pkgsrc-WIP-changes archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

suricata: update to 8.0.2



Module Name:	pkgsrc-wip
Committed By:	kami <kisskamizeg%gmail.com@localhost>
Pushed By:	kami
Date:		Mon Nov 17 13:20:51 2025 +0100
Changeset:	b052a52d05fb6030e9a7ca5ff9e63a64a8b79e61

Modified Files:
	suricata/Makefile
	suricata/distinfo

Log Message:
suricata: update to 8.0.2

Upstream changes:

Security #8066: lua: stack overflow from unbounded stack allocation in LuaPushStringBuffer (8.0.x backport)(HIGH - CVE 2025-64344)
Security #8059: eve/http: stack overflow on large file transfers (8.0.x backport)(MODERATE - CVE 2025-64331)
Security #8058: util/swf: stack overflow on larger compressed data  (8.0.x backport)(LOW - CVE 2025-64332)
Security #8057: eve/http: stack overflow from big content type (8.0.x backport)(HIGH - CVE 2025-64333)
Security #8022: eve/alert: heap buffer overflow on verdict (8.0.x backport)(MODERATE - CVE 2025-64330)
Security #7981: http: unbounded memory growth for decompression (8.0.x backport)(CRITICAL - CVE 2025-64334)
Security #7960: detect/entropy: null deref when used with base64_data (8.0.x backport)(HIGH - CVE 2025-64335)
Security #8064: unix-socket: use after free if client command is too long (8.0.x backport)
Bug #8076: snmp: detection-only setting is broken (8.0.x backport)
Bug #8053: python/Makefile: too open file permissions for defaults.py (8.0.x backport)
Bug #8034: flow/timeouts: yaml configured values unused for bypassed (8.0.x backport)
Bug #8020: tls: certificate SAN is freed in case of any error (8.0.x backport)
Bug #8016: detect/ip.src: does not load with lua transform (8.0.x backport)
Bug #8007: anomaly/ether_type: always logged as big endian (8.0.x backport)
Bug #8005:  pcap-log: bpf-filter not applied when using multi mode (8.0.x backport)
Bug #7998: detect: replace keyword leaks memory (8.0.x backport)
Bug #7992: http2: wrong parsing of go away frames error code (8.0.x backport)
Bug #7990: dpdk: compile warning 'rte_eth_bond_members_get' is deprecated (8.0.x backport)
Bug #7976: dpdk: CPU exclude logic is broken (8.0.x backport)
Bug #7974: detect/files: signatures using file keywords on udp only app protos fail (8.0.x backport)
Bug #7961: mime: incorrect decoding of quoted-printable text attachments (8.0.x backport)
Bug #7943: runmode/dpdk: dpdk_vars initialized to NULL for any livedev (8.0.x backport)
Bug #7940: decoder/vxlan: packet drops with non-zero reserved fields (8.0.x backport)
Bug #7923: output/json: invalid IKE logs (8.0.x backport)
Bug #7911: eve/alert: incorrect verdict with pass + alert rule (8.0.x backport)
Bug #7910: lua/http: null dereference in accessor functions (8.0.x backport)
Feature #8072: flow: midstream exception policy "reject-both" support (8.0.x backport)
Task #7985: ci: Add multi-tenant test (8.0.x backport)
Task #7978: github/actions: add DPDK 23.11 build (8.0.x backport)
Task #5472: tracking: upgrading from 7 to 8
Documentation #7917: userguide: add section for rule hooks (8.0.x backport)
Documentation #7916: userguide: document tx scoped xbits (8.0.x backport)
Documentation #7914: devguide: Add Eve Output Plugins (8.0.x backport)

To see a diff of this commit:
https://wip.pkgsrc.org/cgi-bin/gitweb.cgi?p=pkgsrc-wip.git;a=commitdiff;h=b052a52d05fb6030e9a7ca5ff9e63a64a8b79e61

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

diffstat:
 suricata/Makefile | 2 +-
 suricata/distinfo | 6 +++---
 2 files changed, 4 insertions(+), 4 deletions(-)

diffs:
diff --git a/suricata/Makefile b/suricata/Makefile
index a54f83400a..798b307993 100644
--- a/suricata/Makefile
+++ b/suricata/Makefile
@@ -2,7 +2,7 @@
 # Local variables:
 # coding: unix
 # End:
-DISTNAME=		suricata-8.0.1
+DISTNAME=		suricata-8.0.2
 PKGREVISION=		1
 CATEGORIES=		net security
 MASTER_SITES=		https://www.openinfosecfoundation.org/download/
diff --git a/suricata/distinfo b/suricata/distinfo
index 5f667dea03..c921af2f57 100644
--- a/suricata/distinfo
+++ b/suricata/distinfo
@@ -1,8 +1,8 @@
 $NetBSD$
 
-BLAKE2s (suricata-8.0.1.tar.gz) = 4ce02db2eb8950cc1154c135abb0a39787fedb3ecfc25b0c3c4fd7eb2c617e7a
-SHA512 (suricata-8.0.1.tar.gz) = e87c2049b783c9d4c6b688b84e67330fb4600911a2ae22228990efad970a2d41edc1f28fa2faba0f5a6c4ff4a5bd5106c3ce9b9381efd312ab345ddae01c1ee0
-Size (suricata-8.0.1.tar.gz) = 44098838 bytes
+BLAKE2s (suricata-8.0.2.tar.gz) = 65271dd6e1f955266b47634db1acc508a68d8db151c23a16c12366879f0fdf42
+SHA512 (suricata-8.0.2.tar.gz) = 842c6aac70099500a0c82a6ca9e01cb9cd14652060e2c492b7df234f053116595dc9ead12c184982deed0afe2990f3fd1b7ef939475fdaff63e0727bba1dd313
+Size (suricata-8.0.2.tar.gz) = 44124259 bytes
 SHA1 (patch-configure) = 379edddcef392fecd2d1f3cb2a66b2223a0fca33
 SHA1 (patch-src_threads.h) = bd3764e1ac575d2b2c7b6b88ea2dbd93c3c5a4cb
 SHA1 (patch-src_tm-threads.c) = e3b905eac1de82b2af71cacce6c7395a61c156b1


Home | Main Index | Thread Index | Old Index