release: 6.0.7; update changelog

diff --git a/ChangeLog b/ChangeLog
index 930ee9a29a32a7b5ee9e6c0f5694e6818ba45c45..9c7c0bdba42c3cf6bb59be0687ad0c3bf3b47a3b 100644 (file)
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,29 @@
+6.0.7 -- 2022-09-27
+
+Security #5430: mqtt: DOS by quadratic with too many transactions in one parse (6.0.x backport)
+Bug #5559: BUG_ON triggered from TmThreadsInjectFlowById (6.0.x backport)
+Bug #5549: Failed assert DeStateSearchState (6.0.x)
+Bug #5548: tcp: assertion failed in DoInsertSegment (BUG_ON) (6.0.x)
+Bug #5547: rules: less strict parsing of unexpected flowbit options
+Bug #5546: rules: don't error on bad hex in content
+Bug #5540: detect: transform strip whitespace creates a 0-sized variable-length array: backport6
+Bug #5505: http2: slow http2_frames_get_header_value_vec because of allocation [backport6]
+Bug #5471: Reject action is no longer working (6.0.x backport)
+Bug #5467: rules: more graceful handling of anomalies for stable versions
+Bug #5459: Counters are not initialized in all places. (6.0.x backport)
+Bug #5448: nfs: add maximum number of operations per compound (6.0.x backport)
+Bug #5436: Infinite loop if the sniffing interface temporarily goes down (6.0.x backports)
+Bug #5335: flow: vlan.use-for-tracking is not used for ICMPv4 (6.0.x backport)
+Bug #4421: flow manager: using too much CPU during idle (6.0.x backport)
+Feature #5535: ips: add "reject" action to exception policies (6.0.x backport)
+Feature #5500: ips: midstream: add "exception policy" for midstream (6.0.x backport)
+Task #5552: libhtp 0.5.41
+Task #5551: doc: add exception policy documentation (6.0.x)
+Task #5533: detect/parse: add tests for parsing signatures with reject and drop action (6.0.x backport)
+Task #5525: exceptions: error out when invalid configuration value is passed (6.0.x backport)
+Task #5381: add `alert-queue-expand-fails` command-line option (6.0.x backport)
+Task #5328: python: distutils deprecation warning (6.0.x backport)
+
 6.0.6 -- 2022-07-12
 
 Security #5431: filestore: Segfault with filestore enabled and forced (6.0.x backport)

diff --git a/configure.ac b/configure.ac
index 8d6af56f72b94ebb100ceddbe1190b3511ebc622..f1376955716261c6c9b66df964d562603d4d98d4 100644 (file)
--- a/configure.ac
+++ b/configure.ac
@@ -1,4 +1,4 @@
-    AC_INIT([suricata],[6.0.7-dev])
+    AC_INIT([suricata],[6.0.7])
     m4_ifndef([AM_SILENT_RULES], [m4_define([AM_SILENT_RULES],[])])AM_SILENT_RULES([yes])
     AC_CONFIG_HEADERS([src/autoconf.h])
     AC_CONFIG_SRCDIR([src/suricata.c])
@@ -1644,12 +1644,12 @@
             echo
             exit 1
         fi
-        PKG_CHECK_MODULES(LIBHTPMINVERSION, [htp >= 0.5.40],[libhtp_minver_found="yes"],[libhtp_minver_found="no"])
+        PKG_CHECK_MODULES(LIBHTPMINVERSION, [htp >= 0.5.41],[libhtp_minver_found="yes"],[libhtp_minver_found="no"])
         if test "$libhtp_minver_found" = "no"; then
             PKG_CHECK_MODULES(LIBHTPDEVVERSION, [htp = 0.5.X],[libhtp_devver_found="yes"],[libhtp_devver_found="no"])
             if test "$libhtp_devver_found" = "no"; then
                 echo
-                echo "   ERROR! libhtp was found but it is neither >= 0.5.40, nor the dev 0.5.X"
+                echo "   ERROR! libhtp was found but it is neither >= 0.5.41, nor the dev 0.5.X"
                 echo
                 exit 1
             fi