0.6.7-5 update - Githubissues

SUSE / linux-security-sensor

Linux security sensor

Other

18 stars 9 forks source link

0.6.7-5 update #60

Closed jeffmahoney closed 1 year ago

jeffmahoney commented 1 year ago

Update to upstream 0.6.7-5 which fixes two CVEs:

CVE-2023-0290: velociraptor: Directory Traversal In Client Id Parameter
CVE-2023-0242: velociraptor: Insufficient Permission Check In The VQL Copy() Function

Switch to using 'static' builds of libbpfgo instead of 'full-static' builds. This will use shared copies of libz and libelf.