mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-09-09 16:01:54 -09:00
37ce0c6c4a
For more details on the version bump, see:
- https://www.zabbix.com/rn/rn7.2.13
- https://www.zabbix.com/rn/rn7.2.12
- https://www.zabbix.com/rn/rn7.2.11
- https://www.zabbix.com/rn/rn7.2.10
- https://www.zabbix.com/rn/rn7.2.9
- https://www.zabbix.com/rn/rn7.2.8
- https://www.zabbix.com/rn/rn7.2.7
- https://www.zabbix.com/rn/rn7.2.6
Fixes the following vulnerabilities:
- CVE-2025-27231
The LDAP 'Bind password' value cannot be read after saving, but a
Super Admin account can leak it by changing LDAP 'Host' to a rogue
LDAP server. To mitigate this, the 'Bind password' value is now
reset on 'Host' change.
For more information, see:
- https://support.zabbix.com/browse/ZBX-27062
- https://nvd.nist.gov/vuln/detail/CVE-2025-27231
- CVE-2025-27236
A regular Zabbix user can search other users in their user group via
Zabbix API by select fields the user does not have access to view.
This allows data-mining some field values the user does not have
access to.
For more information, see:
- https://support.zabbix.com/browse/ZBX-27060
- https://nvd.nist.gov/vuln/detail/CVE-2025-27236
- CVE-2025-27238
Due to a bug in Zabbix API, the hostprototype.get method lists all
host prototypes to users that do not have any user groups assigned
to them.
For more information, see:
- https://nvd.nist.gov/vuln/detail/CVE-2025-27238
- https://support.zabbix.com/browse/ZBX-26988
- CVE-2025-49641
A regular Zabbix user with no permission to the Monitoring ->
Problems view is still able to call the problem.view.refresh action
and therefore still retrieve a list of active problems.
For more information, see:
- https://support.zabbix.com/browse/ZBX-27063
- https://nvd.nist.gov/vuln/detail/CVE-2025-49641
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 762ddee71c)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Buildroot is a simple, efficient and easy-to-use tool to generate embedded Linux systems through cross-compilation. The documentation can be found in docs/manual. You can generate a text document with 'make manual-text' and read output/docs/manual/manual.text. Online documentation can be found at http://buildroot.org/docs.html To build and use the buildroot stuff, do the following: 1) run 'make menuconfig' 2) select the target architecture and the packages you wish to compile 3) run 'make' 4) wait while it compiles 5) find the kernel, bootloader, root filesystem, etc. in output/images You do not need to be root to build or run buildroot. Have fun! Buildroot comes with a basic configuration for a number of boards. Run 'make list-defconfigs' to view the list of provided configurations. Please feed suggestions, bug reports, insults, and bribes back to the buildroot mailing list: buildroot@buildroot.org You can also find us on #buildroot on OFTC IRC. If you would like to contribute patches, please read https://buildroot.org/manual.html#submitting-patches