We would like to thank Siavash Tahmureszadeh for their contribution to this release.
This release fixes the following security issues:
- Zeek's HTTP analyzer can be tricked into interpreting
Transfer-EncodingorContent-Lengthheaders set in MIME entities within HTTP bodies and change the analyzer behavior. This can be used to hide HTTP requests from analysis. Due to the fact...