From patchwork Fri Sep 27 16:08:49 2019 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Matthias Fischer X-Patchwork-Id: 2433 Return-Path: Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) server-digest SHA384 client-signature ECDSA (P-384) client-digest SHA384) (Client CN "mail01.haj.ipfire.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by web04.haj.ipfire.org (Postfix) with ESMTPS id 46fxYn4T8Fz42Tg for ; Fri, 27 Sep 2019 16:09:01 +0000 (UTC) Received: from mail02.haj.ipfire.org (mail02.haj.ipfire.org [172.28.1.201]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) server-digest SHA384 client-signature ECDSA (P-384) client-digest SHA384) (Client CN "mail02.haj.ipfire.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mail01.ipfire.org (Postfix) with ESMTPS id 46fxYl4hDGz2Kd; Fri, 27 Sep 2019 16:08:59 +0000 (UTC) Received: from mail02.haj.ipfire.org (localhost [127.0.0.1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 46fxYl2x1Qz2yjM; Fri, 27 Sep 2019 16:08:59 +0000 (UTC) Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) server-digest SHA384 client-signature ECDSA (P-384) client-digest SHA384) (Client CN "mail01.haj.ipfire.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 46fxYk1qX8z2xw1 for ; Fri, 27 Sep 2019 16:08:55 +0000 (UTC) Received: from Devel.localdomain (p4FF56DD1.dip0.t-ipconnect.de [79.245.109.209]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) server-digest SHA384) (Client did not present a certificate) by mail01.ipfire.org (Postfix) with ESMTPSA id 46fxYg2fwVz2Kd for ; Fri, 27 Sep 2019 16:08:55 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=201909ed25519; t=1569600535; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc; bh=gL82vnqLLAgOyNDrZDjLGwzjfNLbCuMP5WS2cHNAF8k=; b=JRjRpS1Muf/UBSC3xKBah2LsRjTpRfoSa1rTBuJNQJPj2YkfQp8ySDpj+zt46MHLw3HE2V W7Z1JJpm2HePHgCg== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=201909rsa; t=1569600535; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc; bh=gL82vnqLLAgOyNDrZDjLGwzjfNLbCuMP5WS2cHNAF8k=; b=KGM1R+NUe1aYFxrknrRwoerD6nXLpta6wUXC8ElyzbiC1lEGS+uw/hb/uEGAq8QAM0xIzh aahKmKPP3+2hQSkuyWhy/llLsXKmWJVRLxJlLR9oOBFdL4sADE9jB5GrcToyx11kLdcFCT XNJWaN4xyncY2aKIM0njscFRS3CEIG57G6UsWhX7v70E6gM70nZ1HcF71yofjhuBz64plZ HUkLtjrSeFi/qxA63VNnGeZmSM/LFoVGt/2OQh6H2xNNU3FxIq45TJ3lKaZpDb904G2O2q +p5kx27WO5If0vQPrkLEE+yg/zPpFHE0HRBGrOIxLEf+SiI6zxGaXjOqgHZGnQ== From: Matthias Fischer To: development@lists.ipfire.org Subject: [PATCH] suricata: Update to 4.1.5 Date: Fri, 27 Sep 2019 18:08:49 +0200 Message-Id: <20190927160849.1860-1-matthias.fischer@ipfire.org> Authentication-Results: mail01.ipfire.org; auth=pass smtp.auth=mfischer smtp.mailfrom=matthias.fischer@ipfire.org X-BeenThere: development@lists.ipfire.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: IPFire development talk List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: development-bounces@lists.ipfire.org Sender: "Development" Changelog: "4.1.5 -- 2019-09-24 Feature #3068: protocol parser: vxlan (4.1.x) Bug #2841: False positive alerts firing after upgrade suricata 3.0 -> 4.1.0 (4.1.x) Bug #2966: filestore (v1 and v2): dropping of "unwanted" files (4.1.x) Bug #3008: rust: updated libc crate causes depration warnings (4.1.x) Bug #3044: tftp: missing logs because of broken tx handling (4.1.x) Bug #3067: GeoIP keyword depends on now discontinued legacy GeoIP database (4.1.x) Bug #3094: Fedora rawhide af-packet compilation err (4.1.x) Bug #3123: bypass keyword: Suricata 4.1.x Segmentation Faults (4.1.x) Bug #3129: Fixes warning about size of integers in string formats (4.1.x) Bug #3159: SC_ERR_PCAP_DISPATCH with message "error code -2" upon rule reload completion (4.1.x) Bug #3164: Suricata 4.1.4: NSS Shutdown triggers crashes in test mode Bug #3168: tls: out of bounds read Bug #3170: defrag: out of bounds read Bug #3173: ipv4: ts field decoding oob read Bug #3175: File_data inspection depth while inspecting base64 decoded data (4.1.x) Bug #3184: decode/der: crafted input can lead to resource starvation Bug #3186: Multiple Content-Length headers causes HTP_STREAM_ERROR (4.1.x) Bug #3187: GET/POST HTTP-request with no Content-Length, http_client_body miss (4.1.x)" Signed-off-by: Matthias Fischer Reviewed-by: Stefan Schantl --- lfs/suricata | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/lfs/suricata b/lfs/suricata index 6f779d875..12dcfe08c 100644 --- a/lfs/suricata +++ b/lfs/suricata @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2018 IPFire Team # +# Copyright (C) 2007-2019 IPFire Team # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@ include Config -VER = 4.1.4 +VER = 4.1.5 THISAPP = suricata-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = cb8bf6b8330c44ae78dfb5b083a6fe82 +$(DL_FILE)_MD5 = 0dfd68f6f4314c5c2eed7128112eff3b install : $(TARGET)