Hello,
Is there a page that tracks Zeek security advisories, or at least a page tracking known Zeek vulnerabilities and affected versions?
Thank you
AN
I would probably recommend starting with CVEs at https://cve.mitre.org
For example, CVE-2019-12175 for Zeek 2.6.2
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12175
There is also the National Vulnerability Database
https://nvd.nist.gov
Nick
Security issues are called out and described with links to
patches/details in the NEWS file, so might be able to use that as a
source of info if you're mindful of what patch release you're
interested in and look at the associated release/* branch:
https://github.com/zeek/zeek/blob/release/3.0/NEWS
https://github.com/zeek/zeek/blob/release/3.1/NEWS
https://github.com/zeek/zeek/blob/release/3.2/NEWS
https://github.com/zeek/zeek/blob/release/4.0/NEWS
- Jon