Download Latest Version v8.0.3 source code.tar.gz (36.1 MB)
Email in envelope

Get an email when there's a new version of Zeek

Home / v7.0.11
Name Modified Size InfoDownloads / Week
Parent folder
zeek-7.0.11.tar.gz 2025-10-13 96.0 MB
0
zeek-7.0.11.tar.gz.asc 2025-10-13 833 Bytes
0
README.md 2025-10-13 880 Bytes
0
v7.0.11 source code.tar.gz 2025-10-13 30.2 MB
0
v7.0.11 source code.zip 2025-10-13 34.0 MB
0
Totals: 5 Items   160.1 MB 0

We would like to thank Jeff McJunkin (@jeffmcjunkin) and Peter Cullen (@pbcullen) for their contributions to this release.

This release fixes the following security issue:

  • The KRB analyzer can leak information about hosts in analyzed traffic via external DNS lookups. This only happens if the script-level variable KRB::keytab is set to point at a valid Kerberos keytab file. We're opting to fix the analyzer so it can't happen at all. The fix is to use a different method from libkrb5 that reuses known host information from the packets instead of re-requesting the same information externally.

This release fixes the following bugs:

  • The get_current_packet_header() BIF now populates the returned record also for fragmented IP datagrams.

  • The decompose_uri() script function now correctly handles URIs containing IPv6 addresses.

Source: README.md, updated 2025-10-13