From: Victor Julien Date: Tue, 16 Nov 2021 12:04:45 +0000 (+0100) Subject: release: 5.0.8; update changelog; require htp 0.5.39 X-Git-Tag: suricata-5.0.8^0 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=aac67dc8984e3b24f42f4cb399311daae3b9c769;p=thirdparty%2Fsuricata.git release: 5.0.8; update changelog; require htp 0.5.39 --- diff --git a/ChangeLog b/ChangeLog index 83ea3babf5..0bc1c35769 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,3 +1,32 @@ +5.0.8 -- 2021-11-16 + +Security #4635: tcp: crafted injected packets cause desync after 3whs +Security #4727: Bypass of Payload Detection on TCP RST with options of MD5header +Bug #4345: Failed assert in TCPProtoDetectCheckBailConditions size_ts > 1000000UL +Bug #4382: fileinfo "stored: false" even if the file is kept on disk +Bug #4626: DNP3: intra structure overflow in DNP3DecodeObjectG70V6 +Bug #4628: alert count shows up as 0 when stats are disabled +Bug #4631: Protocol detection : confusion with SMB in midstream +Bug #4639: Failed assertion in SMTP SMTPTransactionComplete +Bug #4646: TCP reassembly, failed assert app_progress > last_ack_abs, both sides need to be pruned +Bug #4647: rules: Unable to find the sm in any of the sm lists +Bug #4674: rules: mix of drop and pass rules issues +Bug #4676: rules: drop rules with noalert not fully dropping +Bug #4688: detect: too many prefilter engines lead to FNs +Bug #4690: nfs: failed assert self.tx_data.files_logged > 1 +Bug #4691: IPv6 : decoder event on invalid fragment length +Bug #4696: lua: file info callback returns wrong value +Bug #4718: protodetect: SEGV due to NULL ptr deref +Bug #4729: ipv6 evasions : fragmentation +Bug #4788: Memory leak in SNMP with DetectEngineState +Bug #4790: af-packet: threads sometimes get stuck in capture +Bug #4794: loopback: different AF_INET6 values per OS +Bug #4816: flow-manager: cond_t handling in emergency mode is broken +Bug #4831: SWF decompression overread +Bug #4833: Wrong list_id with transforms for http_client_body and http file_data +Optimization #3429: improve err msg for dataset rules parsing +Task #4835: libhtp 0.5.39 + 5.0.7 -- 2021-06-30 Security #4454: Buffer overread in SMTP SMTPParseCommandBDAT diff --git a/configure.ac b/configure.ac index b1f9e1831c..0ec59a7a86 100644 --- a/configure.ac +++ b/configure.ac @@ -1,4 +1,4 @@ - AC_INIT([suricata],[5.0.7]) + AC_INIT([suricata],[5.0.8]) m4_ifndef([AM_SILENT_RULES], [m4_define([AM_SILENT_RULES],[])])AM_SILENT_RULES([yes]) AC_CONFIG_HEADERS([config.h]) AC_CONFIG_SRCDIR([src/suricata.c]) @@ -1596,12 +1596,12 @@ echo exit 1 fi - PKG_CHECK_MODULES(LIBHTPMINVERSION, [htp >= 0.5.38],[libhtp_minver_found="yes"],[libhtp_minver_found="no"]) + PKG_CHECK_MODULES(LIBHTPMINVERSION, [htp >= 0.5.39],[libhtp_minver_found="yes"],[libhtp_minver_found="no"]) if test "$libhtp_minver_found" = "no"; then PKG_CHECK_MODULES(LIBHTPDEVVERSION, [htp = 0.5.X],[libhtp_devver_found="yes"],[libhtp_devver_found="no"]) if test "$libhtp_devver_found" = "no"; then echo - echo " ERROR! libhtp was found but it is neither >= 0.5.38, nor the dev 0.5.X" + echo " ERROR! libhtp was found but it is neither >= 0.5.39, nor the dev 0.5.X" echo exit 1 fi