Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 06:38:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Update CHANGES, VERSION, and NEWS for 7.0.5 release

Browse source
This commit is contained in:
Tim Wojtulewicz 2024-12-16 11:12:33 -07:00
parent 26b50908e1
commit 7c8a7680ba
3 changed files with 26 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

4
CHANGES
View file

@ -1,3 +1,7 @@
7.0.5 | 2024-12-16 11:12:33 -0700
* Update CHANGES, VERSION, and NEWS for 7.0.5 release (Tim Wojtulewicz, Corelight)
7.0.4-10 | 2024-12-16 10:21:46 -0700
* QUIC/decrypt_crypto: Actually check if decryption was successful (Arne Welzel, Corelight)

21
NEWS
View file

@ -3,6 +3,27 @@ This document summarizes the most important changes in the current Zeek
release. For an exhaustive list of changes, see the ``CHANGES`` file
(note that submodules, such as Broker, come with their own ``CHANGES``.)
Zeek 7.0.5
==========
This release fixes the following security issues:
- Large QUIC packets can cause Zeek to overflow memory and potentially
crash. Due to the possibility of receiving these packets from remote hosts,
this is a DoS risk. The fix included limits the payload length to 10000 bytes
and reports an error for those cases, as well as fixing the memory allocation
to not use a fixed-size buffer for all packets.
This release fixes the following bugs:
- The ZAM script optimization feature gained some fixes for some minor memory
leaks.
- The ZeekJS submodule was updated to v0.14.0. In certain environment, ZeekJS
would fail to start a debugging thread due to limited stack size, producing
spurious log messages. This was fixed by not starting the debugging thread by
default.
Zeek 7.0.4
==========

2
VERSION
View file

@ -1 +1 @@
7.0.4-10
7.0.5