From mboxrd@z Thu Jan  1 00:00:00 1970
From: Michael Tremer <michael.tremer@ipfire.org>
To: development@lists.ipfire.org
Subject: Re: [PATCH] suricata: Update to version 7.0.8
Date: Fri, 13 Dec 2024 14:38:58 +0000
Message-ID: <47D144C2-F232-472D-8A4A-F67965962845@ipfire.org>
In-Reply-To: <20241212195957.3413927-1-adolf.belka@ipfire.org>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============8627821299898621043=="
List-Id: <development.lists.ipfire.org>

--===============8627821299898621043==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

Thank you, I merged this into master.

> On 12 Dec 2024, at 19:59, Adolf Belka <adolf.belka(a)ipfire.org> wrote:
>=20
> - Update from version 7.0.7 to 7.0.8
> - Update of rootfile not required
> - Changelog
>    7.0.8
> Security #7412: tcp: generic detection bypass using TCP urgent support (7.0=
.x
> backport)(HIGH - CVE 2024-55629)
> Security #7405: dns: quadratic complexity in logging and invalid json as ou=
tput
> (7.0.x backport)(HIGH - CVE 2024-55628)
> Security #7404: tcp: segfault on StreamingBufferSlideToOffsetWithRegions (7=
.0.x
> backport)(CRITICAL - CVE 2024-55627)
> Security #7367: bpf: oversized bpf file can lead to buffer overflow (7.0.x
> backport)(LOW - CVE 2024-55626)
> Security #7306: detect: write to read-only memory in transforms (7.0.x back=
port)
> (CRITICAL - CVE 2024-55605)
> Bug #7445: dpdk: RSS key length missmatch on ice (E810) card with DPDK vers=
ion
> 22.11.6  (7.0.x backport)
> Bug #7434: requires: rules with unmet requirements are still loaded (7.0.x
> backport)
> Bug #7432: detect: decoder event rules fail to match on invalid packets (7.=
0.x
> backport)
> Bug #7407: detect: missing app-layer metadata in alerts (7.0.x backport)
> Bug #7368: flow: flow timeout pseudo packet triggers unexpected alert (7.0.x
> backport)
> Bug #7362: rules: unknown internal events not being detected as errors (7.0=
.x
> backport)
> Bug #7339: rust: different int types turn garbage on FFI boundary (7.0.x ba=
ckport)
> Bug #7335: asan/profiling: global-buffer-overflow error (7.0.x backport)
> Bug #7327: http: FN with prefilter if the first of multi buffer did not mat=
ch
> (7.0.x backport)
> Bug #7324: mqtt: wrong and missing direction for keywords (7.0.x backport)
> Bug #7310: http: incorrect file direction handling (7.0.x backport)
> Bug #7308: conf: memleak if yaml parser is initialized before checking if f=
ile
> exists (7.0.x backport)
> Bug #7307: detect: memleak in case of errors during initialization (7.0.x
> backport)
> Bug #7301: output: oversized records lead to invalid json (7.0.x backport)
> Bug #7295: detect: sip.stat_code keyword uses wrong buffer name
> Bug #7294: conf: nullptr dereference if mem alloc fails for a node in yaml
> parser (7.0.x backport)
> Optimization #7316: template: remove usage of template-rust (7.0.x backport)
> Optimization #7275: tcp/reassemble: GetBlock takes O(nlgn) in worst case (7=
.0.x
> backport)
> Feature #7439: eve/alert: enrich decoder event rules (7.0.x backport)
> Task #7427:  flowint: add isnotset support (7.0.x backport)
> Task #7288: schema: add missing tls fields certificate and chain (7.0.x bac=
kport)
>=20
> Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
> ---
> lfs/suricata | 4 ++--
> 1 file changed, 2 insertions(+), 2 deletions(-)
>=20
> diff --git a/lfs/suricata b/lfs/suricata
> index b563ff9da..2b05c3c54 100644
> --- a/lfs/suricata
> +++ b/lfs/suricata
> @@ -24,7 +24,7 @@
>=20
> include Config
>=20
> -VER        =3D 7.0.7
> +VER        =3D 7.0.8
>=20
> THISAPP    =3D suricata-$(VER)
> DL_FILE    =3D $(THISAPP).tar.gz
> @@ -40,7 +40,7 @@ objects =3D $(DL_FILE)
>=20
> $(DL_FILE) =3D $(DL_FROM)/$(DL_FILE)
>=20
> -$(DL_FILE)_BLAKE2 =3D dc39279b99880762bee2b1788fea9046dc63c01560332ffc1678=
44673314165456dcbff3b0d05d32c931741b397fd68e9e294d2ee6c526a3d286445c2a83b789
> +$(DL_FILE)_BLAKE2 =3D 8571a6368b90e18046cdcf71f53e1b59e895ea8fe2d8f996ef61=
4a890b520671f5dcac10014555880e408060913df1dab4c473bf083e7c0451c6a4b93bedd047
>=20
> install : $(TARGET)
>=20
> --=20
> 2.47.1
>=20


--===============8627821299898621043==--