HomeFreeBSD

security/zeek: Update to 4.0.6

Description

security/zeek: Update to 4.0.6

https://github.com/zeek/zeek/releases/tag/v4.0.6

Security fixes since 4.0.5:

  • Fix potential unbounded state growth in the FTP analyzer when receiving a specially-crafted stream of commands. This may lead to a buffer overflow and cause Zeek to crash. Due to the possibility of this happening with packets received from the network, this is a potential DoS vulnerabilty.

Other changes:

  • Empty table constructors with &default attributes may cause a crash.
  • Fix a bug in ZAM when a function containing a loop is inlined
  • Fix a number of bugs with robust dictionary iteration.
  • Fix missing "Reporter" entries when reporting hooks via zeek.

Reported by: Tim Wojtulewicz

Details

Provenance
leresAuthored on Apr 21 2022, 10:48 PM
Parents
R11:c3415cda1c4e: www/R-cran-webshot: Update to 0.5.3
Branches
Unknown
Tags
Unknown