From: Shivani Bhardwaj Date: Tue, 31 Jan 2023 06:18:36 +0000 (+0530) Subject: release: 6.0.10; update changelog X-Git-Tag: suricata-6.0.10^0 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=49713ebaa0b8edb057d60f1cfe9126946645a848;p=thirdparty%2Fsuricata.git release: 6.0.10; update changelog --- diff --git a/ChangeLog b/ChangeLog index 35a41b15b9..ca3a37039a 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,3 +1,28 @@ +6.0.10 -- 2023-01-31 + +Security #5804: Suricata crashes while processing FTP (6.0.x backport) +Bug #5815: detect: config keyword prevents tx cleanup (6.0.x backport) +Bug #5812: nfs: debug validation triggered on nfs2 read +Bug #5810: smb/ntlmssp: parser incorrectly assumes fixed field order (6.0.x backport) +Bug #5806: exceptions: midstream flows are dropped if midstream=true && stream.midstream-policy=drop-flow (6.0.x backport) +Bug #5796: TLS Handshake Fragments not Reassembled (6.0.x backport) +Bug #5795: detect/udp: different detection from rules when UDP/TCP header is broken (6.0.x backport) +Bug #5793: decode: Padded packet to minimal Ethernet length marked with invalid length event (6.0.x backport) +Bug #5791: smb: unbounded file chunk queuing after gap (6.0.x backport) +Bug #5763: libbpf: Use of legacy code in eBPF/XDP programs (6.0.x backport) +Bug #5762: detect/pcre: JIT not disabled when OS doesn't allow RWX pages +Bug #5760: nfs: ASSERT: attempt to subtract with overflow (compound) (6.0.x backport) +Bug #5749: iprep/ipv6: warning issued on valid reputation input (6.0.x backport) +Bug #5744: netmap: 6.0.9 v14 backport causes known packet stalls from v14 implementation in "legacy" mode too +Bug #5738: smb: failed assertion (!((f->alproto == ALPROTO_SMB && txd->files_logged != 0))), function CloseFile, file output-file.c (6.0.x backport) +Bug #5735: smtp: quoted-printable encoding skips empty lines in files (6.0.x backport) +Bug #5723: eve: missing common fields like community id for some event types like RFB +Bug #5601: detect: invalid hex character in content leads to bad debug message (6.0.x backport) +Bug #5565: Excessive qsort/msort time when large number of rules using tls.fingerprint (6.0.x backport) +Bug #5299: YAML warning from default config on 6.0.5 +Optimization #5797: tls: support incomplete API to replace internal buffering +Optimization #5790: smb: set defaults for file chunk limits (6.0.x backport) + 6.0.9 -- 2022-11-28 Security #5710: smb: crash inside of streaming buffer Grow() (6.0.x backport) diff --git a/configure.ac b/configure.ac index c2e64470f3..13b2d4a864 100644 --- a/configure.ac +++ b/configure.ac @@ -1,4 +1,4 @@ - AC_INIT([suricata],[6.0.10-dev]) + AC_INIT([suricata],[6.0.10]) m4_ifndef([AM_SILENT_RULES], [m4_define([AM_SILENT_RULES],[])])AM_SILENT_RULES([yes]) AC_CONFIG_HEADERS([src/autoconf.h]) AC_CONFIG_SRCDIR([src/suricata.c])