+6.0.13 -- 2023-06-15
+
+Security #6119: datasets: absolute path in rules can overwrite arbitrary files (6.0.x backport)
+Bug #6138: Decode-events of IPv6 packets are not triggered (6.0.x backport)
+Bug #6136: suricata-update: dump-sample-configs: configuration files not found (6.0.x backport)
+Bug #6125: http2: cpu overconsumption in rust moving/memcpy in http2_parse_headers_blocks (6.0.x backport)
+Bug #6113: ips: txs still logged for dropped flow (6.0.x backport)
+Bug #6056: smtp: long line discard logic should be separate for server and client (6.0.x backport)
+Bug #6055: ftp: long line discard logic should be separate for server and client (6.0.x backport)
+Bug #5990: smtp: any command post a long command gets skipped (6.0.x backport)
+Bug #5982: smtp: Long DATA line post boundary is capped at 4k Bytes (6.0.x backport)
+Bug #5809: smb: convert transaction list to vecdeque (6.0.x backport)
+Bug #5604: counters: tcp.syn, tcp.synack, tcp.rst depend on flow (6.0.x backport)
+Bug #5550: dns: allow dns messages with invalid opcodes (6.0.x backport)
+Task #5984: libhtp 0.5.44 (6.0.x backport)
+Documentation #6134: userguide: add instructions/explanation for (not) running suricata with root (6.0.x backport)
+Documentation #6121: datasets: 6.0.x work-arounds for dataset supply chain attacks
+
6.0.12 -- 2023-05-08
Bug #6040: tcp: failed assertion ASSERT: !(ssn->state != TCP_SYN_SENT) (6.0.x backport)
- AC_INIT([suricata],[6.0.13-dev])
+ AC_INIT([suricata],[6.0.13])
m4_ifndef([AM_SILENT_RULES], [m4_define([AM_SILENT_RULES],[])])AM_SILENT_RULES([yes])
AC_CONFIG_HEADERS([src/autoconf.h])
AC_CONFIG_SRCDIR([src/suricata.c])
echo
exit 1
fi
- PKG_CHECK_MODULES(LIBHTPMINVERSION, [htp >= 0.5.43],[libhtp_minver_found="yes"],[libhtp_minver_found="no"])
+ PKG_CHECK_MODULES(LIBHTPMINVERSION, [htp >= 0.5.44],[libhtp_minver_found="yes"],[libhtp_minver_found="no"])
if test "$libhtp_minver_found" = "no"; then
PKG_CHECK_MODULES(LIBHTPDEVVERSION, [htp = 0.5.X],[libhtp_devver_found="yes"],[libhtp_devver_found="no"])
if test "$libhtp_devver_found" = "no"; then
echo
- echo " ERROR! libhtp was found but it is neither >= 0.5.43, nor the dev 0.5.X"
+ echo " ERROR! libhtp was found but it is neither >= 0.5.44, nor the dev 0.5.X"
echo
exit 1
fi
# Format:
#
# name {repo} {branch|tag}
-libhtp https://github.com/OISF/libhtp 0.5.x
+libhtp https://github.com/OISF/libhtp 0.5.44
suricata-update https://github.com/OISF/suricata-update 1.2.7