* [git.ipfire.org] IPFire 2.x development tree branch, next, updated. 943c5e7e3c4ff7e0c72922eaa2fac458b2947e5d
@ 2023-06-16 15:57 Michael Tremer
0 siblings, 0 replies; only message in thread
From: Michael Tremer @ 2023-06-16 15:57 UTC (permalink / raw)
To: ipfire-scm
[-- Attachment #1: Type: text/plain, Size: 7415 bytes --]
This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "IPFire 2.x development tree".
The branch, next has been updated
via 943c5e7e3c4ff7e0c72922eaa2fac458b2947e5d (commit)
via 7af2d42cbf5289d5873fecdd74ea6d7aebe453b3 (commit)
via dbd7bafb4da13beec9b0088f0206f94774295037 (commit)
from 665ab5a1f9d1856b8ae9b2fff1361df643ff080c (commit)
Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.
- Log -----------------------------------------------------------------
commit 943c5e7e3c4ff7e0c72922eaa2fac458b2947e5d
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date: Fri Jun 16 15:57:42 2023 +0000
core176: Ship suricata
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit 7af2d42cbf5289d5873fecdd74ea6d7aebe453b3
Author: Matthias Fischer <matthias.fischer(a)ipfire.org>
Date: Fri Jun 16 17:52:09 2023 +0200
libhtp: Update to 0.5.44
For details see:
https://github.com/OISF/libhtp/releases/tag/0.5.44
"0.5.44 (13 June 2023)
---------------------
- response: only trim spaces at headers names end
- response: skips lines before response line
- headers: log a warning for chunks extension"
Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit dbd7bafb4da13beec9b0088f0206f94774295037
Author: Matthias Fischer <matthias.fischer(a)ipfire.org>
Date: Fri Jun 16 17:52:08 2023 +0200
suricata: Update to 6.0.13
Excerpt from changelog:
"6.0.13 -- 2023-06-15
Security #6119: datasets: absolute path in rules can overwrite arbitrary files (6.0.x backport)
Bug #6138: Decode-events of IPv6 packets are not triggered (6.0.x backport)
Bug #6136: suricata-update: dump-sample-configs: configuration files not found (6.0.x backport)
Bug #6125: http2: cpu overconsumption in rust moving/memcpy in http2_parse_headers_blocks (6.0.x backport)
Bug #6113: ips: txs still logged for dropped flow (6.0.x backport)
Bug #6056: smtp: long line discard logic should be separate for server and client (6.0.x backport)
Bug #6055: ftp: long line discard logic should be separate for server and client (6.0.x backport)
Bug #5990: smtp: any command post a long command gets skipped (6.0.x backport)
Bug #5982: smtp: Long DATA line post boundary is capped at 4k Bytes (6.0.x backport)
Bug #5809: smb: convert transaction list to vecdeque (6.0.x backport)
Bug #5604: counters: tcp.syn, tcp.synack, tcp.rst depend on flow (6.0.x backport)
Bug #5550: dns: allow dns messages with invalid opcodes (6.0.x backport)
Task #5984: libhtp 0.5.44 (6.0.x backport)
Documentation #6134: userguide: add instructions/explanation for (not) running suricata with root (6.0.x backport)
Documentation #6121: datasets: 6.0.x work-arounds for dataset supply chain attacks"
Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
-----------------------------------------------------------------------
Summary of changes:
config/rootfiles/common/suricata | 3 +--
config/rootfiles/{oldcore/131 => core/176}/filelists/libhtp | 0
config/rootfiles/{oldcore/131 => core/176}/filelists/suricata | 0
config/rootfiles/core/176/update.sh | 2 ++
lfs/libhtp | 4 ++--
lfs/suricata | 4 ++--
6 files changed, 7 insertions(+), 6 deletions(-)
copy config/rootfiles/{oldcore/131 => core/176}/filelists/libhtp (100%)
copy config/rootfiles/{oldcore/131 => core/176}/filelists/suricata (100%)
Difference in files:
diff --git a/config/rootfiles/common/suricata b/config/rootfiles/common/suricata
index df297ebd6..89fd6d865 100644
--- a/config/rootfiles/common/suricata
+++ b/config/rootfiles/common/suricata
@@ -8,8 +8,6 @@ usr/sbin/convert-ids-backend-files
#usr/share/doc/suricata/Basic_Setup.txt
#usr/share/doc/suricata/GITGUIDE
#usr/share/doc/suricata/INSTALL
-#usr/share/doc/suricata/INSTALL.PF_RING
-#usr/share/doc/suricata/INSTALL.WINDOWS
#usr/share/doc/suricata/NEWS
#usr/share/doc/suricata/README
#usr/share/doc/suricata/Setting_up_IPSinline_for_Linux.txt
@@ -45,6 +43,7 @@ usr/share/suricata
#usr/share/suricata/threshold.config
var/cache/suricata
var/lib/suricata
+#var/lib/suricata/data
var/log/suricata
#var/log/suricata/certs
#var/log/suricata/files
diff --git a/config/rootfiles/core/176/filelists/libhtp b/config/rootfiles/core/176/filelists/libhtp
new file mode 120000
index 000000000..676e2c5e8
--- /dev/null
+++ b/config/rootfiles/core/176/filelists/libhtp
@@ -0,0 +1 @@
+../../../common/libhtp
\ No newline at end of file
diff --git a/config/rootfiles/core/176/filelists/suricata b/config/rootfiles/core/176/filelists/suricata
new file mode 120000
index 000000000..f671f6993
--- /dev/null
+++ b/config/rootfiles/core/176/filelists/suricata
@@ -0,0 +1 @@
+../../../common/suricata
\ No newline at end of file
diff --git a/config/rootfiles/core/176/update.sh b/config/rootfiles/core/176/update.sh
index 3b64202f6..b5f48b726 100644
--- a/config/rootfiles/core/176/update.sh
+++ b/config/rootfiles/core/176/update.sh
@@ -32,6 +32,7 @@ for (( i=1; i<=$core; i++ )); do
done
# Stop services
+/etc/init.d/suricata stop
# Extract files
extract_files
@@ -50,6 +51,7 @@ ldconfig
/usr/local/bin/filesystem-cleanup
# Start services
+/etc/init.d/suricata start
# Rebuild initial ramdisk to apply microcode updates
dracut --regenerate-all --force
diff --git a/lfs/libhtp b/lfs/libhtp
index 0b6015cde..987c159e5 100644
--- a/lfs/libhtp
+++ b/lfs/libhtp
@@ -24,7 +24,7 @@
include Config
-VER = 0.5.43
+VER = 0.5.44
THISAPP = libhtp-$(VER)
DL_FILE = $(THISAPP).tar.gz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 071cadc254b7af55bf410db5689429ca7588005b2f74fbd8468f2d6eeaf00c55ae99e8dd78552a5bf11ace5c8047b28a844db343937827a428b6d8b8d9036d29
+$(DL_FILE)_BLAKE2 = 6b4c8d617e6a649997e9375677baed99315be83e598317ce4951883482e6099cb5fd28e27ae25ab68ecc765931b0955289d144a710ce2e1b11edf92848b1b613
install : $(TARGET)
diff --git a/lfs/suricata b/lfs/suricata
index b28d5e3e7..c48c1c430 100644
--- a/lfs/suricata
+++ b/lfs/suricata
@@ -24,7 +24,7 @@
include Config
-VER = 6.0.12
+VER = 6.0.13
THISAPP = suricata-$(VER)
DL_FILE = $(THISAPP).tar.gz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 3cd16072014e814ec116bbde6649a0230200e447884028fef0440cbbc38a36b28c1edb39098e4089ee966890464bcd2573ea82d3e35e6d034ad465ac20c4c0b6
+$(DL_FILE)_BLAKE2 = 47dcc47253c462510494dac35a4aa41a110f62bca148871d86509b76ac0c2a873b9fbb9fc981e65897d6443032c27c9f9eeb0fae524f4e56306ed01fe6e32b01
install : $(TARGET)
hooks/post-receive
--
IPFire 2.x development tree
^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2023-06-16 15:57 UTC | newest]
Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2023-06-16 15:57 [git.ipfire.org] IPFire 2.x development tree branch, next, updated. 943c5e7e3c4ff7e0c72922eaa2fac458b2947e5d Michael Tremer
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox