version: 1.3.8

diff --git a/CHANGELOG.md b/CHANGELOG.md
index eb2fb6714d93dd7b84d5fbd42b9e7d392449141c..ef32b21db45731588d6c5c1a3c3757f68bd5df4b 100644 (file)
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,9 @@
 # Change Log
 
+## 1.3.8 - 2026-06-30
+- Fix arbitrary file write in rule archive path traversal:
+  https://redmine.openinfosecfoundation.org/issues/8633
+
 ## 1.3.7 - 2025-10-31
 - Retain rule filename after converting to a drop rule:
   https://redmine.openinfosecfoundation.org/issues/7805

diff --git a/suricata/update/version.py b/suricata/update/version.py
index 1639ca648de650d0d841080875dd058ef4f6f7e0..5ff875603305453d2e19081cc9186600728fe357 100644 (file)
--- a/suricata/update/version.py
+++ b/suricata/update/version.py
@@ -4,4 +4,4 @@
 # Alpha: 1.0.0a1
 # Development: 1.0.0dev0
 # Release candidate: 1.0.0rc1
-version = "1.3.7"
+version = "1.3.8"