cisagov/Malcolm v6.4.2

Malcolm v6.4.2

on GitHub

Malcolm v6.4.2 is a minor release containing a few component version updates (some addressing component vulnerabilities) and other improvements.

v6.4.1...v6.4.2

• Component version updates
  • Zeek to v5.0.3 (this release fixes several security vulnerabilities in Zeek itself)
  • OpenSearch and OpenSearch Dashboards to v2.4.0
  • Logstash to v8.4.0
  • FileBeat to v8.5.1
  • NetBox to v3.3.8
• Bug Fixes
  • Fix unhandled exceptions in API when certain API calls are made before data is indexed
• Improvements
  • Added Zeek plugin to detect vulnerability to and exploitation attempts of CVE-2022-3602
  • Minor documentation fixes
  • Minor improvements to Docker container debug logging
  • Implemented caching of entropy calculations for DNS requests and TLS hostnames

Malcolm and Hedgehog Linux may be obtained by pulling or building the Docker images and/or building the ISO installer images as described in the documentation. Unofficial ISO installer images for Malcolm and Hedgehog Linux are not hosted on GitHub, but may be downloaded from https://malcolm.fyi/.