This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree".
The branch, master has been updated via 38067c08c727086c92899042ef40e2f7e17115e7 (commit) from 1e2abd66fb68498ec27d11d73f0b6241a03b3587 (commit)
Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below.
- Log ----------------------------------------------------------------- commit 38067c08c727086c92899042ef40e2f7e17115e7 Author: Adolf Belka adolf.belka@ipfire.org Date: Thu Dec 12 20:59:56 2024 +0100
suricata: Update to version 7.0.8
- Update from version 7.0.7 to 7.0.8 - Update of rootfile not required - Changelog 7.0.8 Security #7412: tcp: generic detection bypass using TCP urgent support (7.0.x backport)(HIGH - CVE 2024-55629) Security #7405: dns: quadratic complexity in logging and invalid json as output (7.0.x backport)(HIGH - CVE 2024-55628) Security #7404: tcp: segfault on StreamingBufferSlideToOffsetWithRegions (7.0.x backport)(CRITICAL - CVE 2024-55627) Security #7367: bpf: oversized bpf file can lead to buffer overflow (7.0.x backport)(LOW - CVE 2024-55626) Security #7306: detect: write to read-only memory in transforms (7.0.x backport) (CRITICAL - CVE 2024-55605) Bug #7445: dpdk: RSS key length missmatch on ice (E810) card with DPDK version 22.11.6 (7.0.x backport) Bug #7434: requires: rules with unmet requirements are still loaded (7.0.x backport) Bug #7432: detect: decoder event rules fail to match on invalid packets (7.0.x backport) Bug #7407: detect: missing app-layer metadata in alerts (7.0.x backport) Bug #7368: flow: flow timeout pseudo packet triggers unexpected alert (7.0.x backport) Bug #7362: rules: unknown internal events not being detected as errors (7.0.x backport) Bug #7339: rust: different int types turn garbage on FFI boundary (7.0.x backport) Bug #7335: asan/profiling: global-buffer-overflow error (7.0.x backport) Bug #7327: http: FN with prefilter if the first of multi buffer did not match (7.0.x backport) Bug #7324: mqtt: wrong and missing direction for keywords (7.0.x backport) Bug #7310: http: incorrect file direction handling (7.0.x backport) Bug #7308: conf: memleak if yaml parser is initialized before checking if file exists (7.0.x backport) Bug #7307: detect: memleak in case of errors during initialization (7.0.x backport) Bug #7301: output: oversized records lead to invalid json (7.0.x backport) Bug #7295: detect: sip.stat_code keyword uses wrong buffer name Bug #7294: conf: nullptr dereference if mem alloc fails for a node in yaml parser (7.0.x backport) Optimization #7316: template: remove usage of template-rust (7.0.x backport) Optimization #7275: tcp/reassemble: GetBlock takes O(nlgn) in worst case (7.0.x backport) Feature #7439: eve/alert: enrich decoder event rules (7.0.x backport) Task #7427: flowint: add isnotset support (7.0.x backport) Task #7288: schema: add missing tls fields certificate and chain (7.0.x backport)
Signed-off-by: Adolf Belka adolf.belka@ipfire.org Signed-off-by: Michael Tremer michael.tremer@ipfire.org
-----------------------------------------------------------------------
Summary of changes: lfs/suricata | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-)
Difference in files: diff --git a/lfs/suricata b/lfs/suricata index b563ff9da..2b05c3c54 100644 --- a/lfs/suricata +++ b/lfs/suricata @@ -24,7 +24,7 @@
include Config
-VER = 7.0.7 +VER = 7.0.8
THISAPP = suricata-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = dc39279b99880762bee2b1788fea9046dc63c01560332ffc167844673314165456dcbff3b0d05d32c931741b397fd68e9e294d2ee6c526a3d286445c2a83b789 +$(DL_FILE)_BLAKE2 = 8571a6368b90e18046cdcf71f53e1b59e895ea8fe2d8f996ef614a890b520671f5dcac10014555880e408060913df1dab4c473bf083e7c0451c6a4b93bedd047
install : $(TARGET)
hooks/post-receive -- IPFire 2.x development tree