svn commit: r543560 - head/security/zeek
Craig Leres
leres at FreeBSD.org
Tue Jul 28 01:09:40 UTC 2020
Author: leres
Date: Tue Jul 28 01:09:39 2020
New Revision: 543560
URL: https://svnweb.freebsd.org/changeset/ports/543560
Log:
security/zeek: Update to 3.0.8 and address various vulnerabilities:
https://github.com/zeek/zeek/releases/tag/v3.0.8
- Fix potential DNS analyzer stack overflow
- Fix potential NetbiosSSN analyzer stack overflow
Other fixes:
- Fix DHCP Client ID Option misformat for Hardware Type 0
- Fix/allow copying/cloning of opaque of Broker::Store
- Fix ConnPolling memory over-use
- Fix compress_path not normalizing some paths correctly
- Fix integer conversion error for Tag subtypes/enums
- Fix bro_prng() results not staying within modulus
- Prevent providing a 0 seed to bro_prng() since the LCG parameters
don't allow that
Reported by: Jon Siwek
MFH: 2020Q3
Security: e333084c-9588-4eee-8bdc-323e02cb4fe0
Modified:
head/security/zeek/Makefile
head/security/zeek/distinfo
Modified: head/security/zeek/Makefile
==============================================================================
--- head/security/zeek/Makefile Tue Jul 28 01:00:20 2020 (r543559)
+++ head/security/zeek/Makefile Tue Jul 28 01:09:39 2020 (r543560)
@@ -2,7 +2,7 @@
# $FreeBSD$
PORTNAME= zeek
-PORTVERSION= 3.0.7
+PORTVERSION= 3.0.8
CATEGORIES= security
MASTER_SITES= https://old.zeek.org/downloads/
DISTFILES= ${DISTNAME}${EXTRACT_SUFX}
Modified: head/security/zeek/distinfo
==============================================================================
--- head/security/zeek/distinfo Tue Jul 28 01:00:20 2020 (r543559)
+++ head/security/zeek/distinfo Tue Jul 28 01:09:39 2020 (r543560)
@@ -1,5 +1,5 @@
-TIMESTAMP = 1591815637
-SHA256 (zeek-3.0.7.tar.gz) = 84880d1fc0c373a52d6617166fe48d2e6a6570f985d7f505b61b3a94c5ea17b0
-SIZE (zeek-3.0.7.tar.gz) = 29333447
+TIMESTAMP = 1595897482
+SHA256 (zeek-3.0.8.tar.gz) = df30b788096d51501a64d7ffa74022b263e67585f9ee0a40c0838bc9b3c73956
+SIZE (zeek-3.0.8.tar.gz) = 29334845
SHA256 (bro-bro-netmap-f3620df_GH0.tar.gz) = e51f420781c9a01b0494f93d82f94a1b045725c1cff406c33887974a9940c655
SIZE (bro-bro-netmap-f3620df_GH0.tar.gz) = 24661
More information about the svn-ports-head
mailing list