From 3bf8bfaac6784105d0c3cbbc18cf1d27952da81f Mon Sep 17 00:00:00 2001
From: Tim Wojtulewicz <tim@corelight.com>
Date: Tue, 3 Sep 2024 13:04:23 -0700
Subject: [PATCH] Update CHANGES, VERSION, and NEWS for 7.0.1 release

---
 CHANGES |  6 ++++++
 NEWS    | 20 ++++++++++++++++++++
 VERSION |  2 +-
 3 files changed, 27 insertions(+), 1 deletion(-)

diff --git a/CHANGES b/CHANGES
index 8a1d0481dc..a124a7824b 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,9 @@
+7.0.1 | 2024-09-03 13:04:23 -0700
+
+  * Update CHANGES, VERSION, and NEWS for 7.0.1 release (Tim Wojtulewicz, Corelight)
+
+  * Update zeek-aux submodule to pick up zeek-archiver permissions fix (Tim Wojtulewicz, Corelight)
+
 7.0.0-14 | 2024-09-03 09:02:19 -0700
 
   * Bump auxil/spicy to latest release (Benjamin Bannier, Corelight)
diff --git a/NEWS b/NEWS
index 57a02b61a0..dd0c324b26 100644
--- a/NEWS
+++ b/NEWS
@@ -3,6 +3,26 @@ This document summarizes the most important changes in the current Zeek
 release. For an exhaustive list of changes, see the ``CHANGES`` file
 (note that submodules, such as Broker, come with their own ``CHANGES``.)
 
+Zeek 7.0.1
+==========
+
+This release fixes the following bugs:
+
+- HTTP passwords with colon characters in them are now correctly logged.
+
+- The LDAP analyzer now supports handling of non-sealed GSS-API WRAP tokens.
+
+- Heuristics for parsing SASL encrypted and signed LDAP traffic have been made
+  more strict and predictable. Please provide input if this results in less
+  visibility in your environment.
+
+- StartTLS support was added to the LDAP analyzer. The SSL analyzer is enabled
+  for connections where client and server negotiate to TLS through the extended
+  request/response mechanism.
+
+- Specify less-strict permissions for directories and files created by
+  zeek-archiver to play more nicely with user's umask setting.
+
 Zeek 7.0.0
 ==========
 
diff --git a/VERSION b/VERSION
index fb81d6448a..9fe9ff9d99 100644
--- a/VERSION
+++ b/VERSION
@@ -1 +1 @@
-7.0.0-14
+7.0.1