mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-09-09 16:01:54 -09:00
762ddee71c
For more details on the version bump, see: - https://www.zabbix.com/rn/rn7.2.13 - https://www.zabbix.com/rn/rn7.2.12 - https://www.zabbix.com/rn/rn7.2.11 - https://www.zabbix.com/rn/rn7.2.10 - https://www.zabbix.com/rn/rn7.2.9 - https://www.zabbix.com/rn/rn7.2.8 - https://www.zabbix.com/rn/rn7.2.7 - https://www.zabbix.com/rn/rn7.2.6 Fixes the following vulnerabilities: - CVE-2025-27231 The LDAP 'Bind password' value cannot be read after saving, but a Super Admin account can leak it by changing LDAP 'Host' to a rogue LDAP server. To mitigate this, the 'Bind password' value is now reset on 'Host' change. For more information, see: - https://support.zabbix.com/browse/ZBX-27062 - https://nvd.nist.gov/vuln/detail/CVE-2025-27231 - CVE-2025-27236 A regular Zabbix user can search other users in their user group via Zabbix API by select fields the user does not have access to view. This allows data-mining some field values the user does not have access to. For more information, see: - https://support.zabbix.com/browse/ZBX-27060 - https://nvd.nist.gov/vuln/detail/CVE-2025-27236 - CVE-2025-27238 Due to a bug in Zabbix API, the hostprototype.get method lists all host prototypes to users that do not have any user groups assigned to them. For more information, see: - https://nvd.nist.gov/vuln/detail/CVE-2025-27238 - https://support.zabbix.com/browse/ZBX-26988 - CVE-2025-49641 A regular Zabbix user with no permission to the Monitoring -> Problems view is still able to call the problem.view.refresh action and therefore still retrieve a list of active problems. For more information, see: - https://support.zabbix.com/browse/ZBX-27063 - https://nvd.nist.gov/vuln/detail/CVE-2025-49641 Signed-off-by: Thomas Perale <thomas.perale@mind.be> Signed-off-by: Julien Olivain <ju.o@free.fr>
4 lines
196 B
Plaintext
4 lines
196 B
Plaintext
# Locally computed
|
|
sha256 44b51a09897e83b7d25cd706f88c0462224991d780881d6157d88fd804cc3a6c zabbix-7.2.13.tar.gz
|
|
sha256 0d96a4ff68ad6d4b6f1f30f713b18d5184912ba8dd389f86aa7710db079abcb0 COPYING
|