Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 28 Jul 2020 01:09:39 +0000 (UTC)
From:      Craig Leres <leres@FreeBSD.org>
To:        ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-head@freebsd.org
Subject:   svn commit: r543560 - head/security/zeek
Message-ID:  <202007280109.06S19dX0072866@repo.freebsd.org>

next in thread | raw e-mail | index | archive | help
Author: leres
Date: Tue Jul 28 01:09:39 2020
New Revision: 543560
URL: https://svnweb.freebsd.org/changeset/ports/543560

Log:
  security/zeek: Update to 3.0.8 and address various vulnerabilities:
  
      https://github.com/zeek/zeek/releases/tag/v3.0.8
  
   - Fix potential DNS analyzer stack overflow
  
   - Fix potential NetbiosSSN analyzer stack overflow
  
  Other fixes:
  
   - Fix DHCP Client ID Option misformat for Hardware Type 0
  
   - Fix/allow copying/cloning of opaque of Broker::Store
  
   - Fix ConnPolling memory over-use
  
   - Fix compress_path not normalizing some paths correctly
  
   - Fix integer conversion error for Tag subtypes/enums
  
   - Fix bro_prng() results not staying within modulus
  
   - Prevent providing a 0 seed to bro_prng() since the LCG parameters
     don't allow that
  
  Reported by:	Jon Siwek
  MFH:		2020Q3
  Security:	e333084c-9588-4eee-8bdc-323e02cb4fe0

Modified:
  head/security/zeek/Makefile
  head/security/zeek/distinfo

Modified: head/security/zeek/Makefile
==============================================================================
--- head/security/zeek/Makefile	Tue Jul 28 01:00:20 2020	(r543559)
+++ head/security/zeek/Makefile	Tue Jul 28 01:09:39 2020	(r543560)
@@ -2,7 +2,7 @@
 # $FreeBSD$
 
 PORTNAME=	zeek
-PORTVERSION=	3.0.7
+PORTVERSION=	3.0.8
 CATEGORIES=	security
 MASTER_SITES=	https://old.zeek.org/downloads/
 DISTFILES=	${DISTNAME}${EXTRACT_SUFX}

Modified: head/security/zeek/distinfo
==============================================================================
--- head/security/zeek/distinfo	Tue Jul 28 01:00:20 2020	(r543559)
+++ head/security/zeek/distinfo	Tue Jul 28 01:09:39 2020	(r543560)
@@ -1,5 +1,5 @@
-TIMESTAMP = 1591815637
-SHA256 (zeek-3.0.7.tar.gz) = 84880d1fc0c373a52d6617166fe48d2e6a6570f985d7f505b61b3a94c5ea17b0
-SIZE (zeek-3.0.7.tar.gz) = 29333447
+TIMESTAMP = 1595897482
+SHA256 (zeek-3.0.8.tar.gz) = df30b788096d51501a64d7ffa74022b263e67585f9ee0a40c0838bc9b3c73956
+SIZE (zeek-3.0.8.tar.gz) = 29334845
 SHA256 (bro-bro-netmap-f3620df_GH0.tar.gz) = e51f420781c9a01b0494f93d82f94a1b045725c1cff406c33887974a9940c655
 SIZE (bro-bro-netmap-f3620df_GH0.tar.gz) = 24661



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?202007280109.06S19dX0072866>