Skip to content

Commit

Permalink
security/zeek: Update to 5.0.4
Browse files Browse the repository at this point in the history
    https://github.com/zeek/zeek/releases/tag/v5.0.4

This release fixes the following potential DoS vulnerabilities:

 - A specially-crafted series of HTTP 0.9 packets can cause Zeek
   to spend large amounts of time processing the packets.

 - A specially-crafted FTP packet can cause Zeek to spend large
   amounts of time processing the command.

 - A specially-crafted IPv6 packet can cause Zeek to overflow memory
   and potentially crash.

This release fixes the following bugs:

 - Fix a potential stall in Broker’s internal data pipeline.

Reported by:	Tim Wojtulewicz
Security:	???
  • Loading branch information
leres committed Nov 24, 2022
1 parent f0ee4a8 commit a940eea
Show file tree
Hide file tree
Showing 2 changed files with 4 additions and 4 deletions.
2 changes: 1 addition & 1 deletion security/zeek/Makefile
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
PORTNAME= zeek
DISTVERSION= 5.0.3
DISTVERSION= 5.0.4
CATEGORIES= security
MASTER_SITES= https://download.zeek.org/
DISTFILES= ${DISTNAME}${EXTRACT_SUFX}
Expand Down
6 changes: 3 additions & 3 deletions security/zeek/distinfo
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
TIMESTAMP = 1667955171
SHA256 (zeek-5.0.3.tar.gz) = 8f16ed6b51f63f7efaca506c4ee0396b0fd03e83cb6358dbd9ea6ffe5fd0b657
SIZE (zeek-5.0.3.tar.gz) = 42670900
TIMESTAMP = 1669313502
SHA256 (zeek-5.0.4.tar.gz) = d01aa72864b1128513c0b3667148e765f83cd9f0befe9a751c51f0f19a8ba280
SIZE (zeek-5.0.4.tar.gz) = 42712052
SHA256 (zeek-zeek-netmap-v2.0.0_GH0.tar.gz) = d37a69babfbb62a51a2413d6b83ae792ce1e7f1ccb1d51bd6b209a10fe5c4d75
SIZE (zeek-zeek-netmap-v2.0.0_GH0.tar.gz) = 9100

0 comments on commit a940eea

Please sign in to comment.