svn commit: r534211 - head/security/zeek

Craig Leres leres at FreeBSD.org
Wed May 6 23:37:36 UTC 2020


Author: leres
Date: Wed May  6 23:37:35 2020
New Revision: 534211
URL: https://svnweb.freebsd.org/changeset/ports/534211

Log:
  security/zeek: Update to 3.0.6 and address multiple vulnerabilites:
  
      https://raw.githubusercontent.com/zeek/zeek/v3.0.6/NEWS
  
   - Fix buffer over-read in Ident analyzer
  
   - Fix SSL scripting error leading to uninitialized field access
     and memory leak
  
   - Fix POP3 analyzer global buffer over-read
  
   - Fix potential stack overflows due to use of Variable-Length-Arrays
  
  Other changes since 3.0.5 include:
  
   - Fix unusable `subscriber.poll()` method in Broker Python bindings
  
   - Fix uninitialized field access in `ssl/log-hostcerts-only.zeek`
  
   - Fix missing default function for Kerberos constant-lookup-tables
  
   - Fix cloning of `TypeType` values
  
   - Remove misleading error message on empty bloomfilter lookup
  
   - Fix `misc/stats.zeek` skipping log entry on termination
  
  MFH:		2020Q2

Modified:
  head/security/zeek/Makefile
  head/security/zeek/distinfo

Modified: head/security/zeek/Makefile
==============================================================================
--- head/security/zeek/Makefile	Wed May  6 23:31:06 2020	(r534210)
+++ head/security/zeek/Makefile	Wed May  6 23:37:35 2020	(r534211)
@@ -2,7 +2,7 @@
 # $FreeBSD$
 
 PORTNAME=	zeek
-PORTVERSION=	3.0.5
+PORTVERSION=	3.0.6
 CATEGORIES=	security
 MASTER_SITES=	https://old.zeek.org/downloads/
 DISTFILES=	${DISTNAME}${EXTRACT_SUFX}

Modified: head/security/zeek/distinfo
==============================================================================
--- head/security/zeek/distinfo	Wed May  6 23:31:06 2020	(r534210)
+++ head/security/zeek/distinfo	Wed May  6 23:37:35 2020	(r534211)
@@ -1,5 +1,5 @@
-TIMESTAMP = 1586902773
-SHA256 (zeek-3.0.5.tar.gz) = 821bca8a5862e71834f15381a14975b3447afac2d378e512cdf1a5d7a129380c
-SIZE (zeek-3.0.5.tar.gz) = 29328523
+TIMESTAMP = 1588807625
+SHA256 (zeek-3.0.6.tar.gz) = 57cd56c21a1c55dbe3e65f704835496fd8ba6f7b1e3166dac9d8b5579cb78ad1
+SIZE (zeek-3.0.6.tar.gz) = 29331321
 SHA256 (bro-bro-netmap-f3620df_GH0.tar.gz) = e51f420781c9a01b0494f93d82f94a1b045725c1cff406c33887974a9940c655
 SIZE (bro-bro-netmap-f3620df_GH0.tar.gz) = 24661


More information about the svn-ports-head mailing list