Files
packages/admin
Daniel F. Dickinson 4e7e967ffd zabbix: update to 7.0.21 (lts)
Updates Zabbix to 7.0.21-r1 (latest 7.0 LTS version)

Note that for the frontend, clearing browser cache, cookies and other
site data for the zabbix frontend server may be necessary.

Security fixes compared to 7.0.12 (most are frontend only):

* CVE-2025-27238: API hostprototype.get lists data to users with
  insufficient authorization https://support.zabbix.com/browse/ZBX-26988
* CVE-2025-27236: User information disclosure via api_jsonrpc.php on
  method user.get with param search:
  https://support.zabbix.com/browse/ZBX-27060
* CVE-2025-27231: LDAP 'Bind password' field value can be leaked by a
  Zabbix Super Admin: https://support.zabbix.com/browse/ZBX-27062
* CVE-2025-49641: Insufficient permission check for the
  problem.view.refresh action:
  https://support.zabbix.com/browse/ZBX-27063
* CVE-2025-49643: Frontend DoS vulnerability due to asymmetric
  resource consumption: https://support.zabbix.com/browse/ZBX-27284

Signed-off-by: Daniel F. Dickinson <dfdpublic@wildtechgarden.ca>
(cherry picked from commit 0488c96b08)
2025-12-30 15:26:57 +01:00
..
2025-07-30 12:03:14 +02:00
2025-09-23 12:52:15 +02:00
2025-11-07 21:34:16 +08:00
2025-07-18 11:44:16 +02:00
2024-01-31 16:00:10 -08:00
2024-06-23 11:05:02 -07:00
2023-04-21 22:46:58 +02:00
2023-04-21 22:46:58 +02:00
2023-07-07 13:29:50 +02:00
2024-09-02 10:57:35 -07:00
2025-09-11 08:00:58 +02:00
2025-12-30 15:26:57 +01:00