From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail02.haj.ipfire.org (localhost [127.0.0.1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4bcYTv728hz30HD for ; Wed, 9 Jul 2025 10:04:03 +0000 (UTC) Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (secp384r1) server-digest SHA384 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mail01.haj.ipfire.org", Issuer "R11" (verified OK)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4bcYTv6lS8z2y23 for ; Wed, 9 Jul 2025 10:04:03 +0000 (UTC) Received: from people01.haj.ipfire.org (people01.haj.ipfire.org [172.28.1.161]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature ECDSA (secp384r1) client-digest SHA384) (Client CN "people01.haj.ipfire.org", Issuer "E6" (verified OK)) by mail01.ipfire.org (Postfix) with ESMTPS id 4bcYTv0XffzN7 for ; Wed, 9 Jul 2025 10:04:03 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1752055443; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc; bh=7izT8dumrF6HZblN/96KUkNNehfvl5OU+P8LoaKkK8o=; b=wOJfsL3FErqcqL3RwV8AcKDSC+IuiVfLUgjnYyNOSred/Uz1GXdO5LbmEE9JV+0dhg6Eo4 V1VpMy/m+BlBWiCA== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1752055443; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc; bh=7izT8dumrF6HZblN/96KUkNNehfvl5OU+P8LoaKkK8o=; b=i3eW9tx9UVQYW3rsB/ZjpVJDIF2XSZj6YUmMmbidgegVvdaWfSUVLtUdoBZctZanAzlrk8 2VC2Qo/BMt58qGiW7fuAnNCI4+OovPtCjPxJq0dFbwFHJDqCN4If1Jt/5wiVICy/SDuBzw cib41MooqxpmGubK9Z9ESWf7xqp0hyuxb9cOKgc4DAoPvQ4217KSz/V4jUqEnYEN/MwSJN j2pTMEa87P5nVRt6PbrAsfE19fGDjKxC8olEdYFQ5S6c3revnZUGrLDzRrVbdmrwycGyXC 2ifreLUtOlsyKbxYD7aiBX8gNN31IRR/nlQUGAsemE8vqE+ta9bFvlJhljjZQw== Received: by people01.haj.ipfire.org (Postfix, from userid 1000) id 4bcYTt5BzKz2xbl; Wed, 9 Jul 2025 10:04:02 +0000 (UTC) To: ipfire-scm@lists.ipfire.org Subject: [git.ipfire.org] IPFire 2.x development tree branch, next, updated. 883130628e083097f475678de1d3295e99c82ef7 X-Git-Refname: refs/heads/next X-Git-Reftype: branch X-Git-Oldrev: e45961cc1b2d0636d7329bc3f3a0f6381e4094d2 X-Git-Newrev: 883130628e083097f475678de1d3295e99c82ef7 Message-Id: <4bcYTt5BzKz2xbl@people01.haj.ipfire.org> Date: Wed, 9 Jul 2025 10:04:02 +0000 (UTC) From: Michael Tremer Precedence: list List-Id: List-Subscribe: , List-Unsubscribe: , List-Post: List-Help: Sender: Mail-Followup-To: This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, next has been updated via 883130628e083097f475678de1d3295e99c82ef7 (commit) via 22ab17a85e3a24952564f1193d74a47a71927482 (commit) via 71017148595408f066af02a5139ac2e0c6ff62df (commit) via fa722768513263b7f0d89e354911ff90111502b7 (commit) from e45961cc1b2d0636d7329bc3f3a0f6381e4094d2 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 883130628e083097f475678de1d3295e99c82ef7 Author: Adolf Belka Date: Wed Jul 9 10:11:48 2025 +0200 core197: Ship libhtp Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit 22ab17a85e3a24952564f1193d74a47a71927482 Author: Adolf Belka Date: Wed Jul 9 10:11:47 2025 +0200 core197: Ship suricata Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit 71017148595408f066af02a5139ac2e0c6ff62df Author: Adolf Belka Date: Wed Jul 9 10:11:46 2025 +0200 libhtp: Update to version 0.5.51 - Update from version 0.5.50 to 0.5.51 - Update of rootfile not required - suricata-7.0.11 requires libhtp-0.5.51 - Changelog 0.5.51 - decompressors: fix leak in lzma error case - request: do not fully error on data after HTTP/0.9 Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit fa722768513263b7f0d89e354911ff90111502b7 Author: Adolf Belka Date: Wed Jul 9 10:11:45 2025 +0200 suricata: Update to version 7.0.11 - Update from version 7.0.10 to 7.0.11 - Update of rootfile not required - Changelog 7.0.11 Security #7766: libhtp-c: memory leak with lzma(HIGH - CVE 2025-53537) Security #7659: http2: global tx (stream id 0) may open file and never close it (7.0.x backport)(HIGH - CVE 2025-53538) Bug #7779: mpm/ac: error "Just ran out of space in the queue" (7.0.x backport) Bug #7748: byte_extract: issue with saved 'name' in distance keyword (7.0.x backport) Bug #7736: brotli: old crate version has integer underflow (7.0.x backport) Bug #7731: dcerpc: uint16 overflow (rust debug assertion) (7.0.x backport) Bug #7716: snmp: probing parser returns ALPROTO_FAILED instead of ALPROTO_UNKNOWN if slice.len() < 4 (7.0.x backport) Bug #7690: datasets: set type IP can't set IPv4 (7.0.x backport) Bug #7688: flow: non-TCP protocol timeout handling leads to missing flows (7.0.x backport) Bug #7682: flow: race condition at shutdown leads to duplicate flows (7.0.x backport) Bug #7670: http: lack of setting updated_ts leads to detection delay (7.0.x backport) Bug #7663: ips: deconflict pass flow and drop packet rules (7.0.x backport) Bug #7661: pcap: continuous file reading fails on an empty directory (7.0.x backport) Bug #7652: rust: warnings with rustc 1.86 Bug #7610: http: reachable assertion when memcap reached during rule reload Bug #7375: dpdk: iface-copy should not be mandatory (7.0.x backport) Bug #7293: CI: clang-format does not work for main-7.0.x branch (7.0.x backport) Optimization #7781: mpm/ac-ks: reduce stack usage (7.0.x backport) Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer ----------------------------------------------------------------------- Summary of changes: config/rootfiles/{oldcore/131 => core/197}/filelists/libhtp | 0 config/rootfiles/{oldcore/131 => core/197}/filelists/suricata | 0 lfs/libhtp | 8 ++++---- lfs/suricata | 4 ++-- 4 files changed, 6 insertions(+), 6 deletions(-) copy config/rootfiles/{oldcore/131 => core/197}/filelists/libhtp (100%) copy config/rootfiles/{oldcore/131 => core/197}/filelists/suricata (100%) Difference in files: diff --git a/config/rootfiles/core/197/filelists/libhtp b/config/rootfiles/core/197/filelists/libhtp new file mode 120000 index 000000000..676e2c5e8 --- /dev/null +++ b/config/rootfiles/core/197/filelists/libhtp @@ -0,0 +1 @@ +../../../common/libhtp \ No newline at end of file diff --git a/config/rootfiles/core/197/filelists/suricata b/config/rootfiles/core/197/filelists/suricata new file mode 120000 index 000000000..f671f6993 --- /dev/null +++ b/config/rootfiles/core/197/filelists/suricata @@ -0,0 +1 @@ +../../../common/suricata \ No newline at end of file diff --git a/lfs/libhtp b/lfs/libhtp index dc45aac66..3c8d0594e 100644 --- a/lfs/libhtp +++ b/lfs/libhtp @@ -24,7 +24,7 @@ include Config -VER = 0.5.50 +VER = 0.5.51 THISAPP = libhtp-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = e26aa03d06aa370ab22e1fb462087ac67427d63490802ac369378f90cbb6ed8ed9f95c20acc3fbfdb92cabddb2e1a45bb7c45454b5d17e898f9b0cf8aa804536 +$(DL_FILE)_BLAKE2 = 0800b917a57745012308bb10d4ce8456d47233ae3420b1d64cb42e88a7156cd1ffcbcdab5df28c54fe3ab70a7f37ba41bd5ebcefe24915abf47b753a0bb05716 install : $(TARGET) @@ -72,8 +72,8 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar zxf $(DIR_DL)/$(DL_FILE) cd $(DIR_APP) && ./autogen.sh cd $(DIR_APP) && ./configure \ - --prefix=/usr \ - --disable-static + --prefix=/usr \ + --disable-static cd $(DIR_APP) && make $(MAKETUNING) cd $(DIR_APP) && make install @rm -rf $(DIR_APP) diff --git a/lfs/suricata b/lfs/suricata index 0b0de5654..7c02ec83a 100644 --- a/lfs/suricata +++ b/lfs/suricata @@ -24,7 +24,7 @@ include Config -VER = 7.0.10 +VER = 7.0.11 THISAPP = suricata-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = c33e3ccf0e5298f3548747a3d9bc52662cf97caa775a4f7e3689fe4bc95d2ad9269d344c67654ad6e03fe463054052bb5d5e720bc67040cb179b041cdb0423d2 +$(DL_FILE)_BLAKE2 = 5bdfc3715bed2faa49cc9096a30fb0f58c81c0ebe6cb82629d5ccddd75cf68af6b3a1e9ae2ed54cbbeea48d40c2e1c3348b52c19856ba9550b6c687653de8b47 install : $(TARGET) hooks/post-receive -- IPFire 2.x development tree