From owner-svn-ports-branches@freebsd.org Thu Jun 11 04:42:22 2020 Return-Path: Delivered-To: svn-ports-branches@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id A728434A670; Thu, 11 Jun 2020 04:42:22 +0000 (UTC) (envelope-from leres@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 49jB6Q3LwZz42x1; Thu, 11 Jun 2020 04:42:22 +0000 (UTC) (envelope-from leres@FreeBSD.org) Received: from repo.freebsd.org (repo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 6E5DA124D4; Thu, 11 Jun 2020 04:42:22 +0000 (UTC) (envelope-from leres@FreeBSD.org) Received: from repo.freebsd.org ([127.0.1.37]) by repo.freebsd.org (8.15.2/8.15.2) with ESMTP id 05B4gM5p052435; Thu, 11 Jun 2020 04:42:22 GMT (envelope-from leres@FreeBSD.org) Received: (from leres@localhost) by repo.freebsd.org (8.15.2/8.15.2/Submit) id 05B4gM92052430; Thu, 11 Jun 2020 04:42:22 GMT (envelope-from leres@FreeBSD.org) Message-Id: <202006110442.05B4gM92052430@repo.freebsd.org> X-Authentication-Warning: repo.freebsd.org: leres set sender to leres@FreeBSD.org using -f From: Craig Leres Date: Thu, 11 Jun 2020 04:42:22 +0000 (UTC) To: ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-branches@freebsd.org Subject: svn commit: r538453 - branches/2020Q2/security/zeek X-SVN-Group: ports-branches X-SVN-Commit-Author: leres X-SVN-Commit-Paths: branches/2020Q2/security/zeek X-SVN-Commit-Revision: 538453 X-SVN-Commit-Repository: ports MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-ports-branches@freebsd.org X-Mailman-Version: 2.1.33 Precedence: list List-Id: SVN commit messages for all the branches of the ports tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Jun 2020 04:42:22 -0000 Author: leres Date: Thu Jun 11 04:42:21 2020 New Revision: 538453 URL: https://svnweb.freebsd.org/changeset/ports/538453 Log: MFH: r538431 security/zeek: Update to 3.0.7 and address various vulnerabilities: https://raw.githubusercontent.com/zeek/zeek/v3.0.7/NEWS - Fix potential stack overflow in NVT analyzer - Fix NVT analyzer memory leak from multiple telnet authn name options - Fix multiple content-transfer-encoding headers causing a memory leak - Fix potential leak of Analyzers added to tree during Analyzer::Done - Prevent IP fragment reassembly on packets without minimal IP header Other fixes: - Limit rate of logging MaxMind DB diagnostic messages - Fix wrong return value type for `topk_get_top()` BIF - Fix opaque Broker types lacking a Type after (de)serialization - Fix lack of descriptive printing for intervals converted from `double_to_interval()` - Fix some cases of known-services not being logged Security: 9f7ae7ea-da93-4f86-b257-ba76707f6d5d Approved by: ports-secteam (joneum) Modified: branches/2020Q2/security/zeek/Makefile branches/2020Q2/security/zeek/distinfo Directory Properties: branches/2020Q2/ (props changed) Modified: branches/2020Q2/security/zeek/Makefile ============================================================================== --- branches/2020Q2/security/zeek/Makefile Thu Jun 11 03:15:26 2020 (r538452) +++ branches/2020Q2/security/zeek/Makefile Thu Jun 11 04:42:21 2020 (r538453) @@ -2,7 +2,7 @@ # $FreeBSD$ PORTNAME= zeek -PORTVERSION= 3.0.6 +PORTVERSION= 3.0.7 CATEGORIES= security MASTER_SITES= https://old.zeek.org/downloads/ DISTFILES= ${DISTNAME}${EXTRACT_SUFX} @@ -36,7 +36,6 @@ CMAKE_ARGS+= -GNinja \ -D ZEEK_SCRIPT_INSTALL_PATH:PATH=${PREFIX}/share/zeek \ -D ZEEK_ETC_INSTALL_DIR:PATH=${PREFIX}/etc \ -D ZEEK_MAN_INSTALL_PATH=${MANPREFIX}/man \ - -D ENABLE_PERFTOOLS:BOOL=false \ -D ENABLE_PERFTOOLS_DEBUG:BOOL=false \ -D BinPAC_SKIP_INSTALL:BOOL=true \ -D INSTALL_AUX_TOOLS:BOOL=true \ @@ -72,25 +71,26 @@ ZEEKCTL_DESC= ZeekControl support (implies BROKER and ZEEKCTL_IMPLIES= BROKER IPSUMDUMP BROCCOLI_LIB_DEPENDS= libbroccoli.so:security/broccoli -GEOIP2_LIB_DEPENDS= libmaxminddb.so:net/libmaxminddb -IPSUMDUMP_BUILD_DEPENDS=ipsumdump:net/ipsumdump -IPSUMDUMP_RUN_DEPENDS= ipsumdump:net/ipsumdump BROKER_BUILD_DEPENDS= swig3.0:devel/swig30 BROKER_CMAKE_BOOL= ENABLE_BROKER DEBUG_CMAKE_BOOL= ENABLE_DEBUG -LBL_HF_RUN_DEPENDS= ${LOCALBASE}/bin/hf:sysutils/lbl-hf +GEOIP2_LIB_DEPENDS= libmaxminddb.so:net/libmaxminddb +IPSUMDUMP_BUILD_DEPENDS=ipsumdump:net/ipsumdump +IPSUMDUMP_RUN_DEPENDS= ipsumdump:net/ipsumdump LBL_CF_RUN_DEPENDS= ${LOCALBASE}/bin/cf:sysutils/lbl-cf +LBL_HF_RUN_DEPENDS= ${LOCALBASE}/bin/hf:sysutils/lbl-hf NETMAP_GH_TUPLE= bro:bro-netmap:f3620df:bro_netmap NETMAP_USE= GITHUB=nodefault +PERFTOOLS_BUILD_DEPENDS=${LOCALBASE}/bin/perftools-pprof:devel/google-perftools PERFTOOLS_CMAKE_BOOL= ENABLE_PERFTOOLS -PERFTOOLS_RUN_DEPENDS= ${LOCALBASE}/bin/perftools-pprof:devel/google-perftools +PERFTOOLS_RUN_DEPENDS=${LOCALBASE}/bin/perftools-pprof:devel/google-perftools PYTHON_BUILD_DEPENDS= swig3.0:devel/swig30 ZEEKCTL_BUILD_DEPENDS= ${LOCALBASE}/bin/bash:shells/bash \ ${PYTHON_PKGNAMEPREFIX}sqlite3>0:databases/py-sqlite3@${PY_FLAVOR} \ swig3.0:devel/swig30 +ZEEKCTL_CMAKE_BOOL= INSTALL_ZEEKCTL ZEEKCTL_RUN_DEPENDS= ${LOCALBASE}/bin/bash:shells/bash \ ${PYTHON_PKGNAMEPREFIX}sqlite3>0:databases/py-sqlite3@${PY_FLAVOR} -ZEEKCTL_CMAKE_BOOL= INSTALL_ZEEKCTL .include Modified: branches/2020Q2/security/zeek/distinfo ============================================================================== --- branches/2020Q2/security/zeek/distinfo Thu Jun 11 03:15:26 2020 (r538452) +++ branches/2020Q2/security/zeek/distinfo Thu Jun 11 04:42:21 2020 (r538453) @@ -1,5 +1,5 @@ -TIMESTAMP = 1588807625 -SHA256 (zeek-3.0.6.tar.gz) = 57cd56c21a1c55dbe3e65f704835496fd8ba6f7b1e3166dac9d8b5579cb78ad1 -SIZE (zeek-3.0.6.tar.gz) = 29331321 +TIMESTAMP = 1591815637 +SHA256 (zeek-3.0.7.tar.gz) = 84880d1fc0c373a52d6617166fe48d2e6a6570f985d7f505b61b3a94c5ea17b0 +SIZE (zeek-3.0.7.tar.gz) = 29333447 SHA256 (bro-bro-netmap-f3620df_GH0.tar.gz) = e51f420781c9a01b0494f93d82f94a1b045725c1cff406c33887974a9940c655 SIZE (bro-bro-netmap-f3620df_GH0.tar.gz) = 24661