From nobody Tue Sep 24 05:47:20 2024 X-Original-To: dev-commits-ports-main@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4XCTQc66LZz5XLkv; Tue, 24 Sep 2024 05:47:20 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R11" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4XCTQc5TnSz4Yy4; Tue, 24 Sep 2024 05:47:20 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1727156840; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=TPG6jlUJKAm9JY/Jm2RBkutsg/iPGEpsuLwH2JuUqrc=; b=gvPbdHgoJ8ysiothyI9iGoGsJCPi9a4cAKUd9MeXTxyUedG/D5ARJP0aYp2AQPmM146BVt GW4DcaqGIuH0Qru3DOfUDQ6zHv1BwM32pRJOEvY5Qx+GeO7V7eaVWqnmEIFYq14oFDS70n lU1LSXGeA/v0zSehkCBdZOENSn82EjEGYQYzIcVnlI/O57ywD0bU16yExbtj+cxpaDlZM1 2mPmd2la4pmfGH+OR0JCG7HNNMTSx+l3Kh5TphVkI9z7HDlE0zoaiAzInRpPstXUXW78M2 +tKsE6MUngu3h8QgIUoaW5OblgkNBjk3qpOPMq3ok9+VAFINxC7ysmnUC44MlA== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1727156840; a=rsa-sha256; cv=none; b=H13y91zG0dTunDGdWC35WWerV3MYsyBsCD+TvLNUNUjpAteOnz1vEA2ztGRSsPV864SqVW OcSVfzzkxJMvMWIs4Ce9WKQfjw+OOnMseeSvzai3xhpH7637TIgedEHnon5kFzyGHQ3FEi 0+bgMvhMRptjRXSon+YngMB6cEXKOK9BdK7NPMZkA2Wsv3a4q/VW8fUqc5dDTQQ/JbA9Kx S2xh0nA31X0QcLxW40jhfDC7G7xnHMxkkweDqv9hhM+NmtxGomslLTueq+0kAFS7rYEFVM pYJB/0EMgc8vIYi5Se2cyfSBvIa05WIARD6KUE0hrTwDhyrhfsJh5YqXsb1rXg== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1727156840; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=TPG6jlUJKAm9JY/Jm2RBkutsg/iPGEpsuLwH2JuUqrc=; b=rTpELEoqar9/N7Hu1sZ61yrImXKBCy8WGf/0PK/0a4jyRV6tjR8rXG222j7DNrlGn+u4XG HQIGIlzUJwPgfVGSwIs5UJPqB10jEUhD23LwwZ9JquXrYbLx/FX0jGOK+7o3A8PV1b8WQ3 eUvLiZBgIX5q6PqxrJRK+QkpLNVEK2TT1lO0uEQJXA6flubNw/Z9RdbywAwaKpfqNQoS78 QWgVx1TJ7QkYmh23sgkD4jkS+59FHhlGHnqs/WMpkRRSssdrlXC+XiPzeQidN1BvHOEHNG AusMdZzhxq8wcp1e8Ln6GAxYMYy8aMcngnAKmcHRDJ3FzXuO5w+fbrkE9o4xrw== Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4XCTQc4vpDzHC3; Tue, 24 Sep 2024 05:47:20 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from gitrepo.freebsd.org ([127.0.1.44]) by gitrepo.freebsd.org (8.18.1/8.18.1) with ESMTP id 48O5lKSo014609; Tue, 24 Sep 2024 05:47:20 GMT (envelope-from git@gitrepo.freebsd.org) Received: (from git@localhost) by gitrepo.freebsd.org (8.18.1/8.18.1/Submit) id 48O5lKrF014605; Tue, 24 Sep 2024 05:47:20 GMT (envelope-from git) Date: Tue, 24 Sep 2024 05:47:20 GMT Message-Id: <202409240547.48O5lKrF014605@gitrepo.freebsd.org> To: ports-committers@FreeBSD.org, dev-commits-ports-all@FreeBSD.org, dev-commits-ports-main@FreeBSD.org From: Craig Leres Subject: git: 28e0f477875e - main - security/zeek: Update to 7.0.2 List-Id: Commits to the main branch of the FreeBSD ports repository List-Archive: https://lists.freebsd.org/archives/dev-commits-ports-main List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: dev-commits-ports-main@freebsd.org Sender: owner-dev-commits-ports-main@FreeBSD.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: leres X-Git-Repository: ports X-Git-Refname: refs/heads/main X-Git-Reftype: branch X-Git-Commit: 28e0f477875e7e811544bc029721f81f5a8cc6dc Auto-Submitted: auto-generated The branch main has been updated by leres: URL: https://cgit.FreeBSD.org/ports/commit/?id=28e0f477875e7e811544bc029721f81f5a8cc6dc commit 28e0f477875e7e811544bc029721f81f5a8cc6dc Author: Craig Leres AuthorDate: 2024-09-24 05:46:46 +0000 Commit: Craig Leres CommitDate: 2024-09-24 05:46:46 +0000 security/zeek: Update to 7.0.2 https://github.com/zeek/zeek/releases/tag/v7.0.2 This release fixes the following potential DoS vulnerability: - The POP3 parser has been hardened to avoid unbounded state growth in the face of one-sided traffic capture or when enabled for non-POP3 traffic. This release fixes the following bugs: - Support for SASL+SPNEGO+NTLMSSP was added to the LDAP analyzer. - Telemetry callbacks are now handled via Zeek instead of depending on the prometehus-cpp library to handle them. Reported by: Tim Wojtulewicz --- security/zeek/Makefile | 2 +- security/zeek/distinfo | 6 +++--- security/zeek/pkg-plist | 2 ++ 3 files changed, 6 insertions(+), 4 deletions(-) diff --git a/security/zeek/Makefile b/security/zeek/Makefile index 47bc4fa517ad..3f7841c5239f 100644 --- a/security/zeek/Makefile +++ b/security/zeek/Makefile @@ -1,5 +1,5 @@ PORTNAME= zeek -DISTVERSION= 7.0.1 +DISTVERSION= 7.0.2 CATEGORIES= security MASTER_SITES= https://download.zeek.org/ diff --git a/security/zeek/distinfo b/security/zeek/distinfo index 06b29c5e8308..f386e3a8ceef 100644 --- a/security/zeek/distinfo +++ b/security/zeek/distinfo @@ -1,3 +1,3 @@ -TIMESTAMP = 1725405349 -SHA256 (zeek-7.0.1.tar.gz) = bcfec8c61b96a92068ee3dd6d1affc399f114224cea9caf7944679da2ca89e2b -SIZE (zeek-7.0.1.tar.gz) = 95820593 +TIMESTAMP = 1727154773 +SHA256 (zeek-7.0.2.tar.gz) = 3b40304a01059d08c732e8f24b34f0070ec716e266e69edb24ad96ceed064781 +SIZE (zeek-7.0.2.tar.gz) = 95828919 diff --git a/security/zeek/pkg-plist b/security/zeek/pkg-plist index c36899956264..0d7ee7a549f7 100644 --- a/security/zeek/pkg-plist +++ b/security/zeek/pkg-plist @@ -819,6 +819,7 @@ include/zeek/analyzer/protocol/ntp/ntp.pac include/zeek/analyzer/protocol/ntp/types.bif.h include/zeek/analyzer/protocol/pia/PIA.h include/zeek/analyzer/protocol/pop3/POP3.h +include/zeek/analyzer/protocol/pop3/consts.bif.h include/zeek/analyzer/protocol/pop3/events.bif.h include/zeek/analyzer/protocol/radius/RADIUS.h include/zeek/analyzer/protocol/radius/events.bif.h @@ -1456,6 +1457,7 @@ share/man/man8/zeek.8.gz %%DATADIR%%/base/bif/plugins/Zeek_NetBIOS.functions.bif.zeek %%DATADIR%%/base/bif/plugins/Zeek_NoneWriter.none.bif.zeek %%DATADIR%%/base/bif/plugins/Zeek_PE.events.bif.zeek +%%DATADIR%%/base/bif/plugins/Zeek_POP3.consts.bif.zeek %%DATADIR%%/base/bif/plugins/Zeek_POP3.events.bif.zeek %%DATADIR%%/base/bif/plugins/Zeek_RADIUS.events.bif.zeek %%DATADIR%%/base/bif/plugins/Zeek_RDP.events.bif.zeek