CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

net-mgmt/xymon-server 4.3.30_5

System for monitoring servers and networks

Port info

Maintainer
feld@FreeBSD.org
Packages
latest: 4.3.30_5
Upstream
up to date
Last update
to 4.3.30_5 · deb887f1d8
Quarterly
2026Q4: 4.3.30_5
Formerly
net-mgmt/hobbit-server until 2009-01-11
WWW
http://xymon.sourceforge.net/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install xymon-server
installs 4.3.30_5 from latest; from quarterly (2026Q4) 4.3.30_5
Port
# cd /usr/ports/net-mgmt/xymon-server && make install clean
# make -C /usr/ports/net-mgmt/xymon-server config  # change options first
Size
4.8 MiB download · 32 MiB installed
Depends on
databases/rrdtool 1.11.0, devel/pcre 8.45_4, dns/c-ares 1.34.9, graphics/png 1.6.59_1, net/fping 5.5, net/mtr 0.96
License
GPLv2
Creates
user xymon, group xymon
Options
0 of 3 on in the package
Show the 3 options that are off
DEBUG LDAP NETSNMP

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 164.3.30_54.3.30_5–
FreeBSD 154.3.30_54.3.30_5–
FreeBSD 144.3.30_54.3.30_54.3.30_5

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 154.3.30_54.3.30_5–
FreeBSD 144.3.30_54.3.30_54.3.30_5

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 4.3.30_5.

Fixed (3)

Show 3 fixed
VuXML entries whose affected range the packaged version has left.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (103)

Mark Felder (feld) · 4.3.30_5
net-mgmt/xymon-server: Fix vmstat parsing

The parsing of vmstat code was broken. The original code attempted to
detect FreeBSD 4.10's vmstat output vs FreeBSD 6, but probably never
worked correctly anyway.

FreeBSD 4.12's vmstat output:

 procs memory page disks faults cpu
 r b w avm fre flt re pi po fr sr ad0 md0 in sy cs us sy id
 0 0 0 10908 991180 68 1 1 0 55 0 0 0 241 201 12 0 1 99

FreeBSD 14.3 vmstat output:

 procs    memory    page                      disks       faults       cpu
 r  b  w  avm  fre  flt  re  pi  po   fr   sr nda0 nda1   in   sy   cs us sy id
 1  2  0 7627545837568 4208828416 21155  13  15   1 14995 3542    0    0 1964 61975 39820  3  2 93

It's the same number of fields in the same order, so the vmstat data
was always being parsed into the struct for FreeBSD 4.11 which notably
skipped index 14 (sy) "cpu_syc" so it never had data for this and mapped
index 16 (us) to "cpu_sys" and index 17 (sy) to "cpu_usr" which are
obviously swapped.

With this patch I deleted the vmstat rrd files for FreeBSD hosts and the
data started to populate and graph correctly.
deb887f1d8
Mark Felder (feld) · 4.3.30_4
net-mgmt/xymon-server: Import patches from Debian

Development of Xymon has slowed, but is not abandoned. Debian has
accumulated several patches that have not made it into a release yet
which we should import.

- Fix bbcombotest: "Could not access hobbitd board, error 0"
- Fix reading service banners from TLS-1.3-enabled hosts
- Fix Snapshot and Availability Report on Firefox
- Fix buffer overflow in md5hash
e262f714c3
Po-Chuan Hsieh (sunpoet) · 4.3.30_3
net/mtr: Convert X11 option to x11 and nox11 flavors

net/mtr-nox11 is net/mtr@nox11 now.
4aeef9e30a
Nuno Teixeira (eduardo) · 4.3.30_3
*/*: Bump consumers of databases/rrdtool

New version of rrdtool in tree
3f5fb7b71c
Muhammad Moinur Rahman (bofh) · 4.3.30_2
net-mgmt/xymon-server: Sanitize MANPREFIX

Approved by:    portmgr (blanket)
ed45d6c2c1
Muhammad Moinur Rahman (bofh) · 4.3.30_1
net-mgmt/xymon-server: Fix BUILD with LDAP option

- While converting USE_LDAP=yes to USES=ldap this port was missed. Fix
  this.
- Utilize OPTIONS framework

PR:		269486
Reported by:	dinoex
Approved by:	portmgr (just-fix-it)
Fixes: 6e1233b Mk/**ldap.mk: Convert USE_LDAP to USES=ldap
5d3023c9a2
Muhammad Moinur Rahman (bofh) · 4.3.30_1
Mk/**ldap.mk: Convert USE_LDAP to USES=ldap

Convert the USE_LDAP=yes to USES=ldap and adds the following features:

- Adds the argument USES=ldap:server to add openldap2{4|5|6}-server as
  RUN_DEPENDS
- Adds the argument USES=ldap<version> and replaces WANT_OPENLDAP_VER
- Adds OPENLDAP versions in bsd.default-versions.mk
- Adds USE_OPENLDAP/WANT_OPENLDAP_VER in Mk/bsd.sanity.mk
- Changes consumers to use the features

Reviewed by:	delphij
Approved by:	portmgr
Differential Revision: https://reviews.freebsd.org/D38233
6e1233be22
Stefan Eßer (se) · 4.3.30_1
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 4.3.30_1
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Mark Felder (feld) · 4.3.30_1
net-mgmt/xymon-server: Fix default mtr flags

A default flag passed to mtr for generating traceroute reports was invalid
ff3f75598e
Mathieu Arnold (mat) · 4.3.30
One more small cleanup, forgotten yesterday. Reported by:	lwhsu
cf118ccf87
Mathieu Arnold (mat) · 4.3.30
all: Remove all other $FreeBSD keywords.
135fdeebb9
Mathieu Arnold (mat) · 4.3.30
Remove # $FreeBSD$ from Makefiles.
305f148f48
Mark Felder (feld) · 4.3.30
net-mgmt/xymon-client net-mgmt/xymon-server: Update to 4.3.30

Various crashes and bugs relating to string handling changes have been fixed,
including problems with hostnames with dashes in them.

Combostatus tests propagated up from other combostatus tests should now
display properly.
c9f282caa9
Mark Felder (feld) · 4.3.29
net-mgmt/xymon-server: Update to 4.3.29

Includes a few CVE fixes

MFH:		2019Q3
49457f3fbe
Gerald Pfeifer (gerald) · 4.3.28_1
Bump PORTREVISION for ports depending on the canonical version of GCC as defined in Mk/bsd.default-versions.mk which has moved from GCC 8.3 to GCC 9.1 under most circumstances now after revision 507371.

This includes ports
 - with USE_GCC=yes or USE_GCC=any,
 - with USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and
 - with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
   c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, everything INDEX-11 shows with a dependency on lang/gcc9 now.

PR:		238330
ea8c8ec7da
Piotr Kubaj (pkubaj) · 4.3.28
net-mgmt/xymon-server: fix build with GCC-based architectures

Adding -L/usr/lib when using gcc8 (used on GCC architectures) makes gcc8 link to base libstdc++ which breaks build.

Fix this by adding -L${OPENSSLBASE} only when using non-base SSL.

PR:		237956
Approved by:	feld (maintainer timeout), linimon (mentor, on IRC)
b7749b107d
Alexey Dokuchaev (danfe) · 4.3.28
Remove superfluous linefeeds and fix some other minor whitespace bugs.
7b85b686ee
Mark Felder (feld) · 4.3.28
net-mgmt/xymon-{client,server}: Update to 4.3.28

Changelog:	http://lists.xymon.com/archive/2017-January/044285.html
c5b73fe7e7
Mark Felder (feld) · 4.3.27_2
www/xymon-server: Fix example Apache config files

The example config files for Apache had nonsense variables strewn
throughout as we do not use the interactive build process for Xymon
which would replace them after asking the user a series of questions.
Sane defaults have been chosen to make the examples more useful to the
user.
3f56a2a3c1
Mathieu Arnold (mat) · 4.3.27_1
Cleanup $() variables in ports Makefiles.

Mostly replace with ${}, but sometime, replace with $$() because it is
what was intended in the first place. (I think.)

Sponsored by:	Absolight
e50dc2a336
Mark Felder (feld) · 4.3.27_1
net-mgmt/xymon-server: Modernize port

Clean up pkg-plist
Move @exec to post-install

Reported by:	bapt
b8d7dda78b
Niclas Zeising (zeising) · 4.3.27_1
Update databases/rrdtool to 1.6.0

Most notably, this version of rrdtools.so is thread safe, so the
rrdtools_th.so library is removed.

Bump portrevision for depending ports due to shlib version bump.

For full changelog: http://oss.oetiker.ch/rrdtool/pub/CHANGES

Reviewed by:	kwm
Differential Revision:	D6168
307a70b894
Mark Felder (feld) · 4.3.27
net-mgmt/xymon-client & xymon-server: Update to 4.3.27

Changelog:	http://lists.xymon.com/archive/2016-March/043283.html
2152aa2354
Mathieu Arnold (mat) · 4.3.26
Remove ${PORTSDIR}/ from dependencies, categories m, n, o, and p.

With hat:	portmgr
Sponsored by:	Absolight
8d6597e0bb
Mark Felder (feld) · 4.3.26
net-mgmt/xymon-server: Update to 4.3.26

This is primarily a bug fix release, resolving certain issues with web
page display and browser compatibility introduced with the CSP and XSS
fixes in 4.3.25, and providing additional layers of protection for
incoming data.

Changelog:	http://comments.gmane.org/gmane.comp.monitoring.hobbit/38245

MFH:		2016Q1
121ca8af98
Mark Felder (feld) · 4.3.25
net-mgmt/xymon-server: Update to 4.3.25

This release fixes serveral security issues.

MFH:		2016Q1
Security:	CVE-2016-2054
Security:	CVE-2016-2055
Security:	CVE-2016-2056
Security:	CVE-2016-2057
Security:	CVE-2016-2058
Security:	https://vuxml.freebsd.org/freebsd/1cecd5e0-c372-11e5-96d6-14dae9d210b8.html
fdfb7a7b7f
Mark Felder (feld) · 4.3.24_1
net-mgmt/xymon-server: Remove httpresult patch

Upstream has confirmed they do not intend to revert the change to the
httpresult categorization which resulted in 301 Permanent redirects
being classfied as Yellow (warning) instead of Green (ok)

The logic is that a 301 redirect is a permanent redirect and you should
not be monitoring it but the actual content it is redirecting to.

The old behavior existed for many years, but is considered faulty
logic. If you have "yellow" surprises on your dashboard, please fix your
monitoring targets. I do not wish to divert FreeBSD's Xymon behavior
from upstream's intentions.
3caf0ad9bb
Mark Felder (feld) · 4.3.24
net-mgmt/xymon-server: Update to 4.3.24

Also ensure 301 redirects are conisidered "GREEN". This has been
reported upstream.
0bd8c2520f
Mark Felder (feld) · 4.3.23_1
net-mgmt/xymon-server: Patch to fix HTTP monitoring

In 4.2.23 the HTTP status codes were reworked, but a comparison mistake
caused the "catch-all" for non-standard status codes was incorrect. The
result is that some valid HTTP status codes may cause Xymon to report
RED when they should have reported YELLOW or GREEN.
debf6027aa
Mark Felder (feld) · 4.3.23
net-mgmt/xymon-client net-mgmt/xymon-server: Update to 4.3.23

Changelog:	http://sourceforge.net/p/xymon/news/2015/11/xymon-4323-released/
2eb868517e
Mark Felder (feld) · 4.3.22
net-mgmt/xymon-server net-mgmt/xymon-client: Update to 4.3.22

Changelog:	http://sourceforge.net/p/xymon/news/2015/11/xymon-4322-released/
3937761915
Jimmy Olgeni (olgeni) · 4.3.21_3
Remove trailing whitespace from Makefiles, M-X.
eb8748beda
Mark Felder (feld) · 4.3.21_3
Add patch to fix http monitoring

401 and 403 errors were mistakenly hardcoded to return "green" status

I'm working with upstream on cleaning up these checks. I expect to see
an improvement in 4.3.22.
7cacfc9538
Mark Felder (feld) · 4.3.21_2
Forgot to commit a patch.

Better bump portrevision.

Pointyhat -> me

Reported by:	mmoll
ff3e0e7b73
Mark Felder (feld) · 4.3.21_1
Remove xymonping and replace with symlink to fping

xymonping has been deprecated for a few years and fping is a drop-in
replacement. A symlink is provided so old configurations are not broken.
1772b156cd
Mark Felder (feld) · 4.3.21
Update to 4.3.21
27ffba5558
Mark Felder (feld) · 4.3.20
Update to Xymon 4.3.20
32d0a760c4
Mark Felder (feld) · 4.3.19
Did not need to specify CPE_VENDOR or CPE_PRODUCT
f009bc2692
Mark Felder (feld) · 4.3.19
Update to 4.3.19 Remove patches that were upstreamed

xymon-client rc script: leftover children auto expire after 5 minutes;
remove stop_postcmd

Special thanks to JC Cleaver who is taking upstream Xymon to new and
exciting places.
e99774962f
Mark Felder (feld) · 4.3.18_6
Previous patch for xymonproxy didn't land in the files dir
cf9119a47b
Mark Felder (feld) · 4.3.18_5
Add patch to improve xymonproxy reliability on FreeBSD
361fa8afe5
Mark Felder (feld) · 4.3.18_4
Upstream re-rolled 4.3.18 release
8e9ec7cd42
Mark Felder (feld) · 4.3.18_3
Add patch to fix xymonnet crashing when a DNS check returns an AAAA record

PR:		196495
Submitted by:	kvedulv@kvedulv.de
074777fe63
Mark Felder (feld) · 4.3.18_2
Permit building against OpenSSL without SSLv2 support

PR:		195796
Submitted by:	lifanov@mail.lifanov.com
39260174e4
Baptiste Daroussin (bapt) · 4.3.18_1
Bump portrevision after png update
bb21093773
Mark Felder (feld) · 4.3.18
Update Xymon to 4.3.18

This version was not put on the usual MASTER SITE much to my dismay.
fec31fa565
Mark Felder (feld) · 4.3.17_4
Add CPE support and fix plist issue I'd previously missed. While here, modernize port and plist.
bfa6325392
Tijl Coosemans (tijl) · 4.3.17_3
dns/c-ares: - Add USES=libtool and bump dependent ports - Move variable definitions in front of include bsd.port.options.mk - Replace patch with USES=pathfix

Approved by:	portmgr (implicit, bump unstaged port)
c8711e099a
Tijl Coosemans (tijl) · 4.3.17_2
net/openldap24-*: - Convert to USES=libtool and bump dependent ports - Avoid USE_AUTOTOOLS - Don't use PTHREAD_LIBS - Use MAKE_CMD

databases/glom:
- Drop :keepla
- Add INSTALL_TARGET=install-strip

databases/libgda4* databases/libgda5*:
- Convert to USES=libtool and bump dependent ports
- USES=tar:xz
- Use INSTALL_TARGET=install-strip
- Use @sample

databases/libgdamm:
- Drop :keepla
- USES=tar:bzip2
- Use INSTALL_TARGET=install-strip

databases/libgdamm5:
- Add INSTALL_TARGET=install-strip
- Drop --enable-static (inherited from old repocopy)

devel/anjuta x11-toolkits/py-gnome-extras:
- Drop :keepla

dns/powerdns dns/powerdns-devel:
- Convert to USES=libtool
- Add INSTALL_TARGET=install-strip
- Disable static modules
- Stop creating library symlinks with .0 suffix, not needed for dynamically
  opened modules

mail/dovecot2:
- Add USES=libtool

mail/dovecot2-pigeonhole:
- Drop CONFIGURE_TARGET (incorrect for Dragonfly)
- Add USES=libtool and INSTALL_TARGET=install-strip

math/gnumeric:
- USES=libtool tar:xz

Approved by:	portmgr (implicit, bump unstaged ports)
37f54e0f66