mirror of
https://github.com/vincentmli/bpfire.git
synced 2026-04-09 18:45:54 +02:00
4d87fba16c
Excerpt from changelog: "7.0.6 -- 2024-06-26 Security #7042: defrag: id reuse can lead to invalid reassembly (7.0.x backport)(CVE 2024-37151) Security #7105: http2: oom from duplicate headers (7.0.x backport) Security #7033: http/range: segv when http.memcap is reached (7.0.x backport) Security #6988: modbus: txs without responses are never freed (7.0.x backport) Bug #7107: packet: app-layer-events incorrectly used on recycled packets (7.0.x backport) Bug #7064: util/radix-tree: Possible dereference of nullptr in case of unsuccess allocation of memory for node (7.0.x backport) Bug #7063: smtp/mime: data command rejected by pipelining server does not reset data mode (7.0.x backport) Bug #7060: smtp: split name logged as 2 names (7.0.x backport) Bug #7050: af-packet: failure to start up on many threads plus high load (7.0.x backport) Bug #7043: Crasher in HTTP chunked / StreamingBuffer (7.0.x backport) Bug #7038: pcap/log: MacOS rotates file well before limit is reached (7.0.x backport) Bug #7035: time: in offline mode, time can stay behind at pcap start (7.0.x backport) Bug #7023: unix-socket: iface-bypassed-stat crash (7.0.x backport) Bug #7021: unix-socket: hostbit commands don't properly release host (7.0.x backport) Bug #7015: rust: build with rust 1.78 with slice::from_raw_parts now requiring the pointer to be non-null (7.0.x backport) Bug #6990: tls.random buffers don't work as expected (7.0.x backport) Bug #6986: iprep: rule with '=,0' can't match (7.0.x backport) Bug #6975: detect: log relevant frames app-layer metdata (7.0.x backport) Bug #6950: decode/ppp: decoder.event.ppp.wrong_type on valid packet (7.0.x backport) Bug #6897: detect/port: upper boundary ports are not correctly handled (7.0.x backport) Bug #6895: detect/port: port grouping does not happen correctly if gap between a single and range port (7.0.x backport) Bug #6862: Lightweight rules profiling: crash when profiling ends (7.0.x backport) Bug #6848: alerts: wrongly using tx id 0 when there is no tx (7.0.x backport) Bug #6845: coverity: warning in port grouping code (7.0.x backport) Bug #6844: detect/port: port ranges are incorrect when a port is single as well as a part of range (7.0.x backport) Bug #6690: Ethernet src should match src ip (7.0.x backport) Bug #6520: detect-engine/port: recursive DetectPortInsert calls are expensive (7.0.x backport) Optimization #6830: detect/port: port grouping is quite slow in worst cases (7.0.x backport) Optimization #6829: detect/port: PortGroupWhitelist fn takes a lot of processing time (7.0.x backport) Feature #7010: JA4 support for TLS and QUIC (7.0.x backport) Feature #6557: Capability to have rules profiling on pcap run (7.0.x backport) Documentation #6910: userguide: document how to verify tar.gz signature (7.0.x backport) Documentation #6687: docs: port userguide build instruction changes from master-6.0.x (7.0.x backport) Documentation #6601: docs: update eBPF installation instructions (7.0.x backport)" Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org> Reviewed-by: Michael Tremer <michael.tremer@ipfire.org> Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
IPFire 2.x - The Open Source Firewall
What is IPFire?
IPFire is a hardened, versatile, state-of-the-art Open Source firewall based on Linux. Its ease of use, high performance in any scenario and extensibility make it usable for everyone. For a full list of features have a look here.
This repository contains the source code of IPFire 2.x which is used to build the whole distribution from scratch, since IPFire is not based on any other distribution.
Where can I get IPFire?
Just head over to https://www.ipfire.org/download
How do I use this software?
We have a long and detailed documentation located here which should answer most of your questions.
But I have some questions left. Where can I get support?
You can ask your question at our community located here. A complete list of our support channels can be found here.
How can I contribute?
We have another document for this. Please look here.