From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail02.haj.ipfire.org (localhost [127.0.0.1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4ZM1Hk4Mddz333p for ; Mon, 24 Mar 2025 18:08:02 +0000 (UTC) Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (secp384r1) client-signature RSA-PSS (4096 bits)) (Client CN "mail01.haj.ipfire.org", Issuer "R10" (verified OK)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4ZM1Hg00MDz2y59 for ; Mon, 24 Mar 2025 18:07:58 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail01.ipfire.org (Postfix) with ESMTPSA id 4ZM1Hf2Rdbz3W; Mon, 24 Mar 2025 18:07:58 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1742839678; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: references:references; bh=h7W39Ru8EgubEiMyCwhHtVs+x+1EDwmDBoB+ngg72ow=; b=s/ir4RgXrCQpuB/zg9VtFQFz7eqwLRKiP0acwgabmLNpkcfhZb3QSORTl37xzCYOxAfGZx IMEsV1et1WK82CBg== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1742839678; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: references:references; bh=h7W39Ru8EgubEiMyCwhHtVs+x+1EDwmDBoB+ngg72ow=; b=I81oyib5B8lT//ejzE9vcBcI97WtJEvjAY1G32tCWkERB83BgsHs+V5fo++CONuxqy/ZUh apqO/M3h2lMjk5ueUkgUYSrlW9BD0AdqGWUlZ6jB0ToGzKfj2pt8SoVUL9Rrchd5Ge5P20 P3THLxiqCUjrnWB/vGBjabnL92f7VG/xPC1ETYHdq5gCwwSZfgBoRlHiXAVDNTGryeEGHM CS/awDRJHilcBVjAJ4dlLkL6aE93UE4Qimvk0OTfcb7RI5mRrSOnqMRnyJZOHIFx0ROU0G tmp+WzNCnTFvl3oN19IkzoFU99+pmaZzUSD/PmdwH4IoILjpC1GfQxjzvkj7Pg== From: Michael Tremer Content-Type: multipart/alternative; boundary="Apple-Mail=_A9DF82B5-C304-45DD-9317-59E120A32A4E" Precedence: list List-Id: List-Subscribe: , List-Unsubscribe: , List-Post: List-Help: Sender: Mail-Followup-To: Mime-Version: 1.0 Subject: Fwd: Advance Notification of Suricata 7.0.10 Message-Id: <62541C60-39E7-4E13-BC17-F647A1BF39F7@ipfire.org> References: To: "IPFire: Development-List" , Matthias Fischer Date: Mon, 24 Mar 2025 18:07:57 +0000 --Apple-Mail=_A9DF82B5-C304-45DD-9317-59E120A32A4E Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 @Matthias: Are you free tomorrow to pick this one up? > Begin forwarded message: >=20 > From: Jason Ish > Subject: Advance Notification of Suricata 7.0.10 > Date: 24 March 2025 at 16:12:12 GMT > To: Jason Ish , Victor Julien >=20 > Hello everyone, >=20 > Last Tuesday, March 18, we released Suricata 7.0.9 which unfortunately = contained an AF_PACKET regression affecting many users. >=20 > If your configuration used a BPF filter and did not also tune the = =E2=80=9Cdefault-packet-size=E2=80=9D configuration parameter, Suricata = would fail to start. A workaround is to set the = =E2=80=9Cdefault-packet-size=E2=80=9D to the default of 1514. This issue = is tracked in the following ticket: = https://redmine.openinfosecfoundation.org/issues/7618 >=20 > Suricata 7.0.10 will be released tomorrow, Tuesday, March 25 to = address this issue. >=20 > Sorry for the inconvenience. >=20 > Regards, > The OISF Team >=20 >=20 > To unsubscribe from this group and stop receiving emails from it, send = an email to oss-advisories+unsubscribe@openinfosecfoundation.org = . --Apple-Mail=_A9DF82B5-C304-45DD-9317-59E120A32A4E Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 @Matthias: Are = you free tomorrow to pick this one up?

Begin forwarded message:

From: Jason Ish <jish@oisf.net>
Subject: Advance = Notification of Suricata 7.0.10
Date: 24 March = 2025 at 16:12:12 GMT
To: Jason Ish <jish@oisf.net>, Victor Julien = <vjulien@oisf.net>

Hello everyone,

Last Tuesday, March 18, we released Suricata = 7.0.9 which unfortunately contained an AF_PACKET regression affecting = many users.

If your configuration used a BPF = filter and did not also tune the =E2=80=9Cdefault-packet-size=E2=80=9D = configuration parameter, Suricata would fail to start. A workaround is = to set the =E2=80=9Cdefault-packet-size=E2=80=9D to the default of 1514. = This issue is tracked in the following ticket: https://red= mine.openinfosecfoundation.org/issues/7618

Suricata 7.0.10 will be released tomorrow, = Tuesday, March 25 to address this issue.

Sorry for the = inconvenience.

Regards,
The OISF = Team


To unsubscribe from this group and stop receiving emails from it, send = an email to oss-a= dvisories+unsubscribe@openinfosecfoundation.org.

= --Apple-Mail=_A9DF82B5-C304-45DD-9317-59E120A32A4E--