# Zeek security advisories?

**URL:** <https://community.zeek.org/t/zeek-security-advisories/6314>\
**Category:** Zeek\
**Created:** [March 10, 2021, 4:50pm UTC](https://community.zeek.org/t/zeek-security-advisories/6314 "2021-03-10T16:50:09Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Ambros\_Novak](https://avatars.discourse-cdn.com/v4/letter/a/9fc29f/32.png) [@Ambros\_Novak](https://community.zeek.org/u/Ambros_Novak)\
**Post date:** [March 10, 2021, 4:50pm UTC](https://community.zeek.org/t/zeek-security-advisories/6314/1 "2021-03-10T16:50:09Z")

</div>

Hello,

Is there a page that tracks Zeek security advisories, or at least a page tracking known Zeek vulnerabilities and affected versions?

Thank you

AN

---

<div class="post-metadata">

**Author:** ![Nick\_Turley2](https://avatars.discourse-cdn.com/v4/letter/n/85f322/32.png) [@Nick\_Turley2](https://community.zeek.org/u/Nick_Turley2)\
**Post date:** [March 10, 2021, 6:32pm UTC](https://community.zeek.org/t/zeek-security-advisories/6314/2 "2021-03-10T18:32:37Z")

</div>

I would probably recommend starting with CVEs at [https://cve.mitre.org](https://cve.mitre.org)

For example, CVE-2019-12175 for Zeek 2.6.2

[https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12175](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12175)

There is also the National Vulnerability Database  
[https://nvd.nist.gov](https://nvd.nist.gov)

Nick

---

<div class="post-metadata">

**Author:** ![Jon\_Siwek](https://avatars.discourse-cdn.com/v4/letter/j/71c47a/32.png) [@Jon\_Siwek](https://community.zeek.org/u/Jon_Siwek)\
**Post date:** [March 10, 2021, 7:58pm UTC](https://community.zeek.org/t/zeek-security-advisories/6314/3 "2021-03-10T19:58:24Z")

</div>

Security issues are called out and described with links to  
patches/details in the NEWS file, so might be able to use that as a  
source of info if you're mindful of what patch release you're  
interested in and look at the associated release/\* branch:

&nbsp;&nbsp;[https://github.com/zeek/zeek/blob/release/3.0/NEWS](https://github.com/zeek/zeek/blob/release/3.0/NEWS)  
&nbsp;&nbsp;[https://github.com/zeek/zeek/blob/release/3.1/NEWS](https://github.com/zeek/zeek/blob/release/3.1/NEWS)  
&nbsp;&nbsp;[https://github.com/zeek/zeek/blob/release/3.2/NEWS](https://github.com/zeek/zeek/blob/release/3.2/NEWS)  
&nbsp;&nbsp;[https://github.com/zeek/zeek/blob/release/4.0/NEWS](https://github.com/zeek/zeek/blob/release/4.0/NEWS)

- Jon

---

<div class="post-metadata">

**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\
**Post date:** [May 6, 2022, 3:47pm UTC](https://community.zeek.org/t/zeek-security-advisories/6314/4 "2022-05-06T15:47:36Z")

</div>