From mboxrd@z Thu Jan  1 00:00:00 1970
From: Michael Tremer <michael.tremer@ipfire.org>
To: development@lists.ipfire.org
Subject: Re: [PATCH] suricata: 'Downdate' to 5.0.5
Date: Tue, 15 Dec 2020 17:12:15 +0100
Message-ID: <49A794A5-F67F-4A75-87D2-260A1AFE7A78@ipfire.org>
In-Reply-To: <f52b7672-50c0-48f3-29e6-3a20ceb9f208@ipfire.org>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============4476789328827625107=="
List-Id: <development.lists.ipfire.org>

--===============4476789328827625107==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

Hi,

I am now convinced that the impact is bad enough that we will need to revert.

I would like to be able to release c153 before Christmas and I am not sure if=
 upstream will be able to provide a hotfix.

-Michael

> On 14 Dec 2020, at 21:02, Matthias Fischer <matthias.fischer(a)ipfire.org> =
wrote:
>=20
> On 14.12.2020 10:33, Michael Tremer wrote:
>> Hi,
>=20
> Hi,
>=20
>> Thank you for submitting this patch.
>>=20
>> I am not sure if I want to merge this, yet.
>=20
> Yep.
>=20
> Looking at the changelogs I would prefer 6.0.1, but I just wanted to
> have an alternative ready in case it was needed.
>=20
>> I will consider this when we move closer to a release, but upstream didn=
=E2=80=99t provide a solution, yet.
>>=20
>> I suppose it is okay if we burn through a little bit more of CPU as long a=
s the system is secure. The overhead seems to be small enough for me to not c=
ause any significant impact on throughput or latency.
>>=20
>> Is this an acceptable benchmark for you?
>=20
> For me: yes. No problem. ;-)
>=20
> Best,
> Matthias
>=20
>> Best,
>> -Michael
>>=20
>>> On 12 Dec 2020, at 10:14, Matthias Fischer <matthias.fischer(a)ipfire.org=
> wrote:
>>>=20
>>> Triggered by https://lists.ipfire.org/pipermail/development/2020-December=
/008868.html
>>>=20
>>> Workaround for https://bugzilla.ipfire.org/show_bug.cgi?id=3D12548
>>>=20
>>> Downgrading to 'suricata 5.0.5' bypasses Bug #12548 for now,
>>> but its only a temporary workaround...
>>>=20
>>> Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org>
>>> ---
>>> lfs/suricata | 4 ++--
>>> 1 file changed, 2 insertions(+), 2 deletions(-)
>>>=20
>>> diff --git a/lfs/suricata b/lfs/suricata
>>> index 2871d8e7b..c5dc46af4 100644
>>> --- a/lfs/suricata
>>> +++ b/lfs/suricata
>>> @@ -24,7 +24,7 @@
>>>=20
>>> include Config
>>>=20
>>> -VER        =3D 6.0.0
>>> +VER        =3D 5.0.5
>>>=20
>>> THISAPP    =3D suricata-$(VER)
>>> DL_FILE    =3D $(THISAPP).tar.gz
>>> @@ -44,7 +44,7 @@ objects =3D $(DL_FILE)
>>>=20
>>> $(DL_FILE) =3D $(DL_FROM)/$(DL_FILE)
>>>=20
>>> -$(DL_FILE)_MD5 =3D bbddcf2f209930206ef21977d40120d2
>>> +$(DL_FILE)_MD5 =3D fe039cc4571eb56828874ddc0b71dc51
>>>=20
>>> install : $(TARGET)
>>>=20
>>> --=20
>>> 2.18.0
>>>=20
>>=20
>=20


--===============4476789328827625107==--