public inbox for development@lists.ipfire.org
 help / color / mirror / Atom feed
* [PATCH 1/4] suricata: Update to version 7.0.11
@ 2025-07-09  8:11 Adolf Belka
  2025-07-09  8:11 ` [PATCH 2/4] libhtp: Update to version 0.5.51 Adolf Belka
                   ` (2 more replies)
  0 siblings, 3 replies; 4+ messages in thread
From: Adolf Belka @ 2025-07-09  8:11 UTC (permalink / raw)
  To: development; +Cc: Adolf Belka

- Update from version 7.0.10 to 7.0.11
- Update of rootfile not required
- Changelog
    7.0.11
	Security #7766: libhtp-c: memory leak with lzma(HIGH - CVE 2025-53537)
	Security #7659: http2: global tx (stream id 0) may open file and never close it
	 (7.0.x backport)(HIGH - CVE 2025-53538)
	Bug #7779: mpm/ac: error "Just ran out of space in the queue" (7.0.x backport)
	Bug #7748: byte_extract: issue with saved 'name' in distance keyword
	 (7.0.x backport)
	Bug #7736: brotli: old crate version has integer underflow (7.0.x backport)
	Bug #7731: dcerpc: uint16 overflow (rust debug assertion) (7.0.x backport)
	Bug #7716: snmp: probing parser returns ALPROTO_FAILED instead of
	 ALPROTO_UNKNOWN if slice.len() < 4 (7.0.x backport)
	Bug #7690: datasets: set type IP can't set IPv4 (7.0.x backport)
	Bug #7688: flow: non-TCP protocol timeout handling leads to missing flows
	 (7.0.x backport)
	Bug #7682: flow: race condition at shutdown leads to duplicate flows
	 (7.0.x backport)
	Bug #7670: http: lack of setting updated_ts leads to detection delay
	 (7.0.x backport)
	Bug #7663: ips: deconflict pass flow and drop packet rules (7.0.x backport)
	Bug #7661: pcap: continuous file reading fails on an empty directory
	 (7.0.x backport)
	Bug #7652: rust: warnings with rustc 1.86
	Bug #7610: http: reachable assertion when memcap reached during rule reload
	Bug #7375: dpdk: iface-copy should not be mandatory (7.0.x backport)
	Bug #7293: CI: clang-format does not work for main-7.0.x branch (7.0.x backport)
	Optimization #7781: mpm/ac-ks: reduce stack usage (7.0.x backport)

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 lfs/suricata | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/lfs/suricata b/lfs/suricata
index 0b0de5654..7c02ec83a 100644
--- a/lfs/suricata
+++ b/lfs/suricata
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 7.0.10
+VER        = 7.0.11
 
 THISAPP    = suricata-$(VER)
 DL_FILE    = $(THISAPP).tar.gz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = c33e3ccf0e5298f3548747a3d9bc52662cf97caa775a4f7e3689fe4bc95d2ad9269d344c67654ad6e03fe463054052bb5d5e720bc67040cb179b041cdb0423d2
+$(DL_FILE)_BLAKE2 = 5bdfc3715bed2faa49cc9096a30fb0f58c81c0ebe6cb82629d5ccddd75cf68af6b3a1e9ae2ed54cbbeea48d40c2e1c3348b52c19856ba9550b6c687653de8b47
 
 install : $(TARGET)
 
-- 
2.50.0



^ permalink raw reply	[flat|nested] 4+ messages in thread

* [PATCH 2/4] libhtp: Update to version 0.5.51
  2025-07-09  8:11 [PATCH 1/4] suricata: Update to version 7.0.11 Adolf Belka
@ 2025-07-09  8:11 ` Adolf Belka
  2025-07-09  8:11 ` [PATCH 3/4] core197: Ship suricata Adolf Belka
  2025-07-09  8:11 ` [PATCH 4/4] core197: Ship libhtp Adolf Belka
  2 siblings, 0 replies; 4+ messages in thread
From: Adolf Belka @ 2025-07-09  8:11 UTC (permalink / raw)
  To: development; +Cc: Adolf Belka

- Update from version 0.5.50 to 0.5.51
- Update of rootfile not required
- suricata-7.0.11 requires libhtp-0.5.51
- Changelog
    0.5.51
	- decompressors: fix leak in lzma error case
	- request: do not fully error on data after HTTP/0.9

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 lfs/libhtp | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/lfs/libhtp b/lfs/libhtp
index dc45aac66..3c8d0594e 100644
--- a/lfs/libhtp
+++ b/lfs/libhtp
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 0.5.50
+VER        = 0.5.51
 
 THISAPP    = libhtp-$(VER)
 DL_FILE    = $(THISAPP).tar.gz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = e26aa03d06aa370ab22e1fb462087ac67427d63490802ac369378f90cbb6ed8ed9f95c20acc3fbfdb92cabddb2e1a45bb7c45454b5d17e898f9b0cf8aa804536
+$(DL_FILE)_BLAKE2 = 0800b917a57745012308bb10d4ce8456d47233ae3420b1d64cb42e88a7156cd1ffcbcdab5df28c54fe3ab70a7f37ba41bd5ebcefe24915abf47b753a0bb05716
 
 install : $(TARGET)
 
@@ -72,8 +72,8 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
 	@rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar zxf $(DIR_DL)/$(DL_FILE)
 	cd $(DIR_APP) && ./autogen.sh
 	cd $(DIR_APP) && ./configure \
-		--prefix=/usr \
-		--disable-static
+				--prefix=/usr \
+				--disable-static
 	cd $(DIR_APP) && make $(MAKETUNING)
 	cd $(DIR_APP) && make install
 	@rm -rf $(DIR_APP)
-- 
2.50.0



^ permalink raw reply	[flat|nested] 4+ messages in thread

* [PATCH 3/4] core197: Ship suricata
  2025-07-09  8:11 [PATCH 1/4] suricata: Update to version 7.0.11 Adolf Belka
  2025-07-09  8:11 ` [PATCH 2/4] libhtp: Update to version 0.5.51 Adolf Belka
@ 2025-07-09  8:11 ` Adolf Belka
  2025-07-09  8:11 ` [PATCH 4/4] core197: Ship libhtp Adolf Belka
  2 siblings, 0 replies; 4+ messages in thread
From: Adolf Belka @ 2025-07-09  8:11 UTC (permalink / raw)
  To: development; +Cc: Adolf Belka

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 config/rootfiles/core/197/filelists/suricata | 1 +
 1 file changed, 1 insertion(+)
 create mode 120000 config/rootfiles/core/197/filelists/suricata

diff --git a/config/rootfiles/core/197/filelists/suricata b/config/rootfiles/core/197/filelists/suricata
new file mode 120000
index 000000000..f671f6993
--- /dev/null
+++ b/config/rootfiles/core/197/filelists/suricata
@@ -0,0 +1 @@
+../../../common/suricata
\ No newline at end of file
-- 
2.50.0



^ permalink raw reply	[flat|nested] 4+ messages in thread

* [PATCH 4/4] core197: Ship libhtp
  2025-07-09  8:11 [PATCH 1/4] suricata: Update to version 7.0.11 Adolf Belka
  2025-07-09  8:11 ` [PATCH 2/4] libhtp: Update to version 0.5.51 Adolf Belka
  2025-07-09  8:11 ` [PATCH 3/4] core197: Ship suricata Adolf Belka
@ 2025-07-09  8:11 ` Adolf Belka
  2 siblings, 0 replies; 4+ messages in thread
From: Adolf Belka @ 2025-07-09  8:11 UTC (permalink / raw)
  To: development; +Cc: Adolf Belka

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 config/rootfiles/core/197/filelists/libhtp | 1 +
 1 file changed, 1 insertion(+)
 create mode 120000 config/rootfiles/core/197/filelists/libhtp

diff --git a/config/rootfiles/core/197/filelists/libhtp b/config/rootfiles/core/197/filelists/libhtp
new file mode 120000
index 000000000..676e2c5e8
--- /dev/null
+++ b/config/rootfiles/core/197/filelists/libhtp
@@ -0,0 +1 @@
+../../../common/libhtp
\ No newline at end of file
-- 
2.50.0



^ permalink raw reply	[flat|nested] 4+ messages in thread

end of thread, other threads:[~2025-07-09  8:11 UTC | newest]

Thread overview: 4+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2025-07-09  8:11 [PATCH 1/4] suricata: Update to version 7.0.11 Adolf Belka
2025-07-09  8:11 ` [PATCH 2/4] libhtp: Update to version 0.5.51 Adolf Belka
2025-07-09  8:11 ` [PATCH 3/4] core197: Ship suricata Adolf Belka
2025-07-09  8:11 ` [PATCH 4/4] core197: Ship libhtp Adolf Belka

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox