[Bug 297333] update databases/metabase to 0.58.24 to fix security issues

[email protected] Fri, 07 Aug 2026 11:21:53 +0000
Newsgroups gmane.os.freebsd.devel.ports.bugs
Message-ID <[email protected]/bugzilla/>
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=297333

            Bug ID: 297333
           Summary: update databases/metabase to 0.58.24 to fix security
                    issues
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Many People
          Priority: ---
         Component: Individual Port(s)
          Assignee: [email protected]
          Reporter: [email protected]
                CC: [email protected]
             Flags: maintainer-feedback?([email protected])
                CC: [email protected]

Created attachment 273526
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=273526&action=edit
patch to update databases/metabase port to 0.58.24

https://github.com/metabase/metabase/security/advisories/GHSA-vwf4-m7j8-wcjf
mentions an unauthenticated SQL injection issue in metabase <0.58.24

the attached patch seems to build the port fine on 15.1 and 14.4, haven't tried
updating a running metabase instance yet

-- 
You are receiving this mail because:
You are the assignee for the bug.