diff options
| author | Craig Leres <leres@FreeBSD.org> | 2020-06-11 04:42:21 +0000 |
|---|---|---|
| committer | Craig Leres <leres@FreeBSD.org> | 2020-06-11 04:42:21 +0000 |
| commit | 9b820cccf443abc0485f8b6444098731b3e14905 (patch) | |
| tree | 70de23203399be49af1f50e184cb82cc2e2abd6c | |
| parent | 6af7aa1910ade107fb8b53e4dcf6c93c0284141d (diff) | |
| download | ports-9b820cccf443abc0485f8b6444098731b3e14905.tar.gz ports-9b820cccf443abc0485f8b6444098731b3e14905.zip | |
MFH: r538431
security/zeek: Update to 3.0.7 and address various vulnerabilities:
https://raw.githubusercontent.com/zeek/zeek/v3.0.7/NEWS
- Fix potential stack overflow in NVT analyzer
- Fix NVT analyzer memory leak from multiple telnet authn name options
- Fix multiple content-transfer-encoding headers causing a memory leak
- Fix potential leak of Analyzers added to tree during Analyzer::Done
- Prevent IP fragment reassembly on packets without minimal IP header
Other fixes:
- Limit rate of logging MaxMind DB diagnostic messages
- Fix wrong return value type for `topk_get_top()` BIF
- Fix opaque Broker types lacking a Type after (de)serialization
- Fix lack of descriptive printing for intervals converted from
`double_to_interval()`
- Fix some cases of known-services not being logged
Security: 9f7ae7ea-da93-4f86-b257-ba76707f6d5d
Approved by: ports-secteam (joneum)
Notes
Notes:
svn path=/branches/2020Q2/; revision=538453
| -rw-r--r-- | security/zeek/Makefile | 16 | ||||
| -rw-r--r-- | security/zeek/distinfo | 6 |
2 files changed, 11 insertions, 11 deletions
diff --git a/security/zeek/Makefile b/security/zeek/Makefile index 97fc88495e2a..9582ad0f4b74 100644 --- a/security/zeek/Makefile +++ b/security/zeek/Makefile @@ -2,7 +2,7 @@ # $FreeBSD$ PORTNAME= zeek -PORTVERSION= 3.0.6 +PORTVERSION= 3.0.7 CATEGORIES= security MASTER_SITES= https://old.zeek.org/downloads/ DISTFILES= ${DISTNAME}${EXTRACT_SUFX} @@ -36,7 +36,6 @@ CMAKE_ARGS+= -GNinja \ -D ZEEK_SCRIPT_INSTALL_PATH:PATH=${PREFIX}/share/zeek \ -D ZEEK_ETC_INSTALL_DIR:PATH=${PREFIX}/etc \ -D ZEEK_MAN_INSTALL_PATH=${MANPREFIX}/man \ - -D ENABLE_PERFTOOLS:BOOL=false \ -D ENABLE_PERFTOOLS_DEBUG:BOOL=false \ -D BinPAC_SKIP_INSTALL:BOOL=true \ -D INSTALL_AUX_TOOLS:BOOL=true \ @@ -72,25 +71,26 @@ ZEEKCTL_DESC= ZeekControl support (implies BROKER and IPSUMDUMP) ZEEKCTL_IMPLIES= BROKER IPSUMDUMP BROCCOLI_LIB_DEPENDS= libbroccoli.so:security/broccoli -GEOIP2_LIB_DEPENDS= libmaxminddb.so:net/libmaxminddb -IPSUMDUMP_BUILD_DEPENDS=ipsumdump:net/ipsumdump -IPSUMDUMP_RUN_DEPENDS= ipsumdump:net/ipsumdump BROKER_BUILD_DEPENDS= swig3.0:devel/swig30 BROKER_CMAKE_BOOL= ENABLE_BROKER DEBUG_CMAKE_BOOL= ENABLE_DEBUG -LBL_HF_RUN_DEPENDS= ${LOCALBASE}/bin/hf:sysutils/lbl-hf +GEOIP2_LIB_DEPENDS= libmaxminddb.so:net/libmaxminddb +IPSUMDUMP_BUILD_DEPENDS=ipsumdump:net/ipsumdump +IPSUMDUMP_RUN_DEPENDS= ipsumdump:net/ipsumdump LBL_CF_RUN_DEPENDS= ${LOCALBASE}/bin/cf:sysutils/lbl-cf +LBL_HF_RUN_DEPENDS= ${LOCALBASE}/bin/hf:sysutils/lbl-hf NETMAP_GH_TUPLE= bro:bro-netmap:f3620df:bro_netmap NETMAP_USE= GITHUB=nodefault +PERFTOOLS_BUILD_DEPENDS=${LOCALBASE}/bin/perftools-pprof:devel/google-perftools PERFTOOLS_CMAKE_BOOL= ENABLE_PERFTOOLS -PERFTOOLS_RUN_DEPENDS= ${LOCALBASE}/bin/perftools-pprof:devel/google-perftools +PERFTOOLS_RUN_DEPENDS=${LOCALBASE}/bin/perftools-pprof:devel/google-perftools PYTHON_BUILD_DEPENDS= swig3.0:devel/swig30 ZEEKCTL_BUILD_DEPENDS= ${LOCALBASE}/bin/bash:shells/bash \ ${PYTHON_PKGNAMEPREFIX}sqlite3>0:databases/py-sqlite3@${PY_FLAVOR} \ swig3.0:devel/swig30 +ZEEKCTL_CMAKE_BOOL= INSTALL_ZEEKCTL ZEEKCTL_RUN_DEPENDS= ${LOCALBASE}/bin/bash:shells/bash \ ${PYTHON_PKGNAMEPREFIX}sqlite3>0:databases/py-sqlite3@${PY_FLAVOR} -ZEEKCTL_CMAKE_BOOL= INSTALL_ZEEKCTL .include <bsd.port.options.mk> diff --git a/security/zeek/distinfo b/security/zeek/distinfo index ec8d23cfdf3d..16af1e2b6189 100644 --- a/security/zeek/distinfo +++ b/security/zeek/distinfo @@ -1,5 +1,5 @@ -TIMESTAMP = 1588807625 -SHA256 (zeek-3.0.6.tar.gz) = 57cd56c21a1c55dbe3e65f704835496fd8ba6f7b1e3166dac9d8b5579cb78ad1 -SIZE (zeek-3.0.6.tar.gz) = 29331321 +TIMESTAMP = 1591815637 +SHA256 (zeek-3.0.7.tar.gz) = 84880d1fc0c373a52d6617166fe48d2e6a6570f985d7f505b61b3a94c5ea17b0 +SIZE (zeek-3.0.7.tar.gz) = 29333447 SHA256 (bro-bro-netmap-f3620df_GH0.tar.gz) = e51f420781c9a01b0494f93d82f94a1b045725c1cff406c33887974a9940c655 SIZE (bro-bro-netmap-f3620df_GH0.tar.gz) = 24661 |