CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

net-mgmt/zabbix6-java 6.0.46

Enterprise-class open source distributed monitoring (java)

0
unaddressed
0
VuXML only
5
fixed
0
open problem reports

Port info

Maintainer
otis@FreeBSD.org
Packages
latest: 6.0.49, update to 6.0.46 not built yet
Upstream
up to date
Last update
to 6.0.46 · 59018f2675
Quarterly
2026Q4: 6.0.48
WWW
https://www.zabbix.com/
Links
cgit · VuXML

Install

Package
# pkg install zabbix6-java
installs 6.0.49 from latest; from quarterly (2026Q4) 6.0.48
Port
# cd /usr/ports/net-mgmt/zabbix6-java && make install clean
# make -C /usr/ports/net-mgmt/zabbix6-java config  # change options first
Size
1.5 MiB download · 1.6 MiB installed
Depends on
devel/libevent 2.1.13, java/openjdk25 25.0.4+7.f.1_1
License
GPLv2+
Creates
user zabbix, group zabbix
Options
1 of 1 on in the package: IPV6

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 166.0.496.0.48–
FreeBSD 156.0.496.0.48–
FreeBSD 146.0.486.0.486.0.48

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 156.0.486.0.48–
FreeBSD 146.0.486.0.486.0.48

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 6.0.49.

Fixed (5)

Show 5 fixed
VuXML entries whose affected range the packaged version has left, plus CVEs from the last 90 days that this version is already past (fixed by update).
CVECVSSPublishedDescription
CVE-2026-239298.52026-08-18Prototype pollution vulnerability in searchParamsToObject() is leading to a persistent XSS in Maps. URL parameter processing was not filtering dangerous properties like …
CVE-2026-11996.92026-08-18Zabbix API and Frontend login lockout mechanism has a flaw where several unsuccessful login requests are not properly counted towards the block counter if sent simultane…
CVE-2026-239376.02026-08-18The Zabbix API host.get action can be exploited by authenticated users to extract a host's PSK key leading to potential loss of data integrity.
CVE-2026-239305.32026-08-18An unauthenticated user is able to cause disproportionate CPU load on the Frontend webserver by sending specifically crafted requests to the Frontend popup.testtriggerex…
CVE-2026-239382.12026-08-18An authenticated administrator is able to crash Zabbix server or proxy by creating specifically crafted preprocessing/script item JavaScript scripts, leading to potentia…

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (9)

Bernhard Froehlich (decke) · 6.0.46
net-mgmt/zabbix6-*: Add CPE information

This is the intended mapping between port and CPE_VENDOR:CPE_PRODUCT

net-mgmt/zabbix5-agent		zabbix:zabbix-agent
net-mgmt/zabbix6-frontend	zabbix:frontend
net-mgmt/zabbix6-java		zabbix:zabbix
net-mgmt/zabbix6-proxy		zabbix:zabbix
net-mgmt/zabbix6-server		zabbix:zabbix_server
59018f2675
Juraj Lutter (otis) · 6.0.46
net-mgmt/zabbix6-server: Update to 6.0.46

Release notes:	https://www.zabbix.com/rn/rn6.0.46
e07d03b068
Ronald Klop (ronald) · 6.0.45_1
*/*: bump portrevision after java_default=25 update

Included all ports that have USES=java.

PR:	293559
86813e9ccf
Juraj Lutter (otis) · 6.0.45
net-mgmt/zabbix6-server: Update to 6.0.45

Release notes:	https://www.zabbix.com/rn/rn6.0.45
3bd383be37
Ronald Klop (ronald) · 6.0.44_1
*/*: bump portrevision after java_default=21 update

PR:	272855
3b8618be7c
Juraj Lutter (otis) · 6.0.39
net-mgmt/zabbix6-server: Update to 6.0.39

Release notes:	https://www.zabbix.com/rn/rn6.0.39
PR:		285091
891c2b8c1d
Juraj Lutter (otis) · 6.0.38_1
net-mgmt/zabbix6-java: Fix JAVA version

Recent zabbix 6 java components requires OpenJDK 11 or newer

PR:		284565
Reported by:	Einar Bjarni Halldórsson <einar@isnic.is>
a5baceeb88
Muhammad Moinur Rahman (bofh)
Mk/**java.mk: Convert bsd.java.mk to USES

The following features have been added or changed:
- Instead of USE_JAVA use USES=java. This defaults to
  USES=java:build,run if NO_BUILD is undefined. Else it defaults to
  USES=java:run
- Instead of USE_ANT=yes use USES=java:ant which also implies
  USES=java:build
- Instead of JAVA_BUILD=yes use USES=java:build. Does not imply run or
  extract
- Instead of JAVA_EXTRACT=yes use USES=java:extract does not imply
  build or run
- Instead of JAVA_RUN=yes use USES=java:run does not imply extract or
  build
- Instead of USE_JAVA=<version> use USES=java and JAVA_VERSION=<version>

Approved by: mat (portmgr), glewis
Differential Revision:  https://reviews.freebsd.org/D48201
0835676e36
Cy Schubert (cy)
net-mgmt/zabbix6-*: Add new family of zabbix6-* ports

Zabbix 6.0 LTS was released on Feb 8, 2022.

End of full support:	Feb 28, 2025
End of Limited support:	Feb 28, 2027
Announced:	https://www.zabbix.com/life_cycle_and_release_policy
daa62df12a