cisagov/Malcolm v5.0.2

Malcolm v5.0.2

on GitHub

Malcolm v5.0.2 is a patch release adding HTTP header-based Zeek detection of CVE-2021-44228 ("Log4Shell" Log4J vulnerability).

v5.0.1...v5.0.2

• Added Corelight's Zeek detection script for CVE-2021-44228 ("Log4Shell" Log4J vulnerability)
• move zeek.http.tags field up to top-level tags
• Version bumps
  • Arkime to v3.2.1
  • Alpine (for dashboards-helper, name-map-ui and nginx-proxy Docker containers) to v3.15.0
  • NGINX (for nginx-proxy Docker container) to v1.20.2

Malcolm and Hedgehog Linux may be obtained by pulling or building the Docker images and/or building the ISO installer images as described in the documentation. Unofficial ISO installer images for Malcolm and Hedgehog Linux are not hosted on GitHub, but may be downloaded from https://malcolm.fyi/download/.