diff --git a/CHANGES b/CHANGES index 4e21c3bab7..451d796556 100644 --- a/CHANGES +++ b/CHANGES @@ -1,3 +1,13 @@ +7.0.6 | 2025-03-20 12:24:03 -0700 + + * Release 7.0.6. + +7.0.5-14 | 2025-03-19 13:04:31 -0700 + + * Update CHANGES, VERSION, and NEWS for 7.0.6 release (Tim Wojtulewicz, Corelight) + + * Update zeekctl submodule to fix a couple btests (Tim Wojtulewicz, Corelight) + 7.0.5-12 | 2025-03-19 10:43:12 -0700 * Update zeekjs to v0.16.0 (Tim Wojtulewicz, Corelight) diff --git a/NEWS b/NEWS index 25a19bc2ab..0fbff451aa 100644 --- a/NEWS +++ b/NEWS @@ -3,6 +3,41 @@ This document summarizes the most important changes in the current Zeek release. For an exhaustive list of changes, see the ``CHANGES`` file (note that submodules, such as Broker, come with their own ``CHANGES``.) +Zeek 7.0.6 +========== + +This release fixes the following bugs: + +- ZAM now handles assignment of record fields correctly when assigning to the result of an + ``in`` operation. + +- The QUIC analyzer was not handling all of the packets in a multi-packet UDP datagram, + which lead it to miss data and have incomplete logging. This has been resolved. + +- The QUIC analyzer was not confirming the protocol early enough, which caused the + ``service`` field for a connection to possible have a strange ordering (possibly + confirmingg ssl before quic, for example). The QUIC analyzer now confirms the protocol + before forwarding to the next analyzer. + +- The ``@load-plugin`` script directive had some deficiencies when it came to loading + scripts generated by BIF code, which could potentially lead to errors with plugins using + those directives. + +- VLAN packets containing VNTAG headers were not being handled correctly. Zeek was already + handling VNTAG -> VLAN, but not the other way around. + +- The ZeekJS submodule was upgraded to v0.16.0, which includes fixes for the following: + + - Signal handling in Zeek was broken when using ZeekJS because we weren't properly + keeping ZeekJS alive internally. A new internal timer was added that keeps the ZeekJS + processing loop running. + + - The ZeekJS javascript execution is now offloaded to a dedicated thread to avoid memory + contention issues that were preventing a number of Zeek events to fail to execute + properly. + +- The mozilla-ca-list.zeek and ct-list.zeek files were updated to be based on NSS 3.109. + Zeek 7.0.5 ========== diff --git a/VERSION b/VERSION index 456c823f37..024b4b9b53 100644 --- a/VERSION +++ b/VERSION @@ -1 +1 @@ -7.0.5-12 +7.0.6 diff --git a/doc b/doc index 6fc35ef451..6198498234 160000 --- a/doc +++ b/doc @@ -1 +1 @@ -Subproject commit 6fc35ef451358576c8a730ed78e54d5509897ee8 +Subproject commit 6198498234291ca34f6658ece80869e753486e32