HomeFreeBSD

security/zeek: Update to 5.0.1

Description

security/zeek: Update to 5.0.1

https://github.com/zeek/zeek/releases/tag/v5.0.1

Security fixes since 5.0.0:

  • Fix a possible overflow and crash in the ARP analyzer when receiving a specially crafted packet.
  • Fix a possible overflow and crash in the Modbus analyzer when receiving a specially crafted packet.
  • Fix two possible crashes when converting IP headers for output via the raw_packet event.
  • Fix an abort related to an error related to the ordering of record fields when processing DNS EDNS headers via events

Other changes:

  • Fix a number of typos in the weak-keys.zeek script in the SSL framework.
  • Fix build of internal Spicy when using the --disable-cpp-tests configure flag.
  • Avoid calling safe_realloc unnecessarily from ODesc::Grow(), providing a peformance improvement in some cases.
  • Remove use of fallible get_conn_transport_proto() in analyzer_violation event handlers.
  • Remove a warning when receiving packets with invalid or unknown IP protocol types, preventing it from spamming reporter.log.
  • Fix workers failing to peer with proxies if they take too long to start.
  • Fix Zeek build failures when building against an external version of Spicy.
  • Update Spicy to version 1.5.1 and spicy-plugin to 1.3.17.

Reported by: Tim Wojtulewicz

Details

Provenance
leresAuthored on Aug 26 2022, 11:54 PM
Parents
R11:c70809f54d9b: security/vuxml: Mark zeek < 5.0.1 as vulnerable as per:
Branches
Unknown
Tags
Unknown