[PATCH 1/4] suricata: Update to version 7.0.11

[PATCH 1/4] suricata: Update to version 7.0.11

[Adolf Belka]

- Update from version 7.0.10 to 7.0.11
- Update of rootfile not required
- Changelog
    7.0.11
	Security #7766: libhtp-c: memory leak with lzma(HIGH - CVE 2025-53537)
	Security #7659: http2: global tx (stream id 0) may open file and never close it
	 (7.0.x backport)(HIGH - CVE 2025-53538)
	Bug #7779: mpm/ac: error "Just ran out of space in the queue" (7.0.x backport)
	Bug #7748: byte_extract: issue with saved 'name' in distance keyword
	 (7.0.x backport)
	Bug #7736: brotli: old crate version has integer underflow (7.0.x backport)
	Bug #7731: dcerpc: uint16 overflow (rust debug assertion) (7.0.x backport)
	Bug #7716: snmp: probing parser returns ALPROTO_FAILED instead of
	 ALPROTO_UNKNOWN if slice.len() < 4 (7.0.x backport)
	Bug #7690: datasets: set type IP can't set IPv4 (7.0.x backport)
	Bug #7688: flow: non-TCP protocol timeout handling leads to missing flows
	 (7.0.x backport)
	Bug #7682: flow: race condition at shutdown leads to duplicate flows
	 (7.0.x backport)
	Bug #7670: http: lack of setting updated_ts leads to detection delay
	 (7.0.x backport)
	Bug #7663: ips: deconflict pass flow and drop packet rules (7.0.x backport)
	Bug #7661: pcap: continuous file reading fails on an empty directory
	 (7.0.x backport)
	Bug #7652: rust: warnings with rustc 1.86
	Bug #7610: http: reachable assertion when memcap reached during rule reload
	Bug #7375: dpdk: iface-copy should not be mandatory (7.0.x backport)
	Bug #7293: CI: clang-format does not work for main-7.0.x branch (7.0.x backport)
	Optimization #7781: mpm/ac-ks: reduce stack usage (7.0.x backport)

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 lfs/suricata | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/lfs/suricata b/lfs/suricata
index 0b0de5654..7c02ec83a 100644
--- a/lfs/suricata
+++ b/lfs/suricata
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 7.0.10
+VER        = 7.0.11
 
 THISAPP    = suricata-$(VER)
 DL_FILE    = $(THISAPP).tar.gz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = c33e3ccf0e5298f3548747a3d9bc52662cf97caa775a4f7e3689fe4bc95d2ad9269d344c67654ad6e03fe463054052bb5d5e720bc67040cb179b041cdb0423d2
+$(DL_FILE)_BLAKE2 = 5bdfc3715bed2faa49cc9096a30fb0f58c81c0ebe6cb82629d5ccddd75cf68af6b3a1e9ae2ed54cbbeea48d40c2e1c3348b52c19856ba9550b6c687653de8b47
 
 install : $(TARGET)
 
-- 
2.50.0

[PATCH 2/4] libhtp: Update to version 0.5.51

[Adolf Belka]

- Update from version 0.5.50 to 0.5.51
- Update of rootfile not required
- suricata-7.0.11 requires libhtp-0.5.51
- Changelog
    0.5.51
	- decompressors: fix leak in lzma error case
	- request: do not fully error on data after HTTP/0.9

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 lfs/libhtp | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/lfs/libhtp b/lfs/libhtp
index dc45aac66..3c8d0594e 100644
--- a/lfs/libhtp
+++ b/lfs/libhtp
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 0.5.50
+VER        = 0.5.51
 
 THISAPP    = libhtp-$(VER)
 DL_FILE    = $(THISAPP).tar.gz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = e26aa03d06aa370ab22e1fb462087ac67427d63490802ac369378f90cbb6ed8ed9f95c20acc3fbfdb92cabddb2e1a45bb7c45454b5d17e898f9b0cf8aa804536
+$(DL_FILE)_BLAKE2 = 0800b917a57745012308bb10d4ce8456d47233ae3420b1d64cb42e88a7156cd1ffcbcdab5df28c54fe3ab70a7f37ba41bd5ebcefe24915abf47b753a0bb05716
 
 install : $(TARGET)
 
@@ -72,8 +72,8 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
 	@rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar zxf $(DIR_DL)/$(DL_FILE)
 	cd $(DIR_APP) && ./autogen.sh
 	cd $(DIR_APP) && ./configure \
-		--prefix=/usr \
-		--disable-static
+				--prefix=/usr \
+				--disable-static
 	cd $(DIR_APP) && make $(MAKETUNING)
 	cd $(DIR_APP) && make install
 	@rm -rf $(DIR_APP)
-- 
2.50.0

[PATCH 3/4] core197: Ship suricata

[Adolf Belka]

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 config/rootfiles/core/197/filelists/suricata | 1 +
 1 file changed, 1 insertion(+)
 create mode 120000 config/rootfiles/core/197/filelists/suricata

diff --git a/config/rootfiles/core/197/filelists/suricata b/config/rootfiles/core/197/filelists/suricata
new file mode 120000
index 000000000..f671f6993
--- /dev/null
+++ b/config/rootfiles/core/197/filelists/suricata
@@ -0,0 +1 @@
+../../../common/suricata
\ No newline at end of file
-- 
2.50.0

[PATCH 4/4] core197: Ship libhtp

[Adolf Belka]

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 config/rootfiles/core/197/filelists/libhtp | 1 +
 1 file changed, 1 insertion(+)
 create mode 120000 config/rootfiles/core/197/filelists/libhtp

diff --git a/config/rootfiles/core/197/filelists/libhtp b/config/rootfiles/core/197/filelists/libhtp
new file mode 120000
index 000000000..676e2c5e8
--- /dev/null
+++ b/config/rootfiles/core/197/filelists/libhtp
@@ -0,0 +1 @@
+../../../common/libhtp
\ No newline at end of file
-- 
2.50.0