v2.26.1 is the first version that contains the security fix, we should update the port to this version and MFH before updating to newer ones.
Created attachment 225499 [details] net-mgmt/prometheus2: Update to 2.26.1 This diff updates net-mgmt/prometheus2 to 2.26.1, fixing CVE-2021-29622.
A commit in branch main references this bug: URL: https://cgit.FreeBSD.org/ports/commit/?id=eed856cce0561df8be263b48f5ad482a096e2123 commit eed856cce0561df8be263b48f5ad482a096e2123 Author: David O'Rourke <dor.bsd@xm0.uk> AuthorDate: 2021-06-03 09:28:34 +0000 Commit: Guangyuan Yang <ygy@FreeBSD.org> CommitDate: 2021-06-03 09:28:34 +0000 net-mgmt/prometheus2: Update to 2.26.1 Changes: https://github.com/prometheus/prometheus/releases/tag/v2.26.1 PR: 256324 MFH: 2021Q2 (security fix) Security: CVE-2021-29622 Security: 59ab72fb-bccf-11eb-a38d-6805ca1caf5c Submitted by: David O'Rourke <dor.bsd@xm0.uk> (maintainer) Approved by: lwhsu (mentor) net-mgmt/prometheus2/Makefile | 2 +- net-mgmt/prometheus2/distinfo | 10 +++++----- 2 files changed, 6 insertions(+), 6 deletions(-)
A commit in branch 2021Q2 references this bug: URL: https://cgit.FreeBSD.org/ports/commit/?id=ece647d08c3933df136bef37559c6987eec192a7 commit ece647d08c3933df136bef37559c6987eec192a7 Author: David O'Rourke <dor.bsd@xm0.uk> AuthorDate: 2021-06-03 09:28:34 +0000 Commit: Guangyuan Yang <ygy@FreeBSD.org> CommitDate: 2021-06-03 10:02:30 +0000 net-mgmt/prometheus2: Update to 2.26.1 Changes: https://github.com/prometheus/prometheus/releases/tag/v2.26.1 PR: 256324 Security: CVE-2021-29622 Security: 59ab72fb-bccf-11eb-a38d-6805ca1caf5c Approved by: lwhsu (mentor) (cherry picked from commit eed856cce0561df8be263b48f5ad482a096e2123) net-mgmt/prometheus2/Makefile | 2 +- net-mgmt/prometheus2/distinfo | 14 +++++++------- 2 files changed, 8 insertions(+), 8 deletions(-)
(In reply to Guangyuan Yang from comment #0) Committed, thanks!