* [PATCH] suricata: Update to version 7.0.8
@ 2024-12-12 19:59 Adolf Belka
2024-12-13 14:38 ` Michael Tremer
0 siblings, 1 reply; 3+ messages in thread
From: Adolf Belka @ 2024-12-12 19:59 UTC (permalink / raw)
To: development
[-- Attachment #1: Type: text/plain, Size: 3317 bytes --]
- Update from version 7.0.7 to 7.0.8
- Update of rootfile not required
- Changelog
7.0.8
Security #7412: tcp: generic detection bypass using TCP urgent support (7.0.x
backport)(HIGH - CVE 2024-55629)
Security #7405: dns: quadratic complexity in logging and invalid json as output
(7.0.x backport)(HIGH - CVE 2024-55628)
Security #7404: tcp: segfault on StreamingBufferSlideToOffsetWithRegions (7.0.x
backport)(CRITICAL - CVE 2024-55627)
Security #7367: bpf: oversized bpf file can lead to buffer overflow (7.0.x
backport)(LOW - CVE 2024-55626)
Security #7306: detect: write to read-only memory in transforms (7.0.x backport)
(CRITICAL - CVE 2024-55605)
Bug #7445: dpdk: RSS key length missmatch on ice (E810) card with DPDK version
22.11.6 (7.0.x backport)
Bug #7434: requires: rules with unmet requirements are still loaded (7.0.x
backport)
Bug #7432: detect: decoder event rules fail to match on invalid packets (7.0.x
backport)
Bug #7407: detect: missing app-layer metadata in alerts (7.0.x backport)
Bug #7368: flow: flow timeout pseudo packet triggers unexpected alert (7.0.x
backport)
Bug #7362: rules: unknown internal events not being detected as errors (7.0.x
backport)
Bug #7339: rust: different int types turn garbage on FFI boundary (7.0.x backport)
Bug #7335: asan/profiling: global-buffer-overflow error (7.0.x backport)
Bug #7327: http: FN with prefilter if the first of multi buffer did not match
(7.0.x backport)
Bug #7324: mqtt: wrong and missing direction for keywords (7.0.x backport)
Bug #7310: http: incorrect file direction handling (7.0.x backport)
Bug #7308: conf: memleak if yaml parser is initialized before checking if file
exists (7.0.x backport)
Bug #7307: detect: memleak in case of errors during initialization (7.0.x
backport)
Bug #7301: output: oversized records lead to invalid json (7.0.x backport)
Bug #7295: detect: sip.stat_code keyword uses wrong buffer name
Bug #7294: conf: nullptr dereference if mem alloc fails for a node in yaml
parser (7.0.x backport)
Optimization #7316: template: remove usage of template-rust (7.0.x backport)
Optimization #7275: tcp/reassemble: GetBlock takes O(nlgn) in worst case (7.0.x
backport)
Feature #7439: eve/alert: enrich decoder event rules (7.0.x backport)
Task #7427: flowint: add isnotset support (7.0.x backport)
Task #7288: schema: add missing tls fields certificate and chain (7.0.x backport)
Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
---
lfs/suricata | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/lfs/suricata b/lfs/suricata
index b563ff9da..2b05c3c54 100644
--- a/lfs/suricata
+++ b/lfs/suricata
@@ -24,7 +24,7 @@
include Config
-VER = 7.0.7
+VER = 7.0.8
THISAPP = suricata-$(VER)
DL_FILE = $(THISAPP).tar.gz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = dc39279b99880762bee2b1788fea9046dc63c01560332ffc167844673314165456dcbff3b0d05d32c931741b397fd68e9e294d2ee6c526a3d286445c2a83b789
+$(DL_FILE)_BLAKE2 = 8571a6368b90e18046cdcf71f53e1b59e895ea8fe2d8f996ef614a890b520671f5dcac10014555880e408060913df1dab4c473bf083e7c0451c6a4b93bedd047
install : $(TARGET)
--
2.47.1
^ permalink raw reply [flat|nested] 3+ messages in thread* Re: [PATCH] suricata: Update to version 7.0.8
2024-12-12 19:59 [PATCH] suricata: Update to version 7.0.8 Adolf Belka
@ 2024-12-13 14:38 ` Michael Tremer
2024-12-14 18:22 ` Adolf Belka
0 siblings, 1 reply; 3+ messages in thread
From: Michael Tremer @ 2024-12-13 14:38 UTC (permalink / raw)
To: development
[-- Attachment #1: Type: text/plain, Size: 3520 bytes --]
Thank you, I merged this into master.
> On 12 Dec 2024, at 19:59, Adolf Belka <adolf.belka(a)ipfire.org> wrote:
>
> - Update from version 7.0.7 to 7.0.8
> - Update of rootfile not required
> - Changelog
> 7.0.8
> Security #7412: tcp: generic detection bypass using TCP urgent support (7.0.x
> backport)(HIGH - CVE 2024-55629)
> Security #7405: dns: quadratic complexity in logging and invalid json as output
> (7.0.x backport)(HIGH - CVE 2024-55628)
> Security #7404: tcp: segfault on StreamingBufferSlideToOffsetWithRegions (7.0.x
> backport)(CRITICAL - CVE 2024-55627)
> Security #7367: bpf: oversized bpf file can lead to buffer overflow (7.0.x
> backport)(LOW - CVE 2024-55626)
> Security #7306: detect: write to read-only memory in transforms (7.0.x backport)
> (CRITICAL - CVE 2024-55605)
> Bug #7445: dpdk: RSS key length missmatch on ice (E810) card with DPDK version
> 22.11.6 (7.0.x backport)
> Bug #7434: requires: rules with unmet requirements are still loaded (7.0.x
> backport)
> Bug #7432: detect: decoder event rules fail to match on invalid packets (7.0.x
> backport)
> Bug #7407: detect: missing app-layer metadata in alerts (7.0.x backport)
> Bug #7368: flow: flow timeout pseudo packet triggers unexpected alert (7.0.x
> backport)
> Bug #7362: rules: unknown internal events not being detected as errors (7.0.x
> backport)
> Bug #7339: rust: different int types turn garbage on FFI boundary (7.0.x backport)
> Bug #7335: asan/profiling: global-buffer-overflow error (7.0.x backport)
> Bug #7327: http: FN with prefilter if the first of multi buffer did not match
> (7.0.x backport)
> Bug #7324: mqtt: wrong and missing direction for keywords (7.0.x backport)
> Bug #7310: http: incorrect file direction handling (7.0.x backport)
> Bug #7308: conf: memleak if yaml parser is initialized before checking if file
> exists (7.0.x backport)
> Bug #7307: detect: memleak in case of errors during initialization (7.0.x
> backport)
> Bug #7301: output: oversized records lead to invalid json (7.0.x backport)
> Bug #7295: detect: sip.stat_code keyword uses wrong buffer name
> Bug #7294: conf: nullptr dereference if mem alloc fails for a node in yaml
> parser (7.0.x backport)
> Optimization #7316: template: remove usage of template-rust (7.0.x backport)
> Optimization #7275: tcp/reassemble: GetBlock takes O(nlgn) in worst case (7.0.x
> backport)
> Feature #7439: eve/alert: enrich decoder event rules (7.0.x backport)
> Task #7427: flowint: add isnotset support (7.0.x backport)
> Task #7288: schema: add missing tls fields certificate and chain (7.0.x backport)
>
> Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
> ---
> lfs/suricata | 4 ++--
> 1 file changed, 2 insertions(+), 2 deletions(-)
>
> diff --git a/lfs/suricata b/lfs/suricata
> index b563ff9da..2b05c3c54 100644
> --- a/lfs/suricata
> +++ b/lfs/suricata
> @@ -24,7 +24,7 @@
>
> include Config
>
> -VER = 7.0.7
> +VER = 7.0.8
>
> THISAPP = suricata-$(VER)
> DL_FILE = $(THISAPP).tar.gz
> @@ -40,7 +40,7 @@ objects = $(DL_FILE)
>
> $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
>
> -$(DL_FILE)_BLAKE2 = dc39279b99880762bee2b1788fea9046dc63c01560332ffc167844673314165456dcbff3b0d05d32c931741b397fd68e9e294d2ee6c526a3d286445c2a83b789
> +$(DL_FILE)_BLAKE2 = 8571a6368b90e18046cdcf71f53e1b59e895ea8fe2d8f996ef614a890b520671f5dcac10014555880e408060913df1dab4c473bf083e7c0451c6a4b93bedd047
>
> install : $(TARGET)
>
> --
> 2.47.1
>
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: [PATCH] suricata: Update to version 7.0.8
2024-12-13 14:38 ` Michael Tremer
@ 2024-12-14 18:22 ` Adolf Belka
0 siblings, 0 replies; 3+ messages in thread
From: Adolf Belka @ 2024-12-14 18:22 UTC (permalink / raw)
To: development
[-- Attachment #1: Type: text/plain, Size: 3749 bytes --]
On 13/12/2024 15:38, Michael Tremer wrote:
> Thank you, I merged this into master.
I re-did my CU189 to CU190 update and can confirm that suricata-7.0.8 is running.
Regards,
Adolf.
>
>> On 12 Dec 2024, at 19:59, Adolf Belka <adolf.belka(a)ipfire.org> wrote:
>>
>> - Update from version 7.0.7 to 7.0.8
>> - Update of rootfile not required
>> - Changelog
>> 7.0.8
>> Security #7412: tcp: generic detection bypass using TCP urgent support (7.0.x
>> backport)(HIGH - CVE 2024-55629)
>> Security #7405: dns: quadratic complexity in logging and invalid json as output
>> (7.0.x backport)(HIGH - CVE 2024-55628)
>> Security #7404: tcp: segfault on StreamingBufferSlideToOffsetWithRegions (7.0.x
>> backport)(CRITICAL - CVE 2024-55627)
>> Security #7367: bpf: oversized bpf file can lead to buffer overflow (7.0.x
>> backport)(LOW - CVE 2024-55626)
>> Security #7306: detect: write to read-only memory in transforms (7.0.x backport)
>> (CRITICAL - CVE 2024-55605)
>> Bug #7445: dpdk: RSS key length missmatch on ice (E810) card with DPDK version
>> 22.11.6 (7.0.x backport)
>> Bug #7434: requires: rules with unmet requirements are still loaded (7.0.x
>> backport)
>> Bug #7432: detect: decoder event rules fail to match on invalid packets (7.0.x
>> backport)
>> Bug #7407: detect: missing app-layer metadata in alerts (7.0.x backport)
>> Bug #7368: flow: flow timeout pseudo packet triggers unexpected alert (7.0.x
>> backport)
>> Bug #7362: rules: unknown internal events not being detected as errors (7.0.x
>> backport)
>> Bug #7339: rust: different int types turn garbage on FFI boundary (7.0.x backport)
>> Bug #7335: asan/profiling: global-buffer-overflow error (7.0.x backport)
>> Bug #7327: http: FN with prefilter if the first of multi buffer did not match
>> (7.0.x backport)
>> Bug #7324: mqtt: wrong and missing direction for keywords (7.0.x backport)
>> Bug #7310: http: incorrect file direction handling (7.0.x backport)
>> Bug #7308: conf: memleak if yaml parser is initialized before checking if file
>> exists (7.0.x backport)
>> Bug #7307: detect: memleak in case of errors during initialization (7.0.x
>> backport)
>> Bug #7301: output: oversized records lead to invalid json (7.0.x backport)
>> Bug #7295: detect: sip.stat_code keyword uses wrong buffer name
>> Bug #7294: conf: nullptr dereference if mem alloc fails for a node in yaml
>> parser (7.0.x backport)
>> Optimization #7316: template: remove usage of template-rust (7.0.x backport)
>> Optimization #7275: tcp/reassemble: GetBlock takes O(nlgn) in worst case (7.0.x
>> backport)
>> Feature #7439: eve/alert: enrich decoder event rules (7.0.x backport)
>> Task #7427: flowint: add isnotset support (7.0.x backport)
>> Task #7288: schema: add missing tls fields certificate and chain (7.0.x backport)
>>
>> Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
>> ---
>> lfs/suricata | 4 ++--
>> 1 file changed, 2 insertions(+), 2 deletions(-)
>>
>> diff --git a/lfs/suricata b/lfs/suricata
>> index b563ff9da..2b05c3c54 100644
>> --- a/lfs/suricata
>> +++ b/lfs/suricata
>> @@ -24,7 +24,7 @@
>>
>> include Config
>>
>> -VER = 7.0.7
>> +VER = 7.0.8
>>
>> THISAPP = suricata-$(VER)
>> DL_FILE = $(THISAPP).tar.gz
>> @@ -40,7 +40,7 @@ objects = $(DL_FILE)
>>
>> $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
>>
>> -$(DL_FILE)_BLAKE2 = dc39279b99880762bee2b1788fea9046dc63c01560332ffc167844673314165456dcbff3b0d05d32c931741b397fd68e9e294d2ee6c526a3d286445c2a83b789
>> +$(DL_FILE)_BLAKE2 = 8571a6368b90e18046cdcf71f53e1b59e895ea8fe2d8f996ef614a890b520671f5dcac10014555880e408060913df1dab4c473bf083e7c0451c6a4b93bedd047
>>
>> install : $(TARGET)
>>
>> --
>> 2.47.1
>>
>
^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2024-12-14 18:22 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2024-12-12 19:59 [PATCH] suricata: Update to version 7.0.8 Adolf Belka
2024-12-13 14:38 ` Michael Tremer
2024-12-14 18:22 ` Adolf Belka
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox