From d203b90d711e408d9c32d3a48c8c8eeaac7b4ecc Mon Sep 17 00:00:00 2001 From: Tim Wojtulewicz Date: Fri, 18 Jul 2025 16:05:16 -0700 Subject: [PATCH] Update NEWS for 7.2.2 release [skip ci] [nomail] --- NEWS | 31 +++++++++++++++++++++++++++++++ 1 file changed, 31 insertions(+) diff --git a/NEWS b/NEWS index 454f8d9438..92d347fcd5 100644 --- a/NEWS +++ b/NEWS @@ -3,6 +3,37 @@ This document summarizes the most important changes in the current Zeek release. For an exhaustive list of changes, see the ``CHANGES`` file (note that submodules, such as Broker, come with their own ``CHANGES``.) +Zeek 7.2.2 +========== + +We would like to thank @cccs-jsjm and @edoardomich for their contributions to this release. + +This release fixes the following security issue: + +This release fixes the following bugs: + +- The Redis storage backend now requires libhiredis 1.1.0 or later. + +- The websocket support in the Cluster framework gained the ability to listen on IPv6 + addresses. This change deprecates the ``WebSocketServerOptions$listen_host`` in favor of + ``WebSocketServerOptions$listen_addr``. + +- Likewise, the ZeroMQ cluster backend gained the ability to listen on IPv6 addresses. + +- The response to BDAT ``LAST`` was never recognized by the SMTP analyzer, resulting in + the BDAT ``LAST`` commands not being logged in a timely fashion and receiving the wrong + status. Zeek now correctly reports these comands. + +- The Docker images for zeek 7.0 releases now include the ``net-tools`` (for ``iproute2``) + package to silience a warning from ``zeekctl``. They also now include the ``procps`` + package (for ``top``) to ensure the ``zeekctl`` top command works correctly. + +- The Spicy submodule was updated to v1.13.2. This version fixes an error when extracting + bytes with ``&eod``. This would previously result in a cryptic error message. + +- The ZeekJS submodule was updated to v0.18.0. This version fixes a compilation error with + debug builds and GCC 15.1, as well as adding future support for Node v24. + Zeek 7.2.1 ==========