security/zeek: Update to 5.0.4

https://github.com/zeek/zeek/releases/tag/v5.0.4

This release fixes the following potential DoS vulnerabilities:

 - A specially-crafted series of HTTP 0.9 packets can cause Zeek
   to spend large amounts of time processing the packets.

 - A specially-crafted FTP packet can cause Zeek to spend large
   amounts of time processing the command.

 - A specially-crafted IPv6 packet can cause Zeek to overflow memory
   and potentially crash.

This release fixes the following bugs:

 - Fix a potential stall in Broker’s internal data pipeline.

Reported by:	Tim Wojtulewicz
Security:	???
This commit is contained in:
Craig Leres 2022-11-24 10:29:18 -08:00
parent f0ee4a8524
commit a940eea46e
2 changed files with 4 additions and 4 deletions

View file

@ -1,5 +1,5 @@
PORTNAME= zeek PORTNAME= zeek
DISTVERSION= 5.0.3 DISTVERSION= 5.0.4
CATEGORIES= security CATEGORIES= security
MASTER_SITES= https://download.zeek.org/ MASTER_SITES= https://download.zeek.org/
DISTFILES= ${DISTNAME}${EXTRACT_SUFX} DISTFILES= ${DISTNAME}${EXTRACT_SUFX}

View file

@ -1,5 +1,5 @@
TIMESTAMP = 1667955171 TIMESTAMP = 1669313502
SHA256 (zeek-5.0.3.tar.gz) = 8f16ed6b51f63f7efaca506c4ee0396b0fd03e83cb6358dbd9ea6ffe5fd0b657 SHA256 (zeek-5.0.4.tar.gz) = d01aa72864b1128513c0b3667148e765f83cd9f0befe9a751c51f0f19a8ba280
SIZE (zeek-5.0.3.tar.gz) = 42670900 SIZE (zeek-5.0.4.tar.gz) = 42712052
SHA256 (zeek-zeek-netmap-v2.0.0_GH0.tar.gz) = d37a69babfbb62a51a2413d6b83ae792ce1e7f1ccb1d51bd6b209a10fe5c4d75 SHA256 (zeek-zeek-netmap-v2.0.0_GH0.tar.gz) = d37a69babfbb62a51a2413d6b83ae792ce1e7f1ccb1d51bd6b209a10fe5c4d75
SIZE (zeek-zeek-netmap-v2.0.0_GH0.tar.gz) = 9100 SIZE (zeek-zeek-netmap-v2.0.0_GH0.tar.gz) = 9100