa@freebsd.org>
  *  Anton Berezin <tobez@FreeBSD.org>
  *  Anton Berezin <tobez@tobez.org>
  *  Athanasios Douitsis <aduitsis@cpan.org>
  *  Babak Farrokhi <farrokhi@FreeBSD.org>
  *  Bartlomiej Rutkowski <r@robakdesign.com>
  *  Bill Fenner <fenner@FreeBSD.org>
  *  Blaz Zupan <blaz@si.FreeBSD.org>
  *  BluePex Security Solutions <freebsd-ports@bluepex.com>
  *  Boris Samorodov <bsam@FreeBSDD.org>
  *  Brad Davis <brd@FreeBSD.org>
  *  Brad Hendrickse <bradh@uunet.co.za>
  *  Brian Somers <brian@FreeBSD.org>
  *  Bruce M Simpson <bms@FreeBSD.org>
  *  Bruce Simpson
  *  Chris S.J. Peron <maneo@bsdpro.com>
  *  Chris St Denis <chris@smartt.com>
  *  Christer Edwards <christer.edwards@gmail.com>
  *  Christopher N. Harrell <cnh@ivmg.net>
  *  Clement Laforet <sheepkiller@cultdeadsheep.org>
  *  Corey Smith <corsmith@gmail.com>
  *  Craig Boston <craig@yekse.gank.org>
  *  Dave Cottlehuber <dch@FreeBSD.org>
  *  Dave Cottlehuber <dch@skunkwerks.at>
  *  David O'Brien (obrien@NUXI.com)
  *  David Shane Holden <dpejesh@yahoo.com>
  *  David Yeske <dyeske@gmail.com>
  *  Denis Shaposhnikov <dsh@vlink.ru>
  *  Dennis Herrmann <adox@mcx2.org>
  *  Dikshie <dikshie@sfc.wide.ad.jp>
  *  Dmitry Sivachenko <demon@FreeBSD.org>
  *  Domas Mituzas <midom@dammit.lt>
  *  Douglas Fraser <doug@idmf.net>
  *  Douglas K. Rand <rand@iteris.com>
  *  Douglas K. Rand <rand@meridian-enviro.com>
  *  Edwin Groothuis <edwin@mavetju.org>
  *  El Vampiro <vampiro@rootshell.ru>
  *  Emanuel Haupt <ehaupt@FreeBSD.org>
  *  Eric F Crist <ecrist@secure-computing.net>
  *  Eric Turgeon <ericturgeon.bsd@gmail.org>
  *  Eugene Grosbein <eugen@FreeBSD.org>
  *  Fotis Zabaras <fotis@zabaras.eu>
  *  Frank Wall <freebsd@moov.de>
  *  Frank Wall <fw@moov.de>
  *  Gea-Suan Lin <gslin@gslin.org>
  *  Geoffroy Desvernay <dgeo@centrale-marseille.fr>
  *  George Reid <greid@ukug.uk.freebsd.org>
  *  Gerrit Beine <gerrit.beine@gmx.de>
  *  Henrik Brix Andersen <henrik@brixandersen.dk>
  *  Holger Lamm <holger@eit.uni-kl.de>
  *  Hsin-Han You <hhyou@cs.nctu.edu.tw>
  *  Hung-Yi Chen <gaod@hychen.org>
  *  Inacio <nacho319+freebsdZilla@gmail.com>
  *  J.R. Oldroyd <fbsd@opal.com>
  *  JJ Behrens <jj@nttmcl.com>
  *  Jake Smith <jake@xz.cx>
  *  James FitzGibbon <jfitz@FreeBSD.org>
  *  James Flemer <jflemer@acm.jhu.edu>
  *  Janos Mohacsi <janos.mohacsi@bsd.hu>
  *  Janos Mohacsi <mohacsi@niif.hu>
  *  Janos.Mohacsi@bsd.hu
  *  Janos.Mohacsi@dante.org.uk
  *  Jason Helfman <jgh@FreeBSD.org>
  *  Jeremy Chadwick <koitsu@FreeBSD.org>
  *  Jerry A! <jerry@thehutt.org>
  *  Jev Björsell <ports@ecadlabs.com>
  *  Joe Clarke <marcus@marcuscom.com
  *  Joe Clarke <marcus@marcuscom.com>
  *  Johannes Jost Meixner <johannes@FreeBSD.org>
  *  Johannes Jost Meixner <johannes@perceivon.net>
  *  Josh Carroll <josh.carroll@gmail.com>
  *  KIKUCHI Koichiro <koichiro@rworks.jp>
  *  Kevin Hung <khung@nullaxiom.com>
  *  Kian Mohageri <kian.mohageri@gmail.com>
  *  Kimura Fuyuki <fuyuki@hadaly.org>
  *  Kirill Ponomarew <ponomarew@oberon.net>
  *  Kris Kennaway <kris@FreeBSD.org>
  *  Lars Engels <lars.engels@0x20.net>
  *  Lars Thegler <lars@thegler.dk>
  *  Lawrence Chen <beastie@tardisi.com>
  *  Lev Walkin <vlm@lionet.info>
  *  Luca Pizzamiglio <pizzamig@FreeBSD.org>
  *  Mahdi Mokhtari <mokhi63@gmail.com>
  *  Manuel Kreutz <mk@nomtec.net>
  *  Marcin Cieslak <saper@system.pl>
  *  Mark Felder <feld@FreeBSD.org>
  *  Mark Pulford <mark@kyne.com.au>
  *  Martin Jackson <mhjacks@swbell.net>
  *  Martin Matuska <mm@FreeBSD.org>
  *  Mathieu Simon <freebsd@simweb.ch>
  *  Matt Moriarity <matt@mattmoriarity.com>
  *  Matt Peterson <matt@peterson.org>
  *  Matthew Seaman <matthew@FreeBSD.org>
  *  Michael L. Hostbaek (mich@freebsdcluster.org)
  *  Michael Lyngbøl <lyngbol@wheel.dk>
  *  Michael Reifenberger <mr@FreeBSD.org>
  *  Michal Hanula <michal@hanu.la>
  *  Mike Bristow <mike@urgle.com>
  *  Mikhail T. <mi@aldan.algebra.com>
  *  Mikolaj Golub <to.my.trociny@gmail.com>
  *  Muhammad Moinur Rahman <5u623l20@gmail.com>
  *  Muhammad Moinur Rahman <bofh@FreeBSD.org>
  *  Nicholas Esborn <nick@netdot.net>
  *  Nick F <ffault@gmail.com>
  *  Nick Hilliard
  *  Nick Hilliard <nick@foobar.org>
  *  Pakhom Golynga <pg@pakhom.spb.ru>
  *  Paul Chvostek <paul@it.ca>
  *  Paul Dlug <paul@nerdlabs.com>
  *  Paul Dlug<paul@nerdlabs.com>
  *  Pavel I Volkov
  *  Peter C. Lai <cowbert@gmail.com>
  *  Phil Phillips
  *  Pierre David <pdagog@gmail.com>, Jean Benoit <jean@unistra.fr>
  *  Rihaz Jerrin <rihaz.jerrin@gmail.com>
  *  Roar Pettersen <roar@uib.no>
  *  Russell A. Jackson <rjackson@cserv62.csub.edu>
  *  Ryan Steinmetz
  *  Ryan Steinmetz <rpsfa@rit.edu>
  *  Ryan Steinmetz <zi@FreeBSD.org>
  *  Serge Maslov <serge@maslov.biz>
  *  Sergey Skvortsov <skv@protey.ru>
  *  Sevan Janiyan <venture37@geeklan.co.uk>
  *  Shaun Amott <shaun@inerd.com>
  *  Simon 'corecode' Schubert <corecode@corecode.ath.cx>
  *  Stefan Esser <se@FreeBSD.org>
  *  Stefan Lambrev <cheffo@freebsd-bg.org>
  *  Stephen J. Roznowski <sjr@home.net>
  *  Steve Wills <swills@FreeBSD.org>
  *  Steven Kreuzer <skreuzer@FreeBSD.org>
  *  Tassilo Philipp <tphilipp@potion-studios.com>
  *  Thomas Spreng <spreng@socket.ch>
  *  Tim Bishop <tdb@FreeBSD.org>
  *  Timur I. Bakeyev <bat@cpan.org>
  *  Tom Judge <tj@FreeBSD.org>
  *  Tor Halvard "Squat" Furulund <squat@squat.no>
  *  Tsung-Han Yeh <snowfly@yuntech.edu.tw>
  *  Tsung-Han Yeh <snowfly@yunteche.du.tw>
  *  Tuc <freebsd-ports@t-b-o-h.net>
  *  Vaida Bogdan
  *  Veniamin Gvozdikov <vg@FreeBSD.org>
  *  Vladimir Ermakov <samflanker@gmail.com>
  *  Vladimir Kotal <vlada@devnull.cz>
  *  Wei-chun Chao
  *  Xavier Beaudouin <kiwi@oav.net>
  *  Ying-Chieh Chen <yinjieh@csie.nctu.edu.tw>
  *  Yuan-Chung Hsiao <ychsiao@ychsiao.org>
  *  anarcat@anarcat.ath.cx
  *  arved
  *  babak@farrokhi.net
  *  brock@cotcomsol.com
  *  clement@FreeBSD.org
  *  cnh@ivmg.net
  *  dom@happygiraffe.net
  *  dpejesh@yahoo.com
  *  ecronin@gizmolabs.org
  *  ehaupt@FreeBSD.org
  *  gpalmer
  *  gslin <gslin@gslin.org>
  *  hr <holgerrepp@googlemail.com>
  *  ijliao
  *  itojun@itojun.org
  *  jabley
  *  jabley@clear.co.nz
  *  jamrich.majo@gmail.com
  *  janos.mohacsi@bsd.hu
  *  joris
  *  joseph@randomnetworks.com
  *  marck@rinet.ru
  *  mich@FreeBSD.org
  *  mich@freebsdcluster.org
  *  nbm
  *  rea-fbsd@codelabs.ru
  *  rflynn@acsalaska.net
  *  salexanov@gmail.com
  *  sanpei@FreeBSD.org
  *  steinex
  *  torstenb
  *  trevor
  *  vfom@narod.ru
  * # Created by Kevin Bowling <kbowling@FreeBSD.org>

With hat:	portmgr
43ac3e28ab
Dmitri Goutnik (dmgk) · 1.8.2_5
all: Bump PORTREVISION after lang/go{117,118} update
153cb65ac8
Dmitri Goutnik (dmgk) · 1.8.2_4
*/*: Bump port revisons after lang/go{117,118} update
309cdeccd8