CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

net-mgmt/prometheus1 1.8.2_50

Systems monitoring and alerting toolkit

Port info

Maintainer
ports@ecadlabs.com
Packages
latest: 1.8.2_50
Upstream
up to date
Last update
to 1.8.2_50 · d81b7ba3c3
Quarterly
2026Q4: 1.8.2_50 · last MFH 60647eff54
Formerly
net-mgmt/prometheus until 2018-02-14
WWW
https://prometheus.io/
Links
cgit · VuXML

Install

Package
# pkg install prometheus1
installs 1.8.2_50 from latest; from quarterly (2026Q4) 1.8.2_50
Port
# cd /usr/ports/net-mgmt/prometheus1 && make install clean
Size
12 MiB download · 43 MiB installed
Depends on
nothing
License
APACHE20
Creates
user prometheus, group prometheus

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.8.2_501.8.2_49–
FreeBSD 151.8.2_501.8.2_49–
FreeBSD 141.8.2_501.8.2_491.8.2_50

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.8.2_501.8.2_49–
FreeBSD 141.8.2_501.8.2_491.8.2_50

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed (2)

The CVE record lists the packaged version 1.8.2_50 as affected, and no VuXML entry names the CVE. What does this mean?

CVECVSSPublishedDescription
CVE-2026-421547.52026-05-04Prometheus is an open-source monitoring system and time series database. Prior to versions 3.5.3 and 3.11.3, the remote read endpoint (/api/v1/read) does not validate th…
CVE-2019-38266.12019-03-26A stored, DOM based, cross-site scripting (XSS) flaw was found in Prometheus before version 2.7.1. An attacker could exploit this by convincing an authenticated user to …

VuXML only (0)

Listed in VuXML, the packaged version 1.8.2_50 is still in the affected range; pkg audit reports it. What does this mean?

None.

Fixed (0)

No VuXML entries for this package.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (72)

Guangyuan Yang (ygy) · 1.8.2_3
*/*: Bump PORTREVISION after lang/go 1.18 update
d690b5102f
Bernhard Froehlich (decke) · 1.8.2_2
net-mgmt/prometheus1: Add CPE information

Approved by:	portmgr (blanket)
1857ce7db5
Mathieu Arnold (mat) · 1.8.2_2
Remove # $FreeBSD$ from Makefiles.
305f148f48
Mikael Urankar (mikael) · 1.8.2_2
net-mgmt/prometheus1: unbreak on aarch64

Update golang.org/x/sys to fix build on aarch64

PR:		244200
Approved by:	ports@ecadlabs.com (maintainer timeout), manu (mentor)
ddab19345b
Dmitri Goutnik (dmgk) · 1.8.2_1
Go ports: cleanup, finish transition to USES=go started with r505321 (cat. misc-shells)

- Remove custom build/install targets left in place after r505321
- Switch to the new GO_TARGET tuple syntax introduced in r512001
- Switch to go:modules when upstream already uses them

Reviewed by:	tobik
Approved by:	araujo (mentor), portmgr (adamw)
Differential Revision:	https://reviews.freebsd.org/D21743
67c4b925b7
Yuri Victorovich (yuri) · 1.8.2_1
Made 10 Go ports respect MAKE_ENV. This is expected to unbreak them.

Ports:
www/go-appengine-sdk devel/go-bindata devel/gogs net/rclone security/obfs4proxy-tor
misc/cryptoballot www/grafana4 sysutils/epazote net-mgmt/prometheus1 security/honeybadger

While here, corrected PYTHON_CMD in www/go-appengine-sdk/Makefile.

Approved by:	tcberner (mentor, implicit)
Approved by:	portmgr (port compliance, infrastructure)
7615de3749
Brad Davis (brd) · 1.8.2_1
Add net-mgmt/prometheus2

Rename prometheus to prometheus1 so they can coexist since upgrading is
non-trival:

https://prometheus.io/docs/prometheus/2.0/migration/

PR:		225169
Submitted by:	David O'Rourke <dor.bsd@xm0.uk>
Reviewed by:	swills
402866ebfd
Brad Davis (brd) · 1.8.2_1 · as net-mgmt/prometheus
net-mgmt/prometheus: Fix build info

PR:		225430
Submitted by:	David O'Rourke <dor.bsd@xm0.uk>
Approved by:	ports@ecadlabs.com (maintainer)
211a0da9e8
Danilo G. Baio (dbaio) · 1.8.2 · as net-mgmt/prometheus
net-mgmt/prometheus: Update to 1.8.2

While here, add LICENSE_FILE.

Changes:	https://github.com/prometheus/prometheus/releases/tag/v1.8.2

PR:		223432
Submitted by:	David O'Rourke <dor.bsd@xm0.uk>
Approved by:	ports@ecadlabs.com (maintainer)
863faf39e6
Larry Rosenman (ler) · 1.8.1 · as net-mgmt/prometheus
net-mgmt/prometheus: upgrade to 1.8.1

PR:		223086
Submitted by:	dor.bsd@xm0.uk
Approved by:	ports@ecadlabs.com (Maintainet)
d9ce0900d5
Jochen Neumeister (joneum) · 1.7.1 · as net-mgmt/prometheus
- net-mgmt/prometheus: Update from 1.6.3 to 1.7.1

- Changelog: https://github.com/prometheus/prometheus/releases/tag/v1.7.0
             https://github.com/prometheus/prometheus/releases/tag/v1.7.1

PR:		220056
Submitted by:	jevonearth (ports at ecadlabs.com) (maintainer)
Approved by:	miwi (mentor)
Differential Revision:	https://reviews.freebsd.org/D11273
51c9774af7
Kurt Jaeger (pi) · 1.6.3 · as net-mgmt/prometheus
net-mgmt/prometheus: update 1.6.1 -> 1.6.3

PR:		219225
Changes:	https://github.com/prometheus/prometheus/releases/tag/v1.6.3
		https://github.com/prometheus/prometheus/releases/tag/v1.6.2
Submitted by:	Jev Bjoersell <jev@ecadlabs.com> (maintainer)
f30f83c178
Larry Rosenman (ler) · 1.6.1 · as net-mgmt/prometheus
Update net-mgmt/prometheus to 1.6.1, add version info Removed STRIP=, as since go 1.6 stripping go binaries doesn't break them.

Details of changes in this release are available here:
https://github.com/prometheus/prometheus/releases/tag/v1.6.1

PR:		218737
Submitted by:	ports@ecadlabs.com (maintainer)
Approved by:	adamw (mentor)
Differential Revision:	https://reviews.freebsd.org/D10423
fafc9c1a1e
Kirill Ponomarev (krion) · 1.5.2 · as net-mgmt/prometheus
Update net-mgmt/prometheus to 1.5.2

PR:		216973
Submitted by:	maintainer
Approved by:	mat (mentor)
Differential Revision:	https://reviews.freebsd.org/D9596
b9f2bf458f
Kirill Ponomarev (krion) · 1.5.1 · as net-mgmt/prometheus
Update net-mgmt/prometheus to 1.5.1

PR:		216927
Submitted by:	ports@ecadlabs.com
Approved by:	mat (mentor)
Differential Revision:	https://reviews.freebsd.org/D9507
9db867f845
Kurt Jaeger (pi) · 1.5.0 · as net-mgmt/prometheus
net-mgmt/prometheus: update 1.4.1 -> 1.5.0

PR:		216411
Changes:	https://github.com/prometheus/prometheus/releases/tag/v1.5.0
Submitted by:	Jev Bjoersell <jev@ecadlabs.com> (maintainer)
e25843514d
Mathieu Arnold (mat) · 1.4.1 · as net-mgmt/prometheus
Do not use post-stage.  Use post-install instead.

The only reason to use post-stage is because the port needs to do
"things" at a later time, like some plist manipulation.
While there, fold post-install in do-install targets when they are
defined.

PR:		214780
Submitted by:	mat
Exp-run by:	antoine
Sponsored by:	Absolight
8b4093cba5
Jason E. Hale (jhale) · 1.4.1 · as net-mgmt/prometheus
Update to 1.4.1

PR:		214829
Submitted by:	Jev Bjoersell <ports@ecadlabs.com> (maintainer)
88d89bdc8a
Kurt Jaeger (pi) · 1.3.1 · as net-mgmt/prometheus
net-mgmt/prometheus: update 1.3.0 -> 1.3.1

PR:		214245
Changes:	https://github.com/prometheus/prometheus/releases/tag/v1.3.1
Submitted by:	Jev Bjoersell <jev@ecadlabs.com> (maintainer)
25fd86df3e
Kurt Jaeger (pi) · 1.3.0 · as net-mgmt/prometheus
net-mgmt/prometheus: update 1.2.1 -> 1.3.0

PR:		213984
Changes:	https://github.com/prometheus/prometheus/releases
Submitted by:	ports@ecadlabs.com (maintainer)
ecdc89dc58
Kurt Jaeger (pi) · 1.2.1_1 · as net-mgmt/prometheus
sysutils/prometheus: Fix some issues discussed in PRs

- the config file is now a @sample
- pkg-plist added
- /var/db/prometheus is the new place to be

PR:		210059
Submitted by:	Andy Carrel <wac@google.com>
Approved by:	jev@ecadlabs.com (maintainer)
7ebe84719e
Kurt Jaeger (pi) · 1.2.1 · as net-mgmt/prometheus
New port: net-mgmt/prometheus

Prometheus is a systems and service monitoring system. It collects metrics
from configured targets at given intervals, evaluates rule expressions,
displays the results, and can trigger alerts if some condition is observed
to be true.

Prometheus' main distinguishing features as compared to other monitoring
systems are:

- a multi-dimensional data model (timeseries defined by metric name and
  set of key/value dimensions)
- a flexible query language to leverage this dimensionality
- no dependency on distributed storage; single server nodes are autonomous
- timeseries collection happens via a pull model over HTTP
- pushing timeseries is supported via an intermediary gateway
- targets are discovered via service discovery or static configuration
- multiple modes of graphing and dashboarding support
- support for hierarchical and horizontal federation

WWW: https://prometheus.io/

PR:		212468
Submitted by:	Jev Bjoersell <jev@ecadlabs.com>
1f28f360aa