CVE and update status of the FreeBSD ports tree4,526 unaddressed CVEs in 616 portsAll times are CET

Port details

net-mgmt/prometheus22.55.1_20

Systems monitoring and alerting toolkit

Maintainer
dor.bsd@xm0.uk
Packages
prometheus 2.55.1_20
Upstream
Higher version available: 3.15.1
CPE
prometheus:prometheus from the port
WWW
https://prometheus.io/
Links
cgit · VuXML

Unaddressed (3) · The CVE record lists this version as affected, no VuXML entry names the CVE

CVE-2026-421517.52026-05-04Prometheus is an open-source monitoring system and time series database. Prior to versions 3.5.3 and 3.11.3, the client_secret field in the Azure AD remote write OAuth c…
CVE-2026-421547.52026-05-04Prometheus is an open-source monitoring system and time series database. Prior to versions 3.5.3 and 3.11.3, the remote read endpoint (/api/v1/read) does not validate th…
CVE-2026-449035.12026-05-26Prometheus is an open-source monitoring system and time series database. From 2.49.0 to before 3.5.3 and 3.11.3, in the Prometheus server's legacy web UI (enabled via th…

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (1)

Show 1 fixed
VuXML entries whose affected range this version has left.

Commits (111)

Steve Wills (swills) · 2.4.3_1
net-mgmt/prometheus2: Remove syslog and newsyslog config files

While here, pet portlint

PR:		232813
Submitted by:	David O'Rourke <dor.bsd@xm0.uk> (maintainer)
6f7d0f2b3a
Jochen Neumeister (joneum) · 2.4.3
Update to 2.4.3

Changelog:

 - Fix panic when using custom EC2 API for SD
 - Fix panic when Zookeeper SD cannot connect to servers
 - Make the skip_head an optional parameter for snapshot API

PR:		232186
Submitted by:	David O'Rourke <dor.bsd@xm0.uk> (maintainer)
Sponsored by:	Netzkommune GmbH
29339d6f74
Steve Wills (swills) · 2.4.2
net-mgmt/prometheus2: update to 2.4.2

PR:		231586
Submitted by:	David O'Rourke <dor.bsd@xm0.uk> (maintainer)
28a3e27d08
Mateusz Piotrowski (0mp) · 2.3.2_1
net-mgmt/prometheus2: Fix a path in pkg-plist.

Fix the following installation phase error:

    cp: /usr/local/etc/newsyslog.conf.d/prometheus.conf: No such file or directory

It was caused by a relative path being specified in pkg-plist instead of an
absolute one (a leading "/" was missing).

PR:		231548
Reviewed by:	dor, krion
Approved by:	dor (maintainer), krion (mentor)
Sponsored by:	Bally Wulff Games & Entertainment GmbH
Differential Revision:	https://reviews.freebsd.org/D17273
4f076ed812
Jochen Neumeister (joneum) · 2.3.2
Update to 2.3.2

changelog: https://github.com/prometheus/prometheus/releases/tag/v2.3.2

PR:		230707
7bc56fc934
Yuri Victorovich (yuri) · 2.3.1
net-mgmt/prometheus2: Update 2.2.1 -> 2.3.1

Port changes:
* Add syslogs and newsyslog config files
* Add USE_SYSLOG option

PR:		228185
Submitted by:	David O'Rourke <dor.bsd@xm0.uk> (maintainer)
9334941dd1
Joseph Mingrone (jrm) · 2.2.1
net-mgmt/prometheus2: Update to version 2.2.1 [1]

Also, tweaks to conform to Porter's Handbook:
 - Set DISTVERSION instead of PORTVERSION directly
 - Update order of blocks/variables

Submitted by:	dor.bsd@xm0.uk (maintainer) [1]
Differential Revision:	https://reviews.freebsd.org/D14657
ff895ea6b9
Brad Davis (brd) · 2.1.0
Readd prometheus2 with corrected history.

PR:		225169
e3b0e4dc51
Brad Davis (brd)
Remove to fix history

PR:		225169
Reported by:	mat
4b3b9bdf04
Yuri Victorovich (yuri) · 2.1.0
Made 14 Go ports respect MAKE_ENV. This is expected to unbreak them.

Ports:
www/fabio benchmarks/bombardier www/go-www net-mgmt/prometheus2 sysutils/immortal
sysutils/docker-freebsd audio/pms-devel sysutils/consul-alerts net-mgmt/pushgateway net/nsq
textproc/jid net-mgmt/alertmanager sysutils/nomad security/ssh-vault

Approved by:	portmgr (port compliance, infrastructure)
d113af84d2
Brad Davis (brd) · 2.1.0
Add net-mgmt/prometheus2

Rename prometheus to prometheus1 so they can coexist since upgrading is
non-trival:

https://prometheus.io/docs/prometheus/2.0/migration/

PR:		225169
Submitted by:	David O'Rourke <dor.bsd@xm0.uk>
Reviewed by:	swills
402866ebfd