[git.ipfire.org] IPFire 2.x development tree branch, master, updated. 38067c08c727086c92899042ef40e2f7e17115e7

[git.ipfire.org] IPFire 2.x development tree branch, master, updated. 38067c08c727086c92899042ef40e2f7e17115e7

[Michael Tremer]

[-- Attachment #1: Type: text/plain, Size: 4502 bytes --]

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "IPFire 2.x development tree".

The branch, master has been updated
       via  38067c08c727086c92899042ef40e2f7e17115e7 (commit)
      from  1e2abd66fb68498ec27d11d73f0b6241a03b3587 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit 38067c08c727086c92899042ef40e2f7e17115e7
Author: Adolf Belka <adolf.belka(a)ipfire.org>
Date:   Thu Dec 12 20:59:56 2024 +0100

    suricata: Update to version 7.0.8
    
    - Update from version 7.0.7 to 7.0.8
    - Update of rootfile not required
    - Changelog
        7.0.8
    	Security #7412: tcp: generic detection bypass using TCP urgent support (7.0.x
    	 backport)(HIGH - CVE 2024-55629)
    	Security #7405: dns: quadratic complexity in logging and invalid json as output
    	 (7.0.x backport)(HIGH - CVE 2024-55628)
    	Security #7404: tcp: segfault on StreamingBufferSlideToOffsetWithRegions (7.0.x
    	 backport)(CRITICAL - CVE 2024-55627)
    	Security #7367: bpf: oversized bpf file can lead to buffer overflow (7.0.x
    	 backport)(LOW - CVE 2024-55626)
    	Security #7306: detect: write to read-only memory in transforms (7.0.x backport)
    	 (CRITICAL - CVE 2024-55605)
    	Bug #7445: dpdk: RSS key length missmatch on ice (E810) card with DPDK version
    	 22.11.6  (7.0.x backport)
    	Bug #7434: requires: rules with unmet requirements are still loaded (7.0.x
    	 backport)
    	Bug #7432: detect: decoder event rules fail to match on invalid packets (7.0.x
    	 backport)
    	Bug #7407: detect: missing app-layer metadata in alerts (7.0.x backport)
    	Bug #7368: flow: flow timeout pseudo packet triggers unexpected alert (7.0.x
    	 backport)
    	Bug #7362: rules: unknown internal events not being detected as errors (7.0.x
    	 backport)
    	Bug #7339: rust: different int types turn garbage on FFI boundary (7.0.x backport)
    	Bug #7335: asan/profiling: global-buffer-overflow error (7.0.x backport)
    	Bug #7327: http: FN with prefilter if the first of multi buffer did not match
    	 (7.0.x backport)
    	Bug #7324: mqtt: wrong and missing direction for keywords (7.0.x backport)
    	Bug #7310: http: incorrect file direction handling (7.0.x backport)
    	Bug #7308: conf: memleak if yaml parser is initialized before checking if file
    	 exists (7.0.x backport)
    	Bug #7307: detect: memleak in case of errors during initialization (7.0.x
    	 backport)
    	Bug #7301: output: oversized records lead to invalid json (7.0.x backport)
    	Bug #7295: detect: sip.stat_code keyword uses wrong buffer name
    	Bug #7294: conf: nullptr dereference if mem alloc fails for a node in yaml
    	 parser (7.0.x backport)
    	Optimization #7316: template: remove usage of template-rust (7.0.x backport)
    	Optimization #7275: tcp/reassemble: GetBlock takes O(nlgn) in worst case (7.0.x
    	 backport)
    	Feature #7439: eve/alert: enrich decoder event rules (7.0.x backport)
    	Task #7427:  flowint: add isnotset support (7.0.x backport)
    	Task #7288: schema: add missing tls fields certificate and chain (7.0.x backport)
    
    Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
    Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>

-----------------------------------------------------------------------

Summary of changes:
 lfs/suricata | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

Difference in files:
diff --git a/lfs/suricata b/lfs/suricata
index b563ff9da..2b05c3c54 100644
--- a/lfs/suricata
+++ b/lfs/suricata
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 7.0.7
+VER        = 7.0.8
 
 THISAPP    = suricata-$(VER)
 DL_FILE    = $(THISAPP).tar.gz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = dc39279b99880762bee2b1788fea9046dc63c01560332ffc167844673314165456dcbff3b0d05d32c931741b397fd68e9e294d2ee6c526a3d286445c2a83b789
+$(DL_FILE)_BLAKE2 = 8571a6368b90e18046cdcf71f53e1b59e895ea8fe2d8f996ef614a890b520671f5dcac10014555880e408060913df1dab4c473bf083e7c0451c6a4b93bedd047
 
 install : $(TARGET)
 


hooks/post-receive
--
IPFire 2.x development tree