From: Jason Ish Date: Wed, 30 Jun 2021 14:26:14 +0000 (-0600) Subject: release: 5.0.7; update changelog; require htp 0.5.38 X-Git-Tag: suricata-5.0.7^0 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=eec7056f54a230b46e643ba96e5bb990e69ab178;p=thirdparty%2Fsuricata.git release: 5.0.7; update changelog; require htp 0.5.38 --- diff --git a/ChangeLog b/ChangeLog index 1b88ca8b32..83ea3babf5 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,3 +1,22 @@ +5.0.7 -- 2021-06-30 + +Security #4454: Buffer overread in SMTP SMTPParseCommandBDAT +Security #4485: heap-buffer-overflow WRITE in InspectionBufferSetup with use of InspectionBufferGetMulti +Security #4486: Infinite loops in when using InspectionBufferMultipleForList +Security #4513: Evasion possibility on wrong/unexpected ACK value in crafted SYN packets +Bug #4410: eve.drop: alerts option logs lowest priority alert +Bug #4412: segv in ApplyToU8Hash +Bug #4414: threshold: slow startup on threshold.config with many addresses in suppression +Bug #4418: detect: "drop" on protocol detect only rule doesn't drop flow +Bug #4422: Applayer Mismatch protocol both directions for kerberos AS-REQ/KDC_ERR_PREAUTH_REQUIRED exchange +Bug #4449: Properly set the ICMP emergency-bypassed value +Bug #4451: ipv6 & ftp & passive mode & error +Bug #4464: ftp: "g_expectation_data_id" and "g_expectation_id" in AppLayerExpectationHandle function +Bug #4469: SC_ERROR_CONF_YAML_ERROR anomaly logger error when in socket mode +Bug #4488: Timeout in ftp parsing rs_ftp_active_eprt +Bug #4543: modbus: Memory leak in signature parsing with pcre +Bug #4546: SWF decompression overread + 5.0.6 -- 2021-03-02 Bug #4230: tcp/async: incorrect flagging of ACK values as invalid diff --git a/configure.ac b/configure.ac index b777a44ebf..b1f9e1831c 100644 --- a/configure.ac +++ b/configure.ac @@ -1,4 +1,4 @@ - AC_INIT([suricata],[5.0.6]) + AC_INIT([suricata],[5.0.7]) m4_ifndef([AM_SILENT_RULES], [m4_define([AM_SILENT_RULES],[])])AM_SILENT_RULES([yes]) AC_CONFIG_HEADERS([config.h]) AC_CONFIG_SRCDIR([src/suricata.c]) @@ -1596,12 +1596,12 @@ echo exit 1 fi - PKG_CHECK_MODULES(LIBHTPMINVERSION, [htp >= 0.5.37],[libhtp_minver_found="yes"],[libhtp_minver_found="no"]) + PKG_CHECK_MODULES(LIBHTPMINVERSION, [htp >= 0.5.38],[libhtp_minver_found="yes"],[libhtp_minver_found="no"]) if test "$libhtp_minver_found" = "no"; then PKG_CHECK_MODULES(LIBHTPDEVVERSION, [htp = 0.5.X],[libhtp_devver_found="yes"],[libhtp_devver_found="no"]) if test "$libhtp_devver_found" = "no"; then echo - echo " ERROR! libhtp was found but it is neither >= 0.5.37, nor the dev 0.5.X" + echo " ERROR! libhtp was found but it is neither >= 0.5.38, nor the dev 0.5.X" echo exit 1 fi