cisagov/Malcolm v6.0.1

Malcolm v6.0.1

on GitHub

Malcolm v6.0.1 is a minor release updating some of Malcolm's core components and adding a couple of Zeek plugins for detecting recent CVEs.

v6.0.0...v6.0.1

• Added Zeek plugins

  • Corelight's DCE/RPC remote code execution vulnerability (CVE-2022-26809) plugin
  • Corelight's VMware Workspace ONE Access and Identity Manager RCE vulnerability (CVE-2022-22954) plugin

• Bugs fixed

  • Fixed an issue where user-supplied trusted CA certificates might not be added to the OpenSearch container's trust store

• Version bumps

  • OpenSearch to v1.3.2
  • OpenSearch Dashboards to v1.3.2
  • Alpine base Docker image to v3.16
  • Docker Compose to v2.5.0 (as installed by install.py and in the Malcolm ISO installer)

Malcolm and Hedgehog Linux may be obtained by pulling or building the Docker images and/or building the ISO installer images as described in the documentation. Unofficial ISO installer images for Malcolm and Hedgehog Linux are not hosted on GitHub, but may be downloaded from https://malcolm.fyi/download/.